This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json) Hash identifier: jDxkIpUbpUJehqpG5I4gsRuZQXiXCGrSiUW4fHAKL8U= Subject key identifier: F6:9A:18:A8:4F:A6:20:B6:E7:8B:FE:4C:B9:63:7E:45:ED:B6:F1:80 Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Certificate serial: 019BFC899414CFCE973191C76AB278D3FF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 23:00:33 +0000 Manifest this update: Mon 26 Jan 2026 23:00:33 +0000 Manifest next update: Tue 27 Jan 2026 23:00:33 +0000 Files and hashes: 1: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: d6FlUkeZLr3u69uF5Zi37zrdzcTIK6GUMFggrI/veyA=) 2: xmUoPe_uoUefJbAVDkhT4XlknC8.roa (hash: 8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:94:14:cf:ce:97:31:91:c7:6a:b2:78:d3:ff:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Validity Not Before: Jan 26 23:00:33 2026 GMT Not After : Jan 27 23:00:33 2026 GMT Subject: CN=f69a18a84fa620b6e78bfe4cb9637e45edb6f180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:13:0e:11:5e:e4:b5:95:33:29:7d:15:5c:ef: 70:04:88:ef:7f:05:22:e2:35:64:51:ef:dc:0d:5c: 3f:85:b0:92:f1:a4:78:15:33:17:ff:e2:77:6b:43: 93:42:45:84:5c:4a:a7:3d:6b:a1:a6:c5:e3:fc:7a: 63:72:63:04:84:42:b7:96:0a:8e:7a:99:e1:41:66: 14:37:2d:bb:f7:ba:fb:3e:2c:54:d3:3e:85:29:8f: 89:e8:62:b0:a7:5c:fb:30:07:61:57:81:b8:09:27: 98:b7:63:78:eb:e9:20:43:59:76:94:3f:85:97:ee: 5e:8b:77:39:01:c1:52:0d:72:b3:26:cd:35:87:ff: 68:6a:12:fc:49:99:7a:e6:e1:f1:fc:e2:67:c0:05: 0f:7a:a1:a2:27:38:e5:a3:2f:8d:17:df:b1:28:49: 75:89:1b:d1:9c:b7:5f:dc:16:fa:88:ac:01:88:b3: 95:22:fc:b9:96:a1:7a:a7:6d:7f:09:38:a4:82:bc: 23:7a:08:40:2a:d1:88:74:59:03:32:9e:e6:52:ff: de:98:a7:4a:13:00:f3:a7:d5:38:13:86:c7:fa:36: e3:4e:7c:e1:5a:37:31:2e:42:a1:e3:c9:6f:b5:49: 09:28:fa:2f:39:e6:4a:83:bb:f0:22:94:48:a2:11: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:18:A8:4F:A6:20:B6:E7:8B:FE:4C:B9:63:7E:45:ED:B6:F1:80 X509v3 Authority Key Identifier: keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a9:58:ba:c2:6f:9d:a6:34:db:ab:e4:76:eb:89:30:2f:9b: 01:55:cb:b8:07:64:e2:7b:d6:2e:38:a6:10:d5:07:20:5b:98: 68:f8:39:81:80:6a:c6:c6:b7:cf:b5:6c:38:37:99:a9:21:e7: ca:78:23:aa:43:e8:95:df:65:2b:25:68:cf:1e:17:88:f8:08: 66:45:ea:f0:85:df:9b:c0:9e:09:08:97:e3:90:90:5e:37:ad: 75:4b:12:ac:93:2b:bd:a6:62:8c:8e:05:bc:50:6d:f8:cf:0a: fc:7b:5f:15:06:0a:66:c1:c6:e2:83:ca:0e:84:84:e1:28:e8: 22:46:19:ea:41:f5:8c:74:03:1e:2a:0e:0f:97:83:93:15:ba: b0:6e:3d:49:69:5b:21:26:32:f1:23:dc:34:16:7a:1f:ca:16: e5:fc:34:a8:82:c7:1d:47:69:eb:3d:b7:4f:77:50:71:be:e8: 88:43:75:90:f1:04:ca:b3:f8:a9:e9:b6:28:7a:31:06:12:9d: db:db:b5:49:9b:22:b4:70:dd:0a:66:a5:f5:03:a7:78:53:1d: f6:3c:1e:08:ee:e8:9c:1b:5c:29:96:47:11:c7:c8:ed:9e:29: fa:3b:98:7a:f4:de:b3:fe:4f:f5:1d:76:4d:9d:12:5a:37:4e: 66:84:df:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iZQUz86XMZHHarJ40/9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm YzliMzAwHhcNMjYwMTI2MjMwMDMzWhcNMjYwMTI3MjMwMDMzWjAzMTEwLwYDVQQD EyhmNjlhMThhODRmYTYyMGI2ZTc4YmZlNGNiOTYzN2U0NWVkYjZmMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxMOEV7ktZUzKX0VXO9wBIjvfwUi 4jVkUe/cDVw/hbCS8aR4FTMX/+J3a0OTQkWEXEqnPWuhpsXj/HpjcmMEhEK3lgqO epnhQWYUNy2797r7PixU0z6FKY+J6GKwp1z7MAdhV4G4CSeYt2N46+kgQ1l2lD+F l+5ei3c5AcFSDXKzJs01h/9oahL8SZl65uHx/OJnwAUPeqGiJzjloy+NF9+xKEl1 iRvRnLdf3Bb6iKwBiLOVIvy5lqF6p21/CTikgrwjeghAKtGIdFkDMp7mUv/emKdK EwDzp9U4E4bH+jbjTnzhWjcxLkKh48lvtUkJKPovOeZKg7vwIpRIohE00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaaGKhPpiC254v+TLljfkXttvGAMB8GA1UdIwQY MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApalYusJv naY026vkduuJMC+bAVXLuAdk4nvWLjimENUHIFuYaPg5gYBqxsa3z7VsODeZqSHn yngjqkPold9lKyVozx4XiPgIZkXq8IXfm8CeCQiX45CQXjetdUsSrJMrvaZijI4F vFBt+M8K/HtfFQYKZsHG4oPKDoSE4SjoIkYZ6kH1jHQDHioOD5eDkxW6sG49SWlb ISYy8SPcNBZ6H8oW5fw0qILHHUdp6z23T3dQcb7oiEN1kPEEyrP4qem2KHoxBhKd 29u1SZsitHDdCmal9QOneFMd9jweCO7onBtcKZZHEcfI7Z4p+juYevTes/5P9R12 TZ0SWjdOZoTfTw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:19 2026 by rpki-client