This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json) Hash identifier: zwZ+4Lq8LTDono8pG6/KpjQZ+18+DUR3/frXJF0ZB6E= Subject key identifier: 7F:AD:E4:2D:05:30:69:48:2A:5B:8D:72:13:06:43:51:72:E8:B2:41 Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce Certificate serial: 019AF352879904B276E6B6D39135711E6D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft Manifest number: 1680 Signing time: Sat 06 Dec 2025 11:01:03 +0000 Manifest this update: Sat 06 Dec 2025 11:01:03 +0000 Manifest next update: Sun 07 Dec 2025 11:01:03 +0000 Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: PnvcqA7nfGov3jRwuuwqzI6I5DIgac9JD5MYG4/cfWo=) 2: dPa9U6HWifFU_Cos6EbPpdfP3tk.roa (hash: 3jOPrvgsW1hyX1vCwFVn+4LuXyROUmkvR9VpXoAHZWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:87:99:04:b2:76:e6:b6:d3:91:35:71:1e:6d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce Validity Not Before: Dec 6 11:01:03 2025 GMT Not After : Dec 7 11:01:03 2025 GMT Subject: CN=7fade42d053069482a5b8d721306435172e8b241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:ee:17:c7:d0:ea:3d:67:e4:1d:6d:e0:52: 43:b0:b7:a1:e6:83:01:ee:e0:47:4b:fa:6f:eb:a6: b5:58:12:1e:34:98:f3:bb:a5:de:63:a3:75:9e:a3: 5c:cd:76:68:c2:7f:bf:11:a8:61:bb:e7:e4:80:fb: fe:27:6c:c5:37:25:39:3a:8a:0f:53:db:c3:a9:2a: 41:be:83:72:1f:d0:6c:02:0f:27:c1:bd:ca:54:09: 47:41:3b:41:c7:1a:de:e2:5e:bb:71:16:43:49:68: 23:fa:81:ee:48:fa:46:fd:c3:de:50:db:f4:4f:49: 9b:e8:97:65:4f:c5:50:a2:bb:88:5e:0a:4d:4b:c2: 93:fc:e6:ee:d4:f7:c5:fa:8b:61:98:68:7e:df:ce: d2:84:22:bb:e0:a2:7e:a2:9b:18:39:d1:16:79:fa: 00:60:f3:7c:c9:8f:ef:ec:17:54:3e:31:9f:76:ab: bb:ce:90:cd:85:24:74:2a:96:4d:57:c2:85:44:4c: bd:e3:fb:08:c2:f7:29:3f:df:7d:80:3c:d1:d1:7c: 31:29:13:66:34:9e:78:57:09:e4:79:19:f7:a4:e2: 8f:59:1a:2c:6a:6e:1f:b3:2c:8e:e9:b4:83:75:25: 2c:72:5c:4c:ec:f5:f3:af:10:95:3e:e5:c7:92:3a: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AD:E4:2D:05:30:69:48:2A:5B:8D:72:13:06:43:51:72:E8:B2:41 X509v3 Authority Key Identifier: keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d6:e9:ce:c0:1d:1b:92:69:4f:cd:fa:ea:60:ef:5c:f3:2d: 27:54:cc:ac:f4:a4:18:e9:f3:c4:e9:81:fe:4a:31:ac:82:4a: 91:c7:01:93:4f:68:e7:8d:70:d0:c5:9a:d6:98:78:64:7a:ac: 42:4f:99:7c:72:3a:31:bf:99:32:db:f2:5a:45:56:48:ff:b8: 53:19:b2:63:09:42:30:14:c0:18:27:b0:63:d5:93:59:b5:ee: a3:94:8d:60:34:5b:e2:fb:23:62:87:0e:e4:97:57:6f:72:55: 4a:30:d6:59:31:79:af:e1:bd:17:93:c4:6d:e5:1c:2b:8e:9c: 2c:d5:ef:ba:3b:e0:27:75:17:bd:fa:34:68:e7:17:88:bd:63: 4a:cf:3b:60:fe:41:d9:3b:53:68:28:3b:76:8e:19:1e:49:24: 55:27:fc:1e:31:5e:c8:78:4a:47:b7:a5:7a:a4:08:45:93:f4: 37:7e:cf:e5:0c:fb:75:5a:be:10:73:2e:d2:99:d6:d6:2e:00: 48:15:0f:18:a5:4b:c6:90:5b:b5:74:3c:b4:fa:32:e0:cd:68: a9:63:78:95:04:c0:5b:79:a7:1b:76:8f:51:ed:ae:44:9e:6b: 97:a8:f0:f2:c0:d2:f8:40:db:d0:f0:a7:a3:6d:55:63:ee:04: 2a:2b:8d:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoeZBLJ25rbTkTVxHm1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTYwNGE0NTY3N2JlNzczMTM5NjlhZDE3YWVjNjljZTk3 YzQzY2UwHhcNMjUxMjA2MTEwMTAzWhcNMjUxMjA3MTEwMTAzWjAzMTEwLwYDVQQD Eyg3ZmFkZTQyZDA1MzA2OTQ4MmE1YjhkNzIxMzA2NDM1MTcyZThiMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EfuF8fQ6j1n5B1t4FJDsLeh5oMB 7uBHS/pv66a1WBIeNJjzu6XeY6N1nqNczXZown+/Eahhu+fkgPv+J2zFNyU5OooP U9vDqSpBvoNyH9BsAg8nwb3KVAlHQTtBxxre4l67cRZDSWgj+oHuSPpG/cPeUNv0 T0mb6JdlT8VQoruIXgpNS8KT/Obu1PfF+othmGh+387ShCK74KJ+opsYOdEWefoA YPN8yY/v7BdUPjGfdqu7zpDNhSR0KpZNV8KFREy94/sIwvcpP999gDzR0XwxKRNm NJ54VwnkeRn3pOKPWRosam4fsyyO6bSDdSUsclxM7PXzrxCVPuXHkjrRoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+t5C0FMGlIKluNchMGQ1Fy6LJBMB8GA1UdIwQY MBaAFATmBKRWd753MTlprReuxpzpfEPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2Qt NTJhN2I5MjViMjI0LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2QtNTJhN2I5MjViMjI0 LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtbpzsAd G5JpT8366mDvXPMtJ1TMrPSkGOnzxOmB/koxrIJKkccBk09o541w0MWa1ph4ZHqs Qk+ZfHI6Mb+ZMtvyWkVWSP+4UxmyYwlCMBTAGCewY9WTWbXuo5SNYDRb4vsjYocO 5JdXb3JVSjDWWTF5r+G9F5PEbeUcK46cLNXvujvgJ3UXvfo0aOcXiL1jSs87YP5B 2TtTaCg7do4ZHkkkVSf8HjFeyHhKR7eleqQIRZP0N37P5Qz7dVq+EHMu0pnW1i4A SBUPGKVLxpBbtXQ8tPoy4M1oqWN4lQTAW3mnG3aPUe2uRJ5rl6jw8sDS+EDb0PCn o21VY+4EKiuNMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:13 2025 by rpki-client