This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json) Hash identifier: NCsahqgEqnIF4DskYPa6fRyKQjRaMaEQt7G9Pd6YLwc= Subject key identifier: 30:97:03:F3:71:A6:0A:C9:68:B2:D8:8A:0A:ED:BF:EB:0D:76:C5:37 Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27 Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27 Certificate serial: 019B597682ED1406018DF5166D4D516D5977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:01:37 +0000 Manifest this update: Fri 26 Dec 2025 07:01:37 +0000 Manifest next update: Sat 27 Dec 2025 07:01:37 +0000 Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: 8KEUo7BgckNPdm0NlMvDDNjAvcwdtwgMNJo2WGrHV+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:82:ed:14:06:01:8d:f5:16:6d:4d:51:6d:59:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27 Validity Not Before: Dec 26 07:01:37 2025 GMT Not After : Dec 27 07:01:37 2025 GMT Subject: CN=309703f371a60ac968b2d88a0aedbfeb0d76c537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f6:ce:36:ee:de:e9:69:f8:59:29:bb:92:f1: 76:0b:c8:41:06:c2:04:c3:c4:8e:8d:11:6c:35:92: c3:ea:07:de:22:b8:1b:1e:81:08:25:15:42:ec:46: 8b:19:96:ed:1b:13:71:fb:17:d2:b0:2c:95:36:49: 7d:68:bb:76:0c:00:4d:aa:3d:03:68:a1:d2:c0:91: 08:76:f1:a5:8d:86:6b:49:af:6b:61:24:6a:5c:0f: 15:b3:f3:14:28:b8:71:00:42:29:0c:ab:87:33:1c: 6a:6e:01:8f:15:73:94:a5:08:c4:9c:d2:ba:8e:10: c0:d6:c3:7f:b8:8a:1b:0d:7a:2f:9b:03:bb:04:7a: c8:f5:c5:3a:60:a3:f9:5a:fa:27:28:69:13:89:a5: d0:86:aa:33:c0:f4:e4:7f:92:ef:17:63:1a:56:c9: d2:01:2e:6f:4c:3d:00:3b:fa:96:cb:e5:ca:c2:3b: 25:6d:9d:a6:20:29:43:d6:e0:cd:70:a5:52:51:62: fe:1f:68:e6:50:6b:cb:7d:62:5b:45:10:00:1e:a4: 24:97:08:4a:c2:80:ac:37:7d:8a:bc:7f:1c:3a:94: 26:83:81:e5:72:98:f3:f4:0b:71:c0:ca:9f:0f:6c: 6f:36:65:4d:13:c2:af:cd:5c:e6:d5:23:f8:89:01: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:97:03:F3:71:A6:0A:C9:68:B2:D8:8A:0A:ED:BF:EB:0D:76:C5:37 X509v3 Authority Key Identifier: keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:63:78:67:53:e4:fe:53:07:5b:29:9b:46:0b:99:bd:b7:4c: 7d:4e:d3:d6:14:de:80:bc:07:e6:16:e2:fc:f3:0f:35:d9:28: a6:42:c6:55:f6:ce:84:6b:86:03:1c:51:ad:15:de:2b:ab:6f: ef:b9:0f:45:63:b8:66:55:32:9a:17:10:51:c5:5b:c6:8d:c8: 55:35:6f:4c:b2:35:e3:4c:18:fd:9c:ec:bd:50:4e:7d:91:5f: 59:d7:54:ae:02:5a:21:d3:18:4e:25:e9:b7:61:4e:f6:c3:6c: e4:2b:d5:28:81:9f:ee:fc:47:a6:fd:a7:a2:4c:86:f5:d2:6a: ed:24:dd:b9:42:a1:e1:ad:38:d4:cf:d9:66:6a:09:4b:11:20: 7b:ce:9b:a3:f2:03:30:fd:1c:84:5f:61:be:68:3b:27:ce:e7: e6:68:00:f8:ec:a0:20:73:89:e4:3d:e9:4f:24:42:50:d7:20: 47:c1:51:df:39:30:24:03:c1:cb:90:48:9a:69:26:77:eb:08: da:9f:b8:59:d0:19:97:7c:70:09:0c:7d:51:7e:2d:a6:69:a2: 70:77:73:3e:82:de:e6:24:26:64:1e:98:71:f8:17:a4:61:e6: 6e:e0:f8:74:a5:ba:83:a8:74:70:28:0c:e0:5d:9a:10:2e:9c: 75:91:b7:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdoLtFAYBjfUWbU1RbVl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTIyMjg4Njc4ZWZmZjE1ZmVhNzlkZWYyNGM2MDY3Y2Uy NGFhMjcwHhcNMjUxMjI2MDcwMTM3WhcNMjUxMjI3MDcwMTM3WjAzMTEwLwYDVQQD EygzMDk3MDNmMzcxYTYwYWM5NjhiMmQ4OGEwYWVkYmZlYjBkNzZjNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fbONu7e6Wn4WSm7kvF2C8hBBsIE w8SOjRFsNZLD6gfeIrgbHoEIJRVC7EaLGZbtGxNx+xfSsCyVNkl9aLt2DABNqj0D aKHSwJEIdvGljYZrSa9rYSRqXA8Vs/MUKLhxAEIpDKuHMxxqbgGPFXOUpQjEnNK6 jhDA1sN/uIobDXovmwO7BHrI9cU6YKP5WvonKGkTiaXQhqozwPTkf5LvF2MaVsnS AS5vTD0AO/qWy+XKwjslbZ2mIClD1uDNcKVSUWL+H2jmUGvLfWJbRRAAHqQklwhK woCsN32KvH8cOpQmg4Hlcpjz9AtxwMqfD2xvNmVNE8KvzVzm1SP4iQHw+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCXA/NxpgrJaLLYigrtv+sNdsU3MB8GA1UdIwQY MBaAFATiIohnjv/xX+p53vJMYGfOJKonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NGY4ZjYtYjkwMC00NDA1LTkyN2Mt ODljOTg5MmMxNGYwLzEvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81NGY4ZjYtYjkwMC00NDA1LTkyN2MtODljOTg5MmMxNGYw LzEvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2N4Z1Pk /lMHWymbRguZvbdMfU7T1hTegLwH5hbi/PMPNdkopkLGVfbOhGuGAxxRrRXeK6tv 77kPRWO4ZlUymhcQUcVbxo3IVTVvTLI140wY/ZzsvVBOfZFfWddUrgJaIdMYTiXp t2FO9sNs5CvVKIGf7vxHpv2nokyG9dJq7STduUKh4a041M/ZZmoJSxEge86bo/ID MP0chF9hvmg7J87n5mgA+OygIHOJ5D3pTyRCUNcgR8FR3zkwJAPBy5BImmkmd+sI 2p+4WdAZl3xwCQx9UX4tpmmicHdzPoLe5iQmZB6YcfgXpGHmbuD4dKW6g6h0cCgM 4F2aEC6cdZG3/w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:31 2025 by rpki-client