This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft File: bov4V64H8NXv1Xda1SnOTu2bfS8.mft (raw, json) Hash identifier: jwcCCwNmDt1KHHfyMaLaNnYBNp/QET0Z6ijD/eIKANA= Subject key identifier: 80:5C:DB:A2:F2:41:43:F0:F7:BC:D6:CF:30:56:FD:4A:BD:D3:B7:20 Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f Certificate serial: 019B5A88C157FFCB196F8A4182CF256710D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft Manifest number: 01FA Signing time: Fri 26 Dec 2025 12:01:10 +0000 Manifest this update: Fri 26 Dec 2025 12:01:10 +0000 Manifest next update: Sat 27 Dec 2025 12:01:10 +0000 Files and hashes: 1: bov4V64H8NXv1Xda1SnOTu2bfS8.crl (hash: F0En7qD8vTDCIIVQZnDiTZkPS6jIXUn7hSBZuWzxnzM=) 2: xg4TB9W34T_2H7A6G22FFhh44IA.roa (hash: clTVUz8w+JASk2G55oRaZ8c/R0rPlvX1Is7X2/fJkW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c1:57:ff:cb:19:6f:8a:41:82:cf:25:67:10:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f Validity Not Before: Dec 26 12:01:10 2025 GMT Not After : Dec 27 12:01:10 2025 GMT Subject: CN=805cdba2f24143f0f7bcd6cf3056fd4abdd3b720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:32:56:5a:9e:82:59:52:3b:b1:40:0c:3c: d0:b6:f5:77:f7:fb:53:fb:7b:5c:25:5b:c1:40:57: 06:4f:92:8c:35:b3:8c:80:b3:c4:54:1e:53:bd:1b: fb:8f:5c:8b:13:7f:48:cb:d6:52:7c:16:a5:c4:f4: 91:ac:d5:34:67:1e:cd:8d:f0:35:ff:4a:b4:e4:b7: 13:51:0f:ad:ff:a6:a4:99:54:c1:a9:61:83:f0:38: 42:53:cf:c7:4c:f3:7a:8a:d1:cb:ba:b3:89:45:0e: 32:a7:d7:93:3f:e4:09:ec:05:b0:58:ba:0f:9f:aa: 89:33:ee:3e:03:09:f4:f2:97:6a:1a:26:2c:fb:30: f3:d4:ad:ea:20:d8:4f:e5:c5:b4:d5:ee:9a:db:bb: 55:70:07:dd:97:27:4e:aa:df:d1:cc:9d:4a:b9:a9: 4c:29:07:25:69:18:ab:13:29:4d:d2:bb:76:30:9c: c4:b2:6a:d0:b3:73:94:45:97:9d:0a:f2:14:1b:52: ac:c1:86:f4:64:65:f0:29:e4:e8:cf:d2:67:9c:b5: 99:e5:e2:54:95:25:04:b6:9d:e3:5e:0f:89:35:9e: 08:8d:c3:cc:3b:a9:21:33:94:94:5b:c1:85:49:d0: 7e:9d:a2:da:6a:c9:d2:6c:89:be:d3:0e:dd:0b:a7: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5C:DB:A2:F2:41:43:F0:F7:BC:D6:CF:30:56:FD:4A:BD:D3:B7:20 X509v3 Authority Key Identifier: keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:63:2c:01:fc:67:42:0b:9e:7c:30:62:41:50:c3:fb:23:6f: 3e:0c:fe:66:3b:c7:a7:92:e5:39:72:e1:53:c4:6b:0f:4c:67: 34:dc:6b:02:9a:22:63:88:4a:05:af:79:e2:ca:6b:aa:36:96: 80:c3:08:e3:44:c6:fa:66:57:53:7f:25:db:ba:f2:2f:a8:68: 38:96:26:df:76:50:36:bf:69:54:69:8f:e0:ed:8f:e6:97:8b: 64:f2:0e:c0:42:ff:1f:7b:31:40:1b:ec:b1:93:fa:4b:c1:c8: 14:ff:cd:83:ad:cd:ce:fe:f3:9d:45:f5:6e:7d:58:ed:d4:00: fe:88:ef:cc:55:78:a5:5c:da:17:bf:21:80:9a:9c:4b:bf:ad: d9:45:b3:72:fc:a6:e7:87:e8:33:f5:f0:4f:7c:62:86:14:d2: 52:7b:6d:c2:bd:c4:50:bb:48:8f:2d:fe:5d:2a:36:ba:6a:57: 75:43:50:8d:1c:09:28:d7:c9:bb:6c:e2:59:66:26:4c:de:a0: 9d:ba:79:ce:54:f6:5c:d1:74:af:87:d3:fe:c1:67:e8:46:df: 9f:be:bc:c5:44:64:30:b5:c8:7e:64:bf:4d:58:8b:9f:52:97: a1:3c:89:d0:37:6b:a0:a3:0d:2c:b7:0f:b5:d8:96:96:e0:4b: a4:c3:9f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMFX/8sZb4pBgs8lZxDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGJmODU3YWUwN2YwZDVlZmQ1Nzc1YWQ1MjljZTRlZWQ5 YjdkMmYwHhcNMjUxMjI2MTIwMTEwWhcNMjUxMjI3MTIwMTEwWjAzMTEwLwYDVQQD Eyg4MDVjZGJhMmYyNDE0M2YwZjdiY2Q2Y2YzMDU2ZmQ0YWJkZDNiNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBkyVlqegllSO7FADDzQtvV39/tT +3tcJVvBQFcGT5KMNbOMgLPEVB5TvRv7j1yLE39Iy9ZSfBalxPSRrNU0Zx7NjfA1 /0q05LcTUQ+t/6akmVTBqWGD8DhCU8/HTPN6itHLurOJRQ4yp9eTP+QJ7AWwWLoP n6qJM+4+Awn08pdqGiYs+zDz1K3qINhP5cW01e6a27tVcAfdlydOqt/RzJ1KualM KQclaRirEylN0rt2MJzEsmrQs3OURZedCvIUG1KswYb0ZGXwKeToz9JnnLWZ5eJU lSUEtp3jXg+JNZ4IjcPMO6khM5SUW8GFSdB+naLaasnSbIm+0w7dC6c2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBc26LyQUPw97zWzzBW/Uq907cgMB8GA1UdIwQY MBaAFG6L+FeuB/DV79V3WtUpzk7tm30vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNDUxNDctMzZiZS00OTgxLTg3YTMt YTZkY2I5ZmI4ZTZmLzEvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNDUxNDctMzZiZS00OTgxLTg3YTMtYTZkY2I5ZmI4ZTZm LzEvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmMsAfxn QguefDBiQVDD+yNvPgz+ZjvHp5LlOXLhU8RrD0xnNNxrApoiY4hKBa954sprqjaW gMMI40TG+mZXU38l27ryL6hoOJYm33ZQNr9pVGmP4O2P5peLZPIOwEL/H3sxQBvs sZP6S8HIFP/Ng63Nzv7znUX1bn1Y7dQA/ojvzFV4pVzaF78hgJqcS7+t2UWzcvym 54foM/XwT3xihhTSUnttwr3EULtIjy3+XSo2umpXdUNQjRwJKNfJu2ziWWYmTN6g nbp5zlT2XNF0r4fT/sFn6Ebfn768xURkMLXIfmS/TViLn1KXoTyJ0DdroKMNLLcP tdiWluBLpMOfrw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:08 2025 by rpki-client