This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft File: WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json) Hash identifier: +KcWt+oL6JkApsoVUBVEc+firmDeICsBPdSb9CAIeR4= Subject key identifier: CC:B1:22:30:17:06:B8:97:84:1D:F2:52:66:27:51:E5:92:64:74:77 Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6 Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6 Certificate serial: 019B601C5C2ABEEEFF9E4BCF16E83F2ED7A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft Manifest number: 1244 Signing time: Sat 27 Dec 2025 14:00:29 +0000 Manifest this update: Sat 27 Dec 2025 14:00:29 +0000 Manifest next update: Sun 28 Dec 2025 14:00:29 +0000 Files and hashes: 1: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: kgENsyiw7qHinaA6W5REc189EfAE1a86ijXBivLoc00=) 2: whcvZpTpzvlbrJt7O3nmd0nRfXA.roa (hash: uHBrfBFZVuPLEmFMxJBXGMMbHMabPdSiEixhmy3o8Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:5c:2a:be:ee:ff:9e:4b:cf:16:e8:3f:2e:d7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6 Validity Not Before: Dec 27 14:00:29 2025 GMT Not After : Dec 28 14:00:29 2025 GMT Subject: CN=ccb122301706b897841df252662751e592647477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:fe:23:d7:ec:69:cd:01:46:1d:d7:aa:b3: c7:f5:0b:3c:2a:99:f0:4b:4f:c8:a8:a2:f0:12:07: ae:d5:99:6d:0c:7c:08:4e:03:ea:0b:cc:bf:13:c9: 07:7d:15:54:e7:99:df:dd:38:50:1e:1d:27:1e:c2: af:26:1e:ea:e3:61:51:90:fa:6c:c4:b9:e1:6d:7e: da:56:b8:0e:2b:9d:dc:2d:22:1e:18:98:46:f7:d2: ff:b3:fe:55:17:35:5e:ee:ca:a1:52:e0:b4:f4:47: 50:c6:de:36:90:13:2b:f0:b9:5d:f2:cb:95:cb:3f: e8:44:bb:db:d2:53:a3:ea:d4:a5:67:f0:ea:a3:ee: 35:96:d7:52:fa:a5:78:0d:ea:61:55:77:de:c2:08: 39:a8:c7:31:53:51:3f:11:11:7b:ed:3f:76:07:f3: 9a:96:68:95:4a:d7:d9:a5:78:e4:85:b6:ed:ae:f9: 75:9c:55:e7:58:3a:7a:87:86:b0:c1:94:ea:2b:29: 3b:95:67:30:85:c3:51:ad:a3:7f:4f:a4:9d:39:26: 0e:03:9a:3f:09:6b:21:ab:68:8d:d1:9f:20:1f:6f: 05:f6:4d:ba:7e:f6:6e:d6:85:f7:a9:24:c1:d7:21: 8a:fe:ca:b8:68:20:11:3e:1c:f6:d3:9d:07:91:cb: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B1:22:30:17:06:B8:97:84:1D:F2:52:66:27:51:E5:92:64:74:77 X509v3 Authority Key Identifier: keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e0:6b:81:9f:a0:9a:a0:0b:6c:4d:ff:aa:cf:a6:d2:ae:77: 10:9f:bd:2f:74:b5:96:70:64:06:54:9a:1e:51:58:13:34:b5: 83:6a:a6:0f:39:8a:6b:8c:90:05:e3:ef:78:b5:b0:52:3d:e5: 72:fc:7e:3a:dd:7d:d8:5f:a2:50:ec:36:19:81:04:b5:a5:c1: 86:a9:2a:14:30:bd:17:3b:49:35:3d:34:b9:fd:31:d1:da:7d: 85:16:2b:b6:26:76:a1:36:1a:66:61:ea:93:e0:bb:b5:79:a4: d6:36:58:62:d9:3a:3a:33:9a:c7:45:a7:c7:bd:ef:43:56:b5: 18:de:63:81:24:a9:dd:79:dc:c5:b8:45:e3:d2:32:38:42:24: a8:16:79:f8:38:07:ff:df:8c:cc:13:e0:74:07:86:1d:79:88: 8b:25:5b:68:8d:1d:7c:23:c2:19:d1:04:19:0e:6b:f4:8d:7b: 59:16:4a:df:13:10:f0:2e:2b:a7:6f:42:70:8a:03:bc:5f:86: 3d:8d:01:17:0b:26:57:dd:68:dc:ff:b5:53:66:ac:72:2c:b4: 28:58:fb:4c:2a:ce:9a:35:2e:0e:99:45:a8:80:00:f8:45:48: 5b:5d:5c:94:15:75:cf:c1:2b:42:ef:dc:6a:8d:54:fe:b0:fe: c3:bb:9a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHFwqvu7/nkvPFug/LtemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhODY1NWViZjk0NDUwMDAyNWE1ZjA3NWJhN2JkZTY0MTU4 NGZkYTYwHhcNMjUxMjI3MTQwMDI5WhcNMjUxMjI4MTQwMDI5WjAzMTEwLwYDVQQD EyhjY2IxMjIzMDE3MDZiODk3ODQxZGYyNTI2NjI3NTFlNTkyNjQ3NDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/+I9fsac0BRh3XqrPH9Qs8Kpnw S0/IqKLwEgeu1ZltDHwITgPqC8y/E8kHfRVU55nf3ThQHh0nHsKvJh7q42FRkPps xLnhbX7aVrgOK53cLSIeGJhG99L/s/5VFzVe7sqhUuC09EdQxt42kBMr8Lld8suV yz/oRLvb0lOj6tSlZ/Dqo+41ltdS+qV4DephVXfewgg5qMcxU1E/ERF77T92B/Oa lmiVStfZpXjkhbbtrvl1nFXnWDp6h4awwZTqKyk7lWcwhcNRraN/T6SdOSYOA5o/ CWshq2iN0Z8gH28F9k26fvZu1oX3qSTB1yGK/sq4aCARPhz2050HkcsKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyxIjAXBriXhB3yUmYnUeWSZHR3MB8GA1UdIwQY MBaAFFqGVev5RFAAJaXwdbp73mQVhP2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUt ZjJiNTU2ZWQ2OTkwLzEvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUtZjJiNTU2ZWQ2OTkw LzEvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluBrgZ+g mqALbE3/qs+m0q53EJ+9L3S1lnBkBlSaHlFYEzS1g2qmDzmKa4yQBePveLWwUj3l cvx+Ot192F+iUOw2GYEEtaXBhqkqFDC9FztJNT00uf0x0dp9hRYrtiZ2oTYaZmHq k+C7tXmk1jZYYtk6OjOax0Wnx73vQ1a1GN5jgSSp3XncxbhF49IyOEIkqBZ5+DgH /9+MzBPgdAeGHXmIiyVbaI0dfCPCGdEEGQ5r9I17WRZK3xMQ8C4rp29CcIoDvF+G PY0BFwsmV91o3P+1U2asciy0KFj7TCrOmjUuDplFqIAA+EVIW11clBV1z8ErQu/c ao1U/rD+w7uadw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:43:59 2025 by rpki-client