This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft File: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json) Hash identifier: 1OQ7yFyjPn9ZaPuOOPgVQhjN8mFoll/2x3stLaQyBDE= Subject key identifier: 97:9D:0F:55:DD:ED:B9:8D:7A:4F:97:53:E4:8B:F4:C8:A9:15:AF:41 Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 Certificate issuer: /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Certificate serial: 019B3155A52F9771A8BED17D18331376F3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 12:00:54 +0000 Manifest this update: Thu 18 Dec 2025 12:00:54 +0000 Manifest next update: Fri 19 Dec 2025 12:00:54 +0000 Files and hashes: 1: KkzZdtSbSgev6F4EciFP374t71M.roa (hash: RKNA7btFBFTKM+7ILEeu2plNQgmHlkDMuCESaQkp038=) 2: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: eqqsqftsLgONzKKomhwN7sGZ+JpFtpzVIhgAyuJR9z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:a5:2f:97:71:a8:be:d1:7d:18:33:13:76:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Validity Not Before: Dec 18 12:00:54 2025 GMT Not After : Dec 19 12:00:54 2025 GMT Subject: CN=979d0f55ddedb98d7a4f9753e48bf4c8a915af41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:de:a4:d6:24:01:b1:53:c2:eb:2a:16:7e:f5: cd:c0:a1:e7:4b:be:cf:99:e2:f1:de:93:0a:8d:eb: ce:22:be:29:d3:b7:3c:e6:fe:33:71:9f:cc:36:d1: 7f:18:54:cf:37:e0:a5:e4:57:1d:94:57:d5:21:6f: 43:29:6f:36:4a:34:16:34:5b:93:db:d8:a7:ec:31: b6:5f:cc:99:f7:cd:8b:b7:f2:db:fb:3d:21:11:0c: 93:83:d2:25:4b:67:34:1d:41:5e:e9:7a:b7:6c:41: 41:6a:76:06:2c:98:63:24:e5:0e:db:83:5a:db:ee: e9:2c:18:cb:98:8f:a5:21:21:c9:0a:fc:fa:b9:d9: b6:9b:4b:d2:22:f7:ea:bc:7f:b1:f8:dc:a2:19:c3: f3:a9:54:f6:5e:c9:4a:74:02:11:73:6f:14:f6:0b: ac:22:19:ee:0b:e9:ef:0d:1c:24:76:9d:ee:11:c2: 11:dd:9f:e1:7f:4b:98:5e:54:df:68:9e:8b:ec:5d: 4c:08:ab:1a:ef:d5:c5:7f:99:04:cf:b3:d9:3b:a2: a4:e2:20:39:8a:f5:bb:5b:0c:9a:4f:15:66:96:86: f5:10:1c:9e:03:e1:c3:24:8b:42:97:88:a4:52:ed: 8a:44:d7:f5:ad:75:b5:2a:d7:dc:0a:04:55:1c:b0: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9D:0F:55:DD:ED:B9:8D:7A:4F:97:53:E4:8B:F4:C8:A9:15:AF:41 X509v3 Authority Key Identifier: keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:7a:44:fc:76:28:5b:21:7a:81:74:18:23:f9:26:03:13: 8b:88:ee:32:e9:29:06:0c:e9:8f:31:02:d0:f0:f4:42:b5:aa: 8d:d8:de:01:65:73:0d:c4:dc:41:85:a7:f4:f0:d7:b5:7e:c3: 16:d8:50:63:79:8f:da:94:16:32:3a:18:2d:5d:b4:c7:a6:32: 00:5a:ff:d8:33:91:aa:82:c1:cc:20:2d:be:b8:d5:1d:2e:13: 8e:4f:c9:63:71:49:37:fb:0f:59:0d:45:b1:a1:1e:d5:35:bf: 81:d3:1a:7c:43:f0:4b:f5:8f:b8:2f:06:0a:ee:3d:25:2b:b6: 75:e8:c1:8c:77:45:28:9a:4e:9b:15:c0:a8:65:f6:25:1e:99: 5e:14:fe:24:ce:dd:1e:c8:b6:ba:d1:32:71:7a:c5:ea:36:01: 46:d1:2f:c2:36:a4:e4:37:be:8d:f1:b5:a5:80:9b:66:96:37: 7e:91:84:b4:2b:7a:3c:36:36:d5:95:52:0f:3b:23:2d:1e:d4: bb:5f:3a:be:46:db:6d:06:98:f7:55:44:a2:6a:d3:b3:61:38: f4:00:57:94:b8:df:f5:73:a5:da:82:d6:66:0d:c5:a3:81:a3: 1f:f8:a4:33:ce:ec:11:06:97:e4:1d:1e:b6:c2:82:35:9f:c5: 20:12:81:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVaUvl3GovtF9GDMTdvPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGY4MTM2NmZmYzQzYzcxZjViYjUyMWY4MTUwMTc2MGVi ZWIwNzQwHhcNMjUxMjE4MTIwMDU0WhcNMjUxMjE5MTIwMDU0WjAzMTEwLwYDVQQD Eyg5NzlkMGY1NWRkZWRiOThkN2E0Zjk3NTNlNDhiZjRjOGE5MTVhZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg96k1iQBsVPC6yoWfvXNwKHnS77P meLx3pMKjevOIr4p07c85v4zcZ/MNtF/GFTPN+Cl5FcdlFfVIW9DKW82SjQWNFuT 29in7DG2X8yZ982Lt/Lb+z0hEQyTg9IlS2c0HUFe6Xq3bEFBanYGLJhjJOUO24Na 2+7pLBjLmI+lISHJCvz6udm2m0vSIvfqvH+x+NyiGcPzqVT2XslKdAIRc28U9gus IhnuC+nvDRwkdp3uEcIR3Z/hf0uYXlTfaJ6L7F1MCKsa79XFf5kEz7PZO6Kk4iA5 ivW7WwyaTxVmlob1EByeA+HDJItCl4ikUu2KRNf1rXW1KtfcCgRVHLAXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJedD1Xd7bmNek+XU+SL9MipFa9BMB8GA1UdIwQY MBaAFFqPgTZv/EPHH1u1IfgVAXYOvrB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMt ODAyZDA5Y2ZjODM1LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMtODAyZDA5Y2ZjODM1 LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUl6RPx2 KFsheoF0GCP5JgMTi4juMukpBgzpjzEC0PD0QrWqjdjeAWVzDcTcQYWn9PDXtX7D FthQY3mP2pQWMjoYLV20x6YyAFr/2DORqoLBzCAtvrjVHS4Tjk/JY3FJN/sPWQ1F saEe1TW/gdMafEPwS/WPuC8GCu49JSu2dejBjHdFKJpOmxXAqGX2JR6ZXhT+JM7d Hsi2utEycXrF6jYBRtEvwjak5De+jfG1pYCbZpY3fpGEtCt6PDY21ZVSDzsjLR7U u186vkbbbQaY91VEomrTs2E49ABXlLjf9XOl2oLWZg3Fo4GjH/ikM87sEQaX5B0e tsKCNZ/FIBKBUA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:06 2025 by rpki-client