This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
File:                     WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json)
Hash identifier:          FVJJytA2YdL6L6TbPKQ+0JLwlOEliFy6aZqUOJ8jnkc=
Subject key identifier:   F5:78:B6:59:B5:64:B3:BF:81:ED:50:35:1C:61:03:C6:C6:F3:76:36
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Certificate issuer:       /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial:       019B3BD906C96BE786C863477AB985E0BF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
Manifest number:          16D5
Signing time:             Sat 20 Dec 2025 13:00:37 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:37 +0000
Manifest next update:     Sun 21 Dec 2025 13:00:37 +0000
Files and hashes:         1: 0fPXJz4ZkFhSnDl_qC3Oqnd5MPk.roa (hash: 9f23J/XrfHwop7pkXvCqZEzg16V5jFPr7gFFFr197JQ=)
                          2: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: LY5fkAhVd9OH77t6u3Z8kD65mDom7IBf2tnXNz0slMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:06:c9:6b:e7:86:c8:63:47:7a:b9:85:e0:bf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
        Validity
            Not Before: Dec 20 13:00:37 2025 GMT
            Not After : Dec 21 13:00:37 2025 GMT
        Subject: CN=f578b659b564b3bf81ed50351c6103c6c6f37636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:a2:ea:d1:0f:5d:c5:29:e1:a7:09:a1:11:
                    0c:84:54:f7:0d:42:30:34:c2:c7:24:34:bd:9e:d1:
                    14:93:60:d8:b2:b9:d8:33:db:c9:92:59:94:78:96:
                    b8:2e:3a:49:03:64:d9:9a:95:b7:0c:c8:7e:8d:1d:
                    bb:58:30:f8:bc:00:f0:7f:37:cb:20:20:86:32:9f:
                    da:19:9b:b7:68:98:f0:67:52:d6:93:54:cb:ee:61:
                    13:45:30:4c:8e:0a:9a:8c:9a:4c:95:0a:3b:49:5a:
                    ed:36:59:06:bb:54:8d:95:b9:87:58:60:20:84:dd:
                    ae:fa:d8:28:8a:fb:cc:00:83:ea:f6:e9:b8:65:c4:
                    87:22:47:55:9d:dc:87:14:22:71:45:35:19:3e:7b:
                    30:c4:b1:ce:ae:be:89:aa:51:fe:a1:e0:f3:70:0d:
                    83:6c:ea:d6:9b:3e:19:cf:b8:16:75:67:b8:58:f9:
                    30:5f:14:4d:3b:fa:c2:54:c8:ed:13:8e:79:44:13:
                    4a:54:ca:34:81:77:a7:c2:6c:32:7c:4c:1b:c3:3d:
                    28:d2:4c:52:a3:ea:77:0b:ed:70:67:75:ea:2b:e8:
                    4f:d2:16:a2:8d:81:90:7d:da:19:55:ca:8f:a9:a8:
                    b9:00:07:00:53:08:b1:27:c5:30:ab:77:80:6f:7e:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:B6:59:B5:64:B3:BF:81:ED:50:35:1C:61:03:C6:C6:F3:76:36
            X509v3 Authority Key Identifier:
                keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:40:d9:72:ba:ca:af:b3:dd:e7:02:9c:73:52:5e:3a:88:
         e7:76:36:8b:bf:a3:e8:8c:4e:c2:c8:09:d6:95:b6:68:b6:95:
         fa:58:bb:ed:23:8c:17:d7:52:6e:0b:ce:76:6a:7c:dd:46:15:
         be:e1:89:89:61:6f:c0:1a:e6:89:3a:cd:bd:5e:fe:b0:8d:bc:
         4e:46:db:32:0a:cc:29:bb:ed:e3:ea:30:59:7a:12:96:97:1b:
         94:81:75:8b:ce:d2:f9:14:6c:81:78:7b:15:be:a1:07:63:d5:
         c9:83:a7:bf:fc:93:ec:d9:69:ee:a5:a0:ca:04:e1:0e:a1:aa:
         d9:18:5c:9e:50:df:00:8b:14:21:51:17:6a:10:e8:9c:fb:b7:
         78:a6:66:59:b5:27:1a:b4:a8:3a:5d:0a:ab:49:7a:33:82:72:
         84:c7:12:68:03:f0:72:ba:7e:c2:ed:1b:67:fd:86:6c:15:2c:
         61:c6:7f:58:e9:bb:e8:d1:0f:25:b8:17:21:d2:77:9d:dd:3f:
         42:74:2e:65:c7:a2:36:b9:fc:d2:06:6e:9b:0b:24:27:af:6a:
         80:4d:de:b0:35:2e:5d:51:19:9f:81:f4:cc:96:80:5a:52:68:
         fa:ce:02:76:7c:c7:1b:4e:dd:4d:19:7d:94:de:e2:0c:20:55:
         18:7f:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:07:56 2025 by rpki-client