This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json) Hash identifier: HdfYU5q/UffhOLAVORfE17BPzeh+pSZJ2KQQnI83L9I= Subject key identifier: 10:F8:95:49:A2:8C:3F:6F:66:F5:C4:22:9F:8F:13:1B:64:8A:86:20 Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Certificate serial: 019B104A884CF193584CC52D869A414E5460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 02:01:18 +0000 Manifest this update: Fri 12 Dec 2025 02:01:18 +0000 Manifest next update: Sat 13 Dec 2025 02:01:18 +0000 Files and hashes: 1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=) 2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: YA7soPgQQXMQSqUuzezEleeRWczZpc1JYSAQG4qPZtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:88:4c:f1:93:58:4c:c5:2d:86:9a:41:4e:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Validity Not Before: Dec 12 02:01:18 2025 GMT Not After : Dec 13 02:01:18 2025 GMT Subject: CN=10f89549a28c3f6f66f5c4229f8f131b648a8620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:81:0b:54:77:a4:2a:21:6d:a7:87:e0:04: 7b:56:7d:f1:40:6b:64:3b:74:55:7f:4d:f4:30:85: e6:85:57:57:65:5d:4a:32:a2:75:c7:71:a8:89:e0: 0d:a3:60:ff:fc:5c:6d:38:87:c0:ed:85:db:b5:8b: cc:55:fe:70:c5:a9:fd:0c:ad:f5:74:a0:53:7e:3f: 60:69:65:de:58:fc:43:0e:cd:71:d1:f3:75:a5:b0: 8f:d9:ef:d6:d4:d6:49:e1:30:aa:62:0d:8b:5a:fa: 19:c9:38:ad:02:cf:39:81:a1:45:71:cb:69:0a:fb: 52:43:02:af:c1:12:8c:12:3a:81:78:72:0b:e3:d0: 14:f6:37:92:7e:fb:60:33:ad:e8:20:43:e4:92:02: 8d:c4:18:d4:df:1d:1c:46:48:fb:95:6d:e0:66:07: b4:9b:78:e0:64:e3:1f:c2:9f:f6:a4:dc:d0:0c:59: 71:e7:8f:0e:4b:04:a0:4e:d4:4d:ff:39:9f:fb:a9: d0:18:0a:ea:10:04:78:26:04:4d:1a:73:d8:e5:40: 60:7f:3e:73:27:10:c1:91:9d:4b:03:66:46:c4:82: a4:70:c0:9a:1d:9d:ba:9f:74:f0:d3:27:89:2d:6d: 89:6d:6c:85:1d:1c:d6:f9:40:15:9b:d6:ff:96:83: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:95:49:A2:8C:3F:6F:66:F5:C4:22:9F:8F:13:1B:64:8A:86:20 X509v3 Authority Key Identifier: keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:0f:79:eb:40:3c:8c:d6:cf:06:26:20:3f:4b:55:c2:09:e2: 71:71:c7:1c:70:bc:66:4f:50:0e:c5:ab:19:c0:c2:1a:c5:89: a5:e4:26:46:6a:62:3c:52:05:1f:b5:08:d6:d1:67:66:52:ce: 5f:f2:8b:66:dd:f4:51:e1:26:33:8f:7a:fd:80:cb:7f:56:e8: fb:cd:ab:8c:58:5f:32:4a:e3:9e:c7:57:9e:83:a6:fd:8d:eb: dd:14:3d:62:a0:0c:7f:81:e1:25:fd:f5:1e:82:d4:41:39:e8: f4:37:1e:5d:36:59:20:b2:15:cd:41:35:8a:b4:6a:0a:c2:a7: 5f:21:63:25:87:78:69:13:79:f6:d1:67:e4:85:b9:50:0c:05: a2:32:d7:e3:b2:37:f8:93:70:9a:07:07:7c:13:01:5a:b9:0a: 2f:f9:7d:21:84:88:48:75:4f:20:5d:92:c3:ab:b4:3b:c5:6f: fc:5b:d9:cf:60:bd:44:ff:1d:ee:57:d1:76:b6:e8:c2:cd:4d: d9:99:8b:9b:64:93:f4:9f:c2:c6:20:e9:da:50:44:a9:50:da: 8d:80:44:92:f7:15:79:62:1c:ba:bf:ec:9a:a2:f5:7d:79:8f: 7c:db:dd:b4:ad:26:ce:7b:58:74:8c:bb:12:03:3b:e4:81:eb: 20:a1:52:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSohM8ZNYTMUthppBTlRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm YzliMzAwHhcNMjUxMjEyMDIwMTE4WhcNMjUxMjEzMDIwMTE4WjAzMTEwLwYDVQQD EygxMGY4OTU0OWEyOGMzZjZmNjZmNWM0MjI5ZjhmMTMxYjY0OGE4NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5+BC1R3pCohbaeH4AR7Vn3xQGtk O3RVf030MIXmhVdXZV1KMqJ1x3GoieANo2D//FxtOIfA7YXbtYvMVf5wxan9DK31 dKBTfj9gaWXeWPxDDs1x0fN1pbCP2e/W1NZJ4TCqYg2LWvoZyTitAs85gaFFcctp CvtSQwKvwRKMEjqBeHIL49AU9jeSfvtgM63oIEPkkgKNxBjU3x0cRkj7lW3gZge0 m3jgZOMfwp/2pNzQDFlx548OSwSgTtRN/zmf+6nQGArqEAR4JgRNGnPY5UBgfz5z JxDBkZ1LA2ZGxIKkcMCaHZ26n3Tw0yeJLW2JbWyFHRzW+UAVm9b/loM7qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBD4lUmijD9vZvXEIp+PExtkioYgMB8GA1UdIwQY MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQ9560A8 jNbPBiYgP0tVwgnicXHHHHC8Zk9QDsWrGcDCGsWJpeQmRmpiPFIFH7UI1tFnZlLO X/KLZt30UeEmM496/YDLf1bo+82rjFhfMkrjnsdXnoOm/Y3r3RQ9YqAMf4HhJf31 HoLUQTno9DceXTZZILIVzUE1irRqCsKnXyFjJYd4aRN59tFn5IW5UAwFojLX47I3 +JNwmgcHfBMBWrkKL/l9IYSISHVPIF2Sw6u0O8Vv/FvZz2C9RP8d7lfRdrbows1N 2ZmLm2ST9J/CxiDp2lBEqVDajYBEkvcVeWIcur/smqL1fXmPfNvdtK0mzntYdIy7 EgM75IHrIKFS5w== -----END CERTIFICATE-----Generated at Fri Dec 12 08:03:46 2025 by rpki-client