This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json) Hash identifier: Rv0Hes+07zkDXhzP+OHGZbCOsIS1KuZTja2mA8fMhn4= Subject key identifier: 1D:31:68:2B:12:73:BF:44:CA:B0:89:25:56:15:81:6D:6C:D7:C6:4B Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Certificate serial: 019BF72DAAF77888BCFFB10CD65903D81F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 22:02:03 +0000 Manifest this update: Sun 25 Jan 2026 22:02:03 +0000 Manifest next update: Mon 26 Jan 2026 22:02:03 +0000 Files and hashes: 1: Jb2gO1BQcML39rnxFGep61phXGU.roa (hash: 8e9M6TIpgOCh+hUbFPaNx/cdQqfZysi89tk+qyctjYM=) 2: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: yeaEm3fdp3IrONqalB/F4kFpwSfqed4d3C+dPHHk5Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:aa:f7:78:88:bc:ff:b1:0c:d6:59:03:d8:1f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Validity Not Before: Jan 25 22:02:03 2026 GMT Not After : Jan 26 22:02:03 2026 GMT Subject: CN=1d31682b1273bf44cab089255615816d6cd7c64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:5c:56:eb:e2:04:8f:8e:e2:b3:6c:91:15: 2c:d6:8c:a5:c5:fc:b0:e6:d2:7f:bd:a2:8f:77:6e: 75:5f:02:e8:9d:e2:3d:ec:ff:fe:0a:94:29:d2:37: 19:89:fe:6f:33:2d:70:a9:ca:28:c1:e3:47:96:c7: 33:7f:b3:6d:26:b9:39:18:3c:25:e1:7b:2f:76:3a: 19:a0:46:89:47:02:e6:0c:e8:a4:79:64:f8:b2:1e: e6:c2:2c:ad:25:ec:1b:75:97:c8:3b:60:83:5d:ba: 2a:aa:02:51:cd:c3:d5:ec:9f:44:8f:18:49:15:4b: 11:1f:e5:66:6b:87:eb:35:2a:9c:26:6e:4d:01:ca: 60:ce:96:11:4e:af:8a:2a:31:84:21:e3:a6:08:33: a1:f6:94:8a:a7:8f:88:78:4d:77:dd:6e:2d:97:db: af:0e:fd:e6:37:02:1f:3d:77:0f:1d:a6:d0:00:29: 72:c2:da:98:d7:63:4b:62:07:56:f9:67:ba:46:73: a2:c1:78:7c:bc:35:6e:89:9b:45:b7:f8:82:30:da: ed:2d:c2:34:da:ec:c9:95:a5:4a:08:00:6b:1d:ab: 54:51:45:e9:e0:0f:22:6b:f5:37:5b:53:d9:90:0d: c1:88:91:d3:85:2f:c2:6e:80:d5:5f:ad:6f:f2:b5: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:68:2B:12:73:BF:44:CA:B0:89:25:56:15:81:6D:6C:D7:C6:4B X509v3 Authority Key Identifier: keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:50:7d:88:52:06:6d:a6:ed:d9:22:70:38:88:e2:b7:d2: 89:66:69:2b:13:2e:bf:da:9f:dc:67:86:48:31:64:f3:2b:21: 48:d2:00:60:9d:ee:bd:81:31:ae:de:34:5f:00:1a:c7:21:cf: 62:c5:ab:6a:8d:53:6b:a8:25:b0:13:e8:ba:89:a2:3e:ac:1c: 5c:1c:17:0f:f9:13:7d:3e:3f:60:35:4d:c0:c2:33:a0:ef:81: b3:d7:45:82:1c:0a:92:39:c2:3b:1e:51:d3:f0:9e:4a:4c:32: 44:b5:41:b2:6c:ea:ac:24:d3:b6:36:41:21:11:c3:8d:62:e6: 29:a3:5d:29:9b:97:bf:ff:13:5f:dd:74:e5:c0:f8:d9:a2:89: 6e:ce:55:e2:97:86:28:9f:3f:e6:df:97:00:d8:3c:66:55:49: 26:90:ea:81:c5:b7:8f:10:6c:96:0c:ae:d1:82:49:cf:02:cb: 3a:08:91:7c:73:03:f4:06:ae:45:f0:c5:5f:11:02:a6:8b:50: d1:05:9b:56:f5:a1:92:48:ff:84:80:5b:f7:83:09:2b:12:37: d4:1c:7b:af:17:33:5e:be:fd:fb:fa:ee:ef:f2:07:f5:cb:41: 75:04:7b:23:e3:2a:66:42:09:70:4e:c5:a5:a4:ff:c0:21:56: 08:8d:66:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Lar3eIi8/7EM1lkD2B8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODNmNjg1ZWI3YjZhMmY4NDY0Yjk5NzEyOTMzOGQ2M2Y3 ZWVkNmEwHhcNMjYwMTI1MjIwMjAzWhcNMjYwMTI2MjIwMjAzWjAzMTEwLwYDVQQD EygxZDMxNjgyYjEyNzNiZjQ0Y2FiMDg5MjU1NjE1ODE2ZDZjZDdjNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIpcVuviBI+O4rNskRUs1oylxfyw 5tJ/vaKPd251XwLoneI97P/+CpQp0jcZif5vMy1wqcooweNHlsczf7NtJrk5GDwl 4XsvdjoZoEaJRwLmDOikeWT4sh7mwiytJewbdZfIO2CDXboqqgJRzcPV7J9EjxhJ FUsRH+Vma4frNSqcJm5NAcpgzpYRTq+KKjGEIeOmCDOh9pSKp4+IeE133W4tl9uv Dv3mNwIfPXcPHabQAClywtqY12NLYgdW+We6RnOiwXh8vDVuiZtFt/iCMNrtLcI0 2uzJlaVKCABrHatUUUXp4A8ia/U3W1PZkA3BiJHThS/CboDVX61v8rWa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0xaCsSc79EyrCJJVYVgW1s18ZLMB8GA1UdIwQY MBaAFG6D9oXre2ovhGS5lxKTONY/fu1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUt ZWFiZTM0ZTgwMmI0LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUtZWFiZTM0ZTgwMmI0 LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoRQfYhS Bm2m7dkicDiI4rfSiWZpKxMuv9qf3GeGSDFk8yshSNIAYJ3uvYExrt40XwAaxyHP YsWrao1Ta6glsBPouomiPqwcXBwXD/kTfT4/YDVNwMIzoO+Bs9dFghwKkjnCOx5R 0/CeSkwyRLVBsmzqrCTTtjZBIRHDjWLmKaNdKZuXv/8TX9105cD42aKJbs5V4peG KJ8/5t+XANg8ZlVJJpDqgcW3jxBslgyu0YJJzwLLOgiRfHMD9AauRfDFXxECpotQ 0QWbVvWhkkj/hIBb94MJKxI31Bx7rxczXr79+/ru7/IH9ctBdQR7I+MqZkIJcE7F paT/wCFWCI1mlA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:45:29 2026 by rpki-client