This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft File: WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json) Hash identifier: 3rKFeMPyuSn0HZAN04L7ckVCQKyHW6en134J0ivEjew= Subject key identifier: 4B:C2:13:DE:81:AC:40:64:AA:3D:3C:E1:18:2D:6F:B8:5D:EF:38:AA Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 Certificate issuer: /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Certificate serial: 019B3DC7630105C21AACBEE0E545BB7C942F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft Manifest number: 16D6 Signing time: Sat 20 Dec 2025 22:00:35 +0000 Manifest this update: Sat 20 Dec 2025 22:00:35 +0000 Manifest next update: Sun 21 Dec 2025 22:00:35 +0000 Files and hashes: 1: 0fPXJz4ZkFhSnDl_qC3Oqnd5MPk.roa (hash: 9f23J/XrfHwop7pkXvCqZEzg16V5jFPr7gFFFr197JQ=) 2: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: dolFtA8hRFlILdpJ8I+rErRGF2z+FVggwbhq8DADhB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:63:01:05:c2:1a:ac:be:e0:e5:45:bb:7c:94:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Validity Not Before: Dec 20 22:00:35 2025 GMT Not After : Dec 21 22:00:35 2025 GMT Subject: CN=4bc213de81ac4064aa3d3ce1182d6fb85def38aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:f9:ec:61:8b:f9:c5:62:94:cd:95:de:a2: 14:1d:09:e2:b6:3b:e9:72:eb:7e:3b:08:4d:cb:da: 80:84:8e:da:8f:76:f1:19:10:d2:9a:26:38:be:98: a4:03:7c:32:2c:9a:83:02:a0:eb:7e:9d:24:1d:ec: 26:26:cb:d2:d3:02:79:fd:90:27:90:61:24:1d:e4: 71:97:8c:8c:07:61:f9:22:16:20:24:87:2b:0c:2e: 0a:40:38:0e:60:76:b3:d5:83:46:55:cc:f7:78:9a: 92:1f:a6:1d:05:0b:a7:6b:ec:5f:c8:0f:10:b2:e3: 0b:71:1d:a7:da:21:48:fa:65:c6:04:7c:bb:ff:57: 98:a7:a3:8a:2e:d8:95:9f:c7:bb:c7:38:38:f4:a1: f5:7a:15:fa:2b:aa:cf:75:89:70:5c:34:d0:f1:73: bc:67:15:58:7c:13:78:57:ee:e7:9b:42:fe:65:ae: a7:06:09:77:32:8a:63:e2:5f:05:b0:5e:dc:b3:5e: ef:e9:73:3f:b8:f0:3c:f6:af:66:8f:0a:0f:c8:da: ff:13:d2:83:57:a3:bd:cb:6d:7e:8b:20:9b:c4:d4: bc:5b:6d:c2:df:6c:92:b7:8a:57:60:cc:09:0b:79: 48:c4:74:f8:5b:f2:b8:0d:d5:32:9b:89:fb:94:36: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:13:DE:81:AC:40:64:AA:3D:3C:E1:18:2D:6F:B8:5D:EF:38:AA X509v3 Authority Key Identifier: keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:95:9d:d3:71:98:92:94:1e:cc:bf:8c:c9:bb:fe:ef:50:b7: 55:64:81:66:6f:ba:44:34:ff:98:48:a8:a4:a7:19:63:58:0d: 57:f4:6b:04:57:87:1f:96:8d:5b:d2:30:fd:99:7d:f3:a5:97: 22:69:c4:94:2a:6c:19:57:6b:62:7c:8e:51:fb:57:b4:db:e8: c1:30:c4:48:37:ba:43:7f:ea:79:f4:23:3a:c5:0d:72:84:c9: af:f2:6b:f9:a7:e4:da:f4:17:53:cd:2e:bd:5c:94:28:28:2a: 9c:d5:35:f5:03:5a:8f:bc:59:e3:01:f4:12:04:13:a8:48:4f: bf:ab:aa:3e:db:37:d7:da:9d:6e:47:bf:92:b0:b1:b0:b1:01: 54:a7:7e:47:95:82:ef:bc:ec:e3:d0:ea:3c:aa:5b:c8:d9:c8: 76:42:0c:e5:8b:59:ed:96:95:9f:64:a4:c7:b3:c8:e2:43:97: 62:69:c1:9d:96:4d:0e:04:0d:b7:e1:11:98:c6:36:cd:06:35: f4:67:b8:eb:02:27:93:1e:20:b8:fc:01:e1:5b:bf:97:0d:bf: 9a:22:a2:f6:93:20:ee:2a:3c:fc:72:a0:1c:82:4b:b3:fa:cf: 78:16:e2:2c:dc:6b:7e:86:b0:67:5e:37:b7:38:26:ed:55:59: 00:63:97:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2MBBcIarL7g5UW7fJQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTA2ODdhMjRkNmEzZTQxNGQ3OThkOWIyZmI2YzUyNTkx Y2JiMjMwHhcNMjUxMjIwMjIwMDM1WhcNMjUxMjIxMjIwMDM1WjAzMTEwLwYDVQQD Eyg0YmMyMTNkZTgxYWM0MDY0YWEzZDNjZTExODJkNmZiODVkZWYzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvj57GGL+cVilM2V3qIUHQnitjvp cut+OwhNy9qAhI7aj3bxGRDSmiY4vpikA3wyLJqDAqDrfp0kHewmJsvS0wJ5/ZAn kGEkHeRxl4yMB2H5IhYgJIcrDC4KQDgOYHaz1YNGVcz3eJqSH6YdBQuna+xfyA8Q suMLcR2n2iFI+mXGBHy7/1eYp6OKLtiVn8e7xzg49KH1ehX6K6rPdYlwXDTQ8XO8 ZxVYfBN4V+7nm0L+Za6nBgl3Mopj4l8FsF7cs17v6XM/uPA89q9mjwoPyNr/E9KD V6O9y21+iyCbxNS8W23C32ySt4pXYMwJC3lIxHT4W/K4DdUym4n7lDarBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvCE96BrEBkqj084Rgtb7hd7ziqMB8GA1UdIwQY MBaAFFjgaHok1qPkFNeY2bL7bFJZHLsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgt ZWI4NjEyNDU3NzE1LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgtZWI4NjEyNDU3NzE1 LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZWd03GY kpQezL+Mybv+71C3VWSBZm+6RDT/mEiopKcZY1gNV/RrBFeHH5aNW9Iw/Zl986WX ImnElCpsGVdrYnyOUftXtNvowTDESDe6Q3/qefQjOsUNcoTJr/Jr+afk2vQXU80u vVyUKCgqnNU19QNaj7xZ4wH0EgQTqEhPv6uqPts319qdbke/krCxsLEBVKd+R5WC 77zs49DqPKpbyNnIdkIM5YtZ7ZaVn2Skx7PI4kOXYmnBnZZNDgQNt+ERmMY2zQY1 9Ge46wInkx4guPwB4Vu/lw2/miKi9pMg7io8/HKgHIJLs/rPeBbiLNxrfoawZ143 tzgm7VVZAGOXpg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:27:41 2025 by rpki-client