This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json) Hash identifier: 9youaiv1QZB9iN8RjCTePUjKEmBiTwZSx0UfQYr6PYY= Subject key identifier: 17:0F:25:F7:B9:46:04:3E:90:4D:92:2C:41:4B:93:72:63:2E:60:5B Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Certificate serial: 019B2F3081DFA97EBD2F59F734EF7FCE6527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 02:01:06 +0000 Manifest this update: Thu 18 Dec 2025 02:01:06 +0000 Manifest next update: Fri 19 Dec 2025 02:01:06 +0000 Files and hashes: 1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=) 2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: lKq1vzeqjM8e5aBF9KbqED2g9xSyAoenPV36gbwzTz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:81:df:a9:7e:bd:2f:59:f7:34:ef:7f:ce:65:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Validity Not Before: Dec 18 02:01:06 2025 GMT Not After : Dec 19 02:01:06 2025 GMT Subject: CN=170f25f7b946043e904d922c414b9372632e605b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:6d:25:66:cc:a0:cb:40:0e:74:6b:ec:b3: 55:c2:cd:aa:74:72:41:31:5c:ab:9a:74:fe:5e:93: 87:42:56:e2:19:13:27:c7:97:02:5d:ae:5b:40:2f: 27:3f:54:73:41:38:13:9d:ad:34:8d:a5:8b:99:51: 85:c3:9e:2d:7a:57:cd:74:bb:b9:ff:dc:af:60:c1: 55:7d:c2:ad:dc:2c:9d:79:ca:94:cd:37:9d:48:63: 57:7a:9b:5e:73:67:68:9b:51:10:60:00:5a:23:6b: c1:35:8e:82:e9:7a:ad:3d:c6:1d:e8:0e:1c:2e:86: 49:35:07:5b:a6:77:a8:39:bf:bc:95:90:96:1b:59: e5:90:73:af:8d:fe:35:8a:50:4a:52:8e:da:de:3d: 8d:9f:04:4b:d3:0a:6f:52:1c:23:0e:47:cf:00:02: 95:5c:ae:19:c6:60:f1:9e:d7:ca:27:d1:96:f7:03: 82:11:23:69:44:6b:bd:9e:b7:18:40:4c:57:a7:f8: ad:34:46:1e:05:e0:df:2d:c5:68:9e:d6:60:3c:aa: 58:e8:87:9b:cb:09:ed:a0:b6:d3:36:b5:3a:3c:b2: 8c:38:fc:80:c8:96:6e:6c:2c:14:39:47:b2:47:18: bd:07:e7:65:d5:9f:9d:ba:d7:cd:c9:d4:3a:5e:85: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0F:25:F7:B9:46:04:3E:90:4D:92:2C:41:4B:93:72:63:2E:60:5B X509v3 Authority Key Identifier: keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:79:38:79:e3:70:be:68:d2:b6:88:32:88:96:bf:93:ca:24: 31:31:5d:d0:11:f8:c8:3c:a7:e2:a9:89:42:21:a3:c1:83:da: 8f:09:93:44:f4:8d:c1:51:d6:61:df:02:21:f8:e0:b0:85:1d: 81:34:9f:b8:f9:a0:b1:22:0b:5b:aa:fb:98:39:94:7c:f4:d7: 17:49:f7:c2:ef:dd:4d:f8:82:33:8d:83:98:5d:8c:2f:8b:a4: 01:53:1b:f9:16:21:a2:ab:90:3e:f3:03:64:c8:54:fe:60:85: ea:92:61:87:8e:30:1c:3c:22:6d:26:a3:5e:62:af:2f:4d:ec: 49:b3:07:b2:81:36:cd:03:02:47:12:99:fd:50:f7:2b:0d:e6: 3a:7f:59:77:01:b3:0d:bb:fb:31:e3:35:dd:61:7b:6e:39:46: ca:cf:41:1f:7a:4d:93:32:1b:1f:cd:fd:fd:74:7d:68:5b:03: c4:2f:a5:cc:4c:c8:c1:fa:46:46:98:fb:6f:3c:73:05:f8:f5: 38:9b:03:c0:ea:31:67:a4:7a:db:ec:43:d6:1a:4d:91:9a:0a: b4:c6:ec:4f:cb:92:70:12:bd:28:c5:e3:68:da:66:7a:81:41: 2d:58:cf:f2:fe:12:fe:d9:c9:79:14:2d:2f:d9:a5:af:90:a2: 31:e0:d7:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMIHfqX69L1n3NO9/zmUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm YzliMzAwHhcNMjUxMjE4MDIwMTA2WhcNMjUxMjE5MDIwMTA2WjAzMTEwLwYDVQQD EygxNzBmMjVmN2I5NDYwNDNlOTA0ZDkyMmM0MTRiOTM3MjYzMmU2MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEZtJWbMoMtADnRr7LNVws2qdHJB MVyrmnT+XpOHQlbiGRMnx5cCXa5bQC8nP1RzQTgTna00jaWLmVGFw54telfNdLu5 /9yvYMFVfcKt3CydecqUzTedSGNXeptec2dom1EQYABaI2vBNY6C6XqtPcYd6A4c LoZJNQdbpneoOb+8lZCWG1nlkHOvjf41ilBKUo7a3j2NnwRL0wpvUhwjDkfPAAKV XK4ZxmDxntfKJ9GW9wOCESNpRGu9nrcYQExXp/itNEYeBeDfLcVontZgPKpY6Ieb ywntoLbTNrU6PLKMOPyAyJZubCwUOUeyRxi9B+dl1Z+dutfNydQ6XoUcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcPJfe5RgQ+kE2SLEFLk3JjLmBbMB8GA1UdIwQY MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz3k4eeNw vmjStogyiJa/k8okMTFd0BH4yDyn4qmJQiGjwYPajwmTRPSNwVHWYd8CIfjgsIUd gTSfuPmgsSILW6r7mDmUfPTXF0n3wu/dTfiCM42DmF2ML4ukAVMb+RYhoquQPvMD ZMhU/mCF6pJhh44wHDwibSajXmKvL03sSbMHsoE2zQMCRxKZ/VD3Kw3mOn9ZdwGz Dbv7MeM13WF7bjlGys9BH3pNkzIbH839/XR9aFsDxC+lzEzIwfpGRpj7bzxzBfj1 OJsDwOoxZ6R62+xD1hpNkZoKtMbsT8uScBK9KMXjaNpmeoFBLVjP8v4S/tnJeRQt L9mlr5CiMeDXPQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:12:49 2025 by rpki-client