This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json) Hash identifier: /03hL9yxF+RtfYX8pz8KlDNrUxry0KrqIr8UXyDVt9s= Subject key identifier: BB:A7:7C:7B:D3:F9:38:4B:70:85:BE:B9:25:DE:BF:14:21:55:C5:44 Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Certificate serial: 019B1DCF195D355C3F37BC8EE792344F269D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft Manifest number: 1453 Signing time: Sun 14 Dec 2025 17:01:10 +0000 Manifest this update: Sun 14 Dec 2025 17:01:10 +0000 Manifest next update: Mon 15 Dec 2025 17:01:10 +0000 Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: RWnaBuJE4yPc1EUz9AQ5vnTj0E56Sm96Pcf6ZkRmRxo=) 2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:19:5d:35:5c:3f:37:bc:8e:e7:92:34:4f:26:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Validity Not Before: Dec 14 17:01:10 2025 GMT Not After : Dec 15 17:01:10 2025 GMT Subject: CN=bba77c7bd3f9384b7085beb925debf142155c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:5a:a1:b3:35:4b:3a:20:58:02:fa:98:f8: c2:d5:2d:14:21:33:56:ee:6e:eb:f3:56:96:8d:43: 15:86:40:60:d7:35:1d:8c:86:74:1f:b9:4d:a6:23: 7c:64:c2:a0:4f:c1:08:a0:a4:20:a9:b8:0d:40:2c: bb:9d:58:f9:16:6f:56:10:51:1a:ec:b2:ae:3a:c6: 66:c5:64:e7:1e:cb:52:2c:17:66:cb:cd:9a:60:cc: 9f:97:59:b5:cb:2b:41:ca:02:81:c0:2d:12:be:82: 46:ba:94:b8:7d:13:46:48:d3:40:c6:d2:22:13:81: a2:7a:80:d7:7f:02:4a:85:34:32:48:74:43:23:90: 0e:96:c8:c3:ea:8b:70:bc:ca:9e:92:91:9e:2a:7a: eb:23:0d:3d:e4:9a:ad:fc:03:3f:01:ec:7f:fa:92: 49:e7:22:4a:6c:0d:c7:03:67:62:35:61:39:c1:6b: 10:df:c8:bb:77:c6:08:11:e3:81:7f:5e:fc:45:4d: d2:15:a7:c4:96:24:42:24:20:1f:86:57:c7:3c:06: d2:ec:56:c0:17:34:fd:f3:fd:9e:32:09:7c:26:63: df:bc:f3:df:c9:5d:6a:19:7e:f6:47:c7:91:87:09: 98:01:a2:90:c7:b8:d6:32:9d:00:b9:b5:c9:74:80: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A7:7C:7B:D3:F9:38:4B:70:85:BE:B9:25:DE:BF:14:21:55:C5:44 X509v3 Authority Key Identifier: keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d7:bd:74:40:c7:ca:96:3e:99:c1:8c:96:3c:14:7e:96:5b: 32:20:e1:3f:a3:af:0b:79:8e:57:7c:5f:8b:08:51:87:f4:16: 52:00:62:11:4e:14:76:30:64:38:8e:11:f5:51:07:93:bd:dc: 99:13:ac:dd:e6:ca:29:18:8a:00:be:45:37:5a:0f:f5:e0:b0: ba:5b:71:c7:a4:f0:df:ac:fc:64:13:96:32:c4:06:a4:44:8e: 74:e9:f6:4e:70:44:7b:ea:c2:2c:c7:6d:bc:e8:8e:7c:d1:f2: 75:11:0a:0b:68:ec:f7:95:14:7f:83:8d:3c:23:26:df:55:42: 0e:51:ec:1b:cd:5e:ae:3f:98:5f:e4:cf:b4:e0:11:94:f9:23: f1:05:75:8b:55:69:d8:37:06:76:ec:f7:00:23:6e:7d:e3:b8: 1e:07:a7:5d:57:67:c6:4a:8f:25:7a:27:d5:85:d8:2c:3e:a8: a9:d7:49:31:45:74:79:6c:56:03:bc:77:7e:80:69:56:d4:e0: 16:be:bb:18:a2:b7:6d:69:ef:fd:23:0e:27:de:12:fe:4b:05: 83:16:15:22:05:a8:79:61:2a:65:20:d0:66:a3:f9:c1:65:73: 68:a3:23:fc:2b:3b:fd:4a:49:68:f6:94:26:4a:07:cb:8b:7c: dd:4d:58:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzxldNVw/N7yO55I0TyadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OGNiODViYzRlOWU0YjczMmU5NTdmMDhhYTFjMDIzN2Fh ZGM0N2YwHhcNMjUxMjE0MTcwMTEwWhcNMjUxMjE1MTcwMTEwWjAzMTEwLwYDVQQD EyhiYmE3N2M3YmQzZjkzODRiNzA4NWJlYjkyNWRlYmYxNDIxNTVjNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupZaobM1SzogWAL6mPjC1S0UITNW 7m7r81aWjUMVhkBg1zUdjIZ0H7lNpiN8ZMKgT8EIoKQgqbgNQCy7nVj5Fm9WEFEa 7LKuOsZmxWTnHstSLBdmy82aYMyfl1m1yytBygKBwC0SvoJGupS4fRNGSNNAxtIi E4GieoDXfwJKhTQySHRDI5AOlsjD6otwvMqekpGeKnrrIw095Jqt/AM/Aex/+pJJ 5yJKbA3HA2diNWE5wWsQ38i7d8YIEeOBf178RU3SFafEliRCJCAfhlfHPAbS7FbA FzT98/2eMgl8JmPfvPPfyV1qGX72R8eRhwmYAaKQx7jWMp0AubXJdIA0zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLunfHvT+ThLcIW+uSXevxQhVcVEMB8GA1UdIwQY MBaAFAaMuFvE6eS3MulX8IqhwCN6rcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMt MTlmMjJlZDYxM2E1LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMtMTlmMjJlZDYxM2E1 LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKde9dEDH ypY+mcGMljwUfpZbMiDhP6OvC3mOV3xfiwhRh/QWUgBiEU4UdjBkOI4R9VEHk73c mROs3ebKKRiKAL5FN1oP9eCwultxx6Tw36z8ZBOWMsQGpESOdOn2TnBEe+rCLMdt vOiOfNHydREKC2js95UUf4ONPCMm31VCDlHsG81erj+YX+TPtOARlPkj8QV1i1Vp 2DcGduz3ACNufeO4HgenXVdnxkqPJXon1YXYLD6oqddJMUV0eWxWA7x3foBpVtTg Fr67GKK3bWnv/SMOJ94S/ksFgxYVIgWoeWEqZSDQZqP5wWVzaKMj/Cs7/UpJaPaU JkoHy4t83U1Yeg== -----END CERTIFICATE-----Generated at Sun Dec 14 23:42:12 2025 by rpki-client