This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json) Hash identifier: qZTrPvx1KW99efpkuI1wUe5znKUNSTAW+fwyABrN75I= Subject key identifier: 3E:B8:AC:49:EB:4B:89:C9:C0:D2:5F:B9:C1:A4:75:11:68:14:0A:5D Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Certificate serial: 019AF1647BDD4C4856C3B22873521D277FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=) 2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: ZuvtfTZTPThfxmQrhdTReFAZpK5sNZEykHe/4OXrFHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7b:dd:4c:48:56:c3:b2:28:73:52:1d:27:7f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=3eb8ac49eb4b89c9c0d25fb9c1a4751168140a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:1f:3b:56:c5:bc:f4:af:24:7f:f2:8d:08: 26:36:79:bc:80:3b:e5:02:9e:b9:32:e5:74:ce:11: b8:79:05:92:95:6f:b9:e4:29:23:ab:eb:f5:14:99: 6b:99:f9:ac:64:ac:ae:6e:f7:6e:0c:76:40:e2:38: fa:eb:14:01:95:39:99:ac:4a:f2:ea:b9:53:b7:c9: e7:d3:f9:29:f7:b1:6d:98:22:bf:f6:93:67:e3:34: 32:be:71:6a:14:a1:54:c2:07:57:fc:08:0a:2b:78: 39:b6:07:fd:26:f3:ba:fd:e4:cd:72:af:60:a2:54: 1e:ae:c4:77:7f:69:9e:5f:d3:25:f5:fe:aa:03:b4: fb:10:e3:ae:ea:91:a2:02:94:ae:d8:8f:9a:fd:dc: 64:85:6a:0f:08:28:ad:80:e7:4c:d9:27:6c:03:8f: d5:10:7c:b5:40:d6:1c:d2:2f:7c:ed:1c:12:d1:c7: 30:de:24:26:c0:8a:65:50:7f:ee:0d:60:79:81:70: fd:4d:fe:2d:bf:e1:25:f0:86:c9:48:6d:8d:62:5b: 42:28:ae:20:e4:b2:4d:d0:1c:77:0a:95:05:0f:99: c6:84:eb:69:d3:8c:d9:1f:33:58:75:28:a0:79:91: 32:0c:a9:b8:f0:ac:8a:c6:72:8e:3b:58:89:6a:0e: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B8:AC:49:EB:4B:89:C9:C0:D2:5F:B9:C1:A4:75:11:68:14:0A:5D X509v3 Authority Key Identifier: keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:df:a2:26:cf:d2:e3:de:04:fe:cb:cc:7f:33:ef:63:7b:06: e2:e7:80:f4:7e:12:cb:17:5c:e1:06:6b:77:2e:a1:fa:26:bc: e6:a7:8e:76:8d:b8:db:b5:b6:3a:ec:2d:ff:4e:08:3a:77:86: 7e:3f:66:9b:25:60:f9:7d:83:9c:9f:eb:7d:7c:77:86:88:1f: 12:09:47:23:9d:5d:96:95:96:71:08:50:8f:29:e9:e3:28:23: 7e:dd:9e:19:db:07:a9:18:22:d3:0d:7a:dd:69:3b:9b:01:95: 9d:2f:80:95:6f:ff:d8:37:f4:b2:c0:c3:fb:05:30:ff:73:96: db:c2:f1:1a:90:d3:42:f0:f2:62:b8:77:24:47:15:92:98:b0: 3d:10:ae:05:56:ca:8a:d2:35:8e:36:6e:43:8d:c3:83:52:ca: a5:a5:21:ff:5d:d7:a5:c5:0b:7a:45:07:37:8f:a6:56:85:9f: 07:1d:42:f8:a1:ca:2e:8e:f3:02:49:64:7d:de:cc:94:8a:22: a9:86:7c:bc:e6:b7:95:15:a9:16:36:a4:38:0a:6d:32:1f:ff: b4:c4:43:b3:15:63:25:8f:95:6a:be:29:83:f4:b8:0a:6d:1d: b0:85:40:1f:78:49:d6:9c:a6:8d:ce:d5:31:88:77:43:50:bd: d1:16:6a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHvdTEhWw7Ioc1IdJ3+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm YzliMzAwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EygzZWI4YWM0OWViNGI4OWM5YzBkMjVmYjljMWE0NzUxMTY4MTQwYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrAfO1bFvPSvJH/yjQgmNnm8gDvl Ap65MuV0zhG4eQWSlW+55Ckjq+v1FJlrmfmsZKyubvduDHZA4jj66xQBlTmZrEry 6rlTt8nn0/kp97FtmCK/9pNn4zQyvnFqFKFUwgdX/AgKK3g5tgf9JvO6/eTNcq9g olQersR3f2meX9Ml9f6qA7T7EOOu6pGiApSu2I+a/dxkhWoPCCitgOdM2SdsA4/V EHy1QNYc0i987RwS0ccw3iQmwIplUH/uDWB5gXD9Tf4tv+El8IbJSG2NYltCKK4g 5LJN0Bx3CpUFD5nGhOtp04zZHzNYdSigeZEyDKm48KyKxnKOO1iJag7vYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD64rEnrS4nJwNJfucGkdRFoFApdMB8GA1UdIwQY MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN+iJs/S 494E/svMfzPvY3sG4ueA9H4Syxdc4QZrdy6h+ia85qeOdo2427W2Ouwt/04IOneG fj9mmyVg+X2DnJ/rfXx3hogfEglHI51dlpWWcQhQjynp4ygjft2eGdsHqRgi0w16 3Wk7mwGVnS+AlW//2Df0ssDD+wUw/3OW28LxGpDTQvDyYrh3JEcVkpiwPRCuBVbK itI1jjZuQ43Dg1LKpaUh/13XpcULekUHN4+mVoWfBx1C+KHKLo7zAklkfd7MlIoi qYZ8vOa3lRWpFjakOAptMh//tMRDsxVjJY+Var4pg/S4Cm0dsIVAH3hJ1pymjc7V MYh3Q1C90RZqKA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:21 2025 by rpki-client