This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json) Hash identifier: lSKkH7GFKDWMmj04SwGPJMWFD26IxhbVdBHXzjnyqEI= Subject key identifier: 4F:FD:5B:92:BF:FF:13:DF:AB:64:D3:DE:63:3B:17:EB:D9:D5:E8:49 Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Certificate serial: 019B24ACAA80ABEB7C12C59CB676F8435F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft Manifest number: 047D Signing time: Tue 16 Dec 2025 01:00:54 +0000 Manifest this update: Tue 16 Dec 2025 01:00:54 +0000 Manifest next update: Wed 17 Dec 2025 01:00:54 +0000 Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: yMT3g5K/vSd9WkG07PpA5cRJpXgwbZHBEBVjfZaXUYA=) 2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=) 3: _b4C80puZ4QQZiCjVn1A8db2DMM.roa (hash: BTn925eDDhMQbieFlWe3FviXvz8DAA+vgg6fsWjWAFs=) 4: t794Rq3oD5hjUa_fm7_FJ1kTjgY.roa (hash: e8v8ak73SzlgLcU/OgDyl114eL/kRo4XPjTTeE0Y/3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:aa:80:ab:eb:7c:12:c5:9c:b6:76:f8:43:5f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Validity Not Before: Dec 16 01:00:54 2025 GMT Not After : Dec 17 01:00:54 2025 GMT Subject: CN=4ffd5b92bfff13dfab64d3de633b17ebd9d5e849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:4f:50:41:db:38:db:de:d6:32:aa:46:32: cf:b3:8e:cf:64:e6:67:97:98:5f:66:08:fe:a3:cb: 6d:89:8f:e5:a9:8d:9b:68:ab:01:db:4f:69:f7:fd: ad:c4:c2:67:5e:1f:7b:fa:12:b5:10:6e:4f:64:fc: cf:5c:5c:75:0b:99:a6:e8:99:f1:9b:79:9a:e0:a7: ab:97:aa:9f:b5:b5:cf:d5:50:e7:ba:cd:cb:2c:b1: 43:86:dd:8c:24:82:75:8d:16:da:24:85:12:6b:9a: 91:b1:fa:54:e4:af:ca:2a:b6:89:dd:dc:67:8e:59: 60:f5:ed:12:d9:46:53:79:0f:42:2b:9c:22:f5:3f: 6c:7c:b9:f8:51:40:3e:2c:af:61:cd:ae:d0:c0:e7: c6:ad:f8:97:f2:90:02:fb:d9:a9:ee:9b:21:57:4b: 4a:fc:55:19:78:32:11:91:d9:60:b5:df:11:bc:35: 70:53:b2:71:27:77:c8:e3:cb:fa:59:1b:3e:b0:5c: ed:a5:ed:e9:49:c7:1f:68:ac:e3:8d:53:1b:da:b6: 22:70:59:af:28:1d:cc:ea:d4:62:c4:57:32:72:4e: ff:9a:04:cb:5b:16:f2:4c:a1:36:a0:02:fb:4d:9a: 5d:ed:83:5c:d5:66:c9:05:14:42:9f:1f:f6:c9:5b: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FD:5B:92:BF:FF:13:DF:AB:64:D3:DE:63:3B:17:EB:D9:D5:E8:49 X509v3 Authority Key Identifier: keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5f:86:81:ff:d4:d9:0b:f0:ab:3e:20:cf:a3:67:d4:c6:2c: 64:d8:68:44:fe:ae:95:be:fd:4d:b1:31:8e:17:ab:50:50:5e: 4a:9b:84:7b:d9:63:a0:df:5a:c3:52:c5:c4:62:90:c5:f8:e9: 4c:8c:41:2a:dc:77:d3:2c:a8:d1:63:f4:93:39:e8:7e:63:24: 75:1b:9d:ca:1f:42:11:77:e7:77:44:05:61:67:28:e8:97:7f: 3f:2d:fa:8b:96:c8:75:25:9f:03:da:ae:b5:12:d1:36:7f:de: e7:45:bf:78:52:ae:4f:81:47:f1:51:27:1a:fe:eb:f6:79:92: 5e:a9:a8:e0:1e:18:dc:d7:40:e0:d0:79:27:74:c7:eb:3f:6d: ee:6d:8a:89:06:1c:91:ec:25:fb:44:83:6e:f5:0a:e6:63:f3: a7:0b:e8:4e:cd:ba:d0:78:4b:0e:1a:ee:94:18:fd:5d:d1:04: 38:45:ca:0b:02:db:b9:e5:cf:6b:d4:4a:08:7e:89:a4:b6:3f: 62:2d:8d:3d:5a:74:e6:be:b7:45:f3:68:e2:a0:3a:29:b5:08: 18:de:02:d1:af:dd:ee:ea:75:82:49:08:3a:be:4e:11:d7:4d: 8b:dc:6d:82:b1:b9:ac:90:18:f7:43:f7:26:21:87:63:d2:c4: bb:f7:da:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrKqAq+t8EsWctnb4Q18+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0 NTdiY2IwHhcNMjUxMjE2MDEwMDU0WhcNMjUxMjE3MDEwMDU0WjAzMTEwLwYDVQQD Eyg0ZmZkNWI5MmJmZmYxM2RmYWI2NGQzZGU2MzNiMTdlYmQ5ZDVlODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH9PUEHbONve1jKqRjLPs47PZOZn l5hfZgj+o8ttiY/lqY2baKsB209p9/2txMJnXh97+hK1EG5PZPzPXFx1C5mm6Jnx m3ma4Kerl6qftbXP1VDnus3LLLFDht2MJIJ1jRbaJIUSa5qRsfpU5K/KKraJ3dxn jllg9e0S2UZTeQ9CK5wi9T9sfLn4UUA+LK9hza7QwOfGrfiX8pAC+9mp7pshV0tK /FUZeDIRkdlgtd8RvDVwU7JxJ3fI48v6WRs+sFztpe3pSccfaKzjjVMb2rYicFmv KB3M6tRixFcyck7/mgTLWxbyTKE2oAL7TZpd7YNc1WbJBRRCnx/2yVtGwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/9W5K//xPfq2TT3mM7F+vZ1ehJMB8GA1UdIwQY MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt N2RmOWU0YTIzOGNjLzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV+Ggf/U 2Qvwqz4gz6Nn1MYsZNhoRP6ulb79TbExjherUFBeSpuEe9ljoN9aw1LFxGKQxfjp TIxBKtx30yyo0WP0kznofmMkdRudyh9CEXfnd0QFYWco6Jd/Py36i5bIdSWfA9qu tRLRNn/e50W/eFKuT4FH8VEnGv7r9nmSXqmo4B4Y3NdA4NB5J3TH6z9t7m2KiQYc kewl+0SDbvUK5mPzpwvoTs260HhLDhrulBj9XdEEOEXKCwLbueXPa9RKCH6JpLY/ Yi2NPVp05r63RfNo4qA6KbUIGN4C0a/d7up1gkkIOr5OEddNi9xtgrG5rJAY90P3 JiGHY9LEu/faNQ== -----END CERTIFICATE-----Generated at Tue Dec 16 08:59:21 2025 by rpki-client