This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft File: BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json) Hash identifier: oLuYGM8DtR4sseedBMgDLPGo+amrgSCXvGrn1GXF0IQ= Subject key identifier: 3D:85:93:00:D5:86:87:20:51:4D:5A:90:3C:E5:19:4D:B6:A2:30:07 Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27 Certificate issuer: /CN=04e22288678efff15fea79def24c6067ce24aa27 Certificate serial: 019AF12CE82703052A66EEBA31DFCD2C71E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: kvdBc5jbyrEXyj+GjgaT1qA9LCPugKr9XG1rNIsDkJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e8:27:03:05:2a:66:ee:ba:31:df:cd:2c:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27 Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=3d859300d5868720514d5a903ce5194db6a23007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:f9:2d:79:64:93:b1:d3:09:72:f4:53:99: be:4b:36:84:e0:18:b9:bd:7e:26:d6:39:bb:56:55: 66:31:cf:52:0a:ba:44:05:e1:f1:c3:b2:a2:3e:76: 60:da:4e:e8:b4:aa:75:ca:3c:af:37:b7:c7:b9:8a: 78:d5:42:c2:1e:a4:e1:2d:ac:73:9c:c2:04:0e:c4: e0:fc:d1:ea:35:7b:3d:f2:66:15:11:6a:70:23:fe: e6:40:9b:63:c6:69:56:cf:f5:bb:39:9b:c9:db:35: 93:c4:8d:ef:e1:b9:d0:4c:cc:72:cd:60:8e:e8:14: 93:03:c2:3a:d6:c7:39:90:08:91:80:cc:67:20:e4: 49:e6:aa:09:90:25:9b:8c:11:d4:94:fc:7d:9b:2b: 10:7e:4c:8c:51:fc:13:ec:49:21:f0:86:71:01:88: 4d:59:fc:dc:60:6e:d0:29:d3:b2:7c:1b:b4:49:72: c3:a5:00:c3:03:19:a9:39:91:cf:15:41:99:03:91: ab:db:6c:5e:68:9f:fa:fe:20:5c:d5:1e:b3:21:9a: d2:73:5e:db:18:28:ef:ac:20:86:d6:53:c4:23:66: ff:45:75:4d:5a:3b:72:4a:c9:9f:dd:eb:a5:59:ea: 99:f4:09:8a:90:01:e8:44:b3:d5:0d:a2:26:da:a9: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:93:00:D5:86:87:20:51:4D:5A:90:3C:E5:19:4D:B6:A2:30:07 X509v3 Authority Key Identifier: keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:16:e0:db:f0:b7:ab:ce:e0:79:e6:ca:7e:42:63:a1:90:65: 05:02:a7:7c:04:0c:0f:aa:64:97:70:53:f8:bf:fc:bf:ce:4e: 91:46:9f:74:c3:6c:66:67:81:e6:f9:e3:9c:d4:eb:e5:9d:95: e1:10:94:5c:9c:a5:6f:ac:ef:3d:11:1f:c8:67:ba:4a:ca:2d: 42:d0:7d:03:db:6b:65:48:88:7e:9b:df:62:1b:82:84:ee:cb: 9d:33:dc:e7:3f:10:6f:2a:c3:c6:86:cc:31:41:c0:e3:3a:65: c9:b4:3a:62:07:4b:42:05:ba:b7:5a:f3:20:5c:4e:0d:13:1a: 8c:d6:92:4d:cc:64:d9:31:35:91:cf:0d:ee:37:04:a0:fc:55: 58:48:91:b7:23:82:56:d8:74:20:ec:62:e5:2f:4a:46:2a:f7: 8e:4b:bb:57:20:73:02:ce:32:4c:ee:47:56:0c:2d:7b:a5:8b: c0:43:8f:41:30:54:68:a6:73:76:c5:17:43:73:7d:09:29:b2: 1c:c7:0e:5f:6e:dc:42:6d:a5:60:ff:52:2d:46:3f:92:1a:02: b9:9a:17:c0:b0:f7:63:9b:32:22:bf:67:0e:7d:54:90:b7:98: e6:1e:d1:50:47:d8:b5:ea:a3:b7:85:4b:1b:99:fb:1e:ac:b9: dd:9a:1a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOgnAwUqZu66Md/NLHHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTIyMjg4Njc4ZWZmZjE1ZmVhNzlkZWYyNGM2MDY3Y2Uy NGFhMjcwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD EygzZDg1OTMwMGQ1ODY4NzIwNTE0ZDVhOTAzY2U1MTk0ZGI2YTIzMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KH5LXlkk7HTCXL0U5m+SzaE4Bi5 vX4m1jm7VlVmMc9SCrpEBeHxw7KiPnZg2k7otKp1yjyvN7fHuYp41ULCHqThLaxz nMIEDsTg/NHqNXs98mYVEWpwI/7mQJtjxmlWz/W7OZvJ2zWTxI3v4bnQTMxyzWCO 6BSTA8I61sc5kAiRgMxnIORJ5qoJkCWbjBHUlPx9mysQfkyMUfwT7Ekh8IZxAYhN WfzcYG7QKdOyfBu0SXLDpQDDAxmpOZHPFUGZA5Gr22xeaJ/6/iBc1R6zIZrSc17b GCjvrCCG1lPEI2b/RXVNWjtySsmf3eulWeqZ9AmKkAHoRLPVDaIm2qlvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2FkwDVhocgUU1akDzlGU22ojAHMB8GA1UdIwQY MBaAFATiIohnjv/xX+p53vJMYGfOJKonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NGY4ZjYtYjkwMC00NDA1LTkyN2Mt ODljOTg5MmMxNGYwLzEvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81NGY4ZjYtYjkwMC00NDA1LTkyN2MtODljOTg5MmMxNGYw LzEvQk9JaWlHZU9fX0ZmNm5uZThreGdaODRrcWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRbg2/C3 q87geebKfkJjoZBlBQKnfAQMD6pkl3BT+L/8v85OkUafdMNsZmeB5vnjnNTr5Z2V 4RCUXJylb6zvPREfyGe6SsotQtB9A9trZUiIfpvfYhuChO7LnTPc5z8QbyrDxobM MUHA4zplybQ6YgdLQgW6t1rzIFxODRMajNaSTcxk2TE1kc8N7jcEoPxVWEiRtyOC Vth0IOxi5S9KRir3jku7VyBzAs4yTO5HVgwte6WLwEOPQTBUaKZzdsUXQ3N9CSmy HMcOX27cQm2lYP9SLUY/khoCuZoXwLD3Y5syIr9nDn1UkLeY5h7RUEfYteqjt4VL G5n7Hqy53ZoaWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:06 2025 by rpki-client