This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft File: bov4V64H8NXv1Xda1SnOTu2bfS8.mft (raw, json) Hash identifier: mR3NALNQSgxwTBn9Cv6geN+w0xeXUrO8zn+2UPqHvts= Subject key identifier: 06:56:EB:13:0B:74:45:F7:C1:C5:65:57:F3:7E:59:34:9D:39:19:CC Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f Certificate serial: 019AF23FF6747AC5240AC092BFD48C8D9154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft Manifest number: 01C4 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: bov4V64H8NXv1Xda1SnOTu2bfS8.crl (hash: MnwEht/osn/lVF5fKUrAau5NP7ldZGz57VwMIVrXvwA=) 2: xg4TB9W34T_2H7A6G22FFhh44IA.roa (hash: clTVUz8w+JASk2G55oRaZ8c/R0rPlvX1Is7X2/fJkW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f6:74:7a:c5:24:0a:c0:92:bf:d4:8c:8d:91:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=0656eb130b7445f7c1c56557f37e59349d3919cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:12:34:5f:b2:71:35:20:f7:85:78:7a:97: 88:13:85:0e:33:06:d5:f7:d0:83:aa:6e:4b:8c:b8: 88:9e:14:43:2a:7d:45:11:ae:7f:e3:b8:23:8f:05: ed:90:37:47:62:80:54:aa:4e:fc:e2:97:e8:8e:c6: a7:97:74:1d:d0:70:e3:bc:de:5e:91:ba:c2:5d:e5: e0:ae:36:da:fc:4e:22:e4:35:bb:a5:a0:c9:6d:83: 75:4b:b8:e2:7b:da:75:1a:23:e5:9c:2a:ab:bb:0f: 63:a8:e3:90:d3:0f:9a:44:43:3e:ef:77:f9:5c:30: 46:f5:18:fa:f9:fd:13:1b:5d:55:6e:97:07:a4:50: 5b:76:99:ac:0d:3a:73:98:40:37:d0:75:fd:c9:8c: 9d:89:50:c7:7f:be:e6:39:8d:c0:d6:39:3b:36:56: f6:75:d1:a3:11:c5:db:3a:4b:ff:d5:42:c7:7e:d5: 6d:b4:04:0e:1e:b0:0b:50:8c:24:82:9e:cd:aa:22: 44:65:e1:35:a7:5e:ab:a0:a5:3a:e6:cf:58:73:dc: 10:0c:f0:24:d5:36:de:d8:17:e3:70:57:ee:9b:30: a7:f5:ba:ff:c3:18:09:2b:84:42:9c:66:52:ab:e1: 35:5f:df:e3:2e:20:1a:ea:c8:8e:ef:d5:89:f0:8f: fe:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:56:EB:13:0B:74:45:F7:C1:C5:65:57:F3:7E:59:34:9D:39:19:CC X509v3 Authority Key Identifier: keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b7:8d:be:68:13:16:8d:37:5d:d6:c4:a6:4f:75:4d:9c:91: d5:bb:b1:0a:c3:15:4e:98:fc:e8:7c:47:1f:12:d0:7e:9f:5e: 1f:4c:ff:1a:00:11:a7:65:8b:e5:c7:c3:75:e8:21:b9:a0:6c: 5e:73:28:1f:84:a2:89:d6:3f:68:3b:f4:8f:b1:24:6e:e4:e3: 28:3b:5e:6e:c5:9a:13:14:95:17:e8:94:6d:45:7f:60:9d:8f: 31:8f:18:ea:ff:5e:70:49:c6:7b:d7:fb:06:84:26:32:9a:01: 21:a2:cb:65:01:55:2a:0c:b8:6d:37:a5:15:98:1c:4d:c2:d3: e8:3e:74:11:9d:ed:91:c4:2e:90:79:33:06:c7:0e:3e:40:90: 5c:31:56:2d:76:0d:8d:6a:96:e3:76:fd:a1:bb:37:fa:e6:df: eb:47:29:15:15:19:e7:0a:38:2d:84:7a:a7:37:ac:90:16:71: 47:34:51:26:ec:1e:3e:eb:b5:45:75:cb:dc:95:70:1e:91:80: ee:1b:44:a2:01:ef:48:3e:53:95:bf:48:1a:03:f4:75:8e:50: 09:ed:ba:7f:8a:26:b0:fa:b7:22:5a:8e:c8:af:a5:26:8c:4b: 5c:0c:24:52:72:79:68:d7:20:18:77:a5:7c:d1:cc:0c:7d:c6: f9:5b:f4:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/Z0esUkCsCSv9SMjZFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGJmODU3YWUwN2YwZDVlZmQ1Nzc1YWQ1MjljZTRlZWQ5 YjdkMmYwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EygwNjU2ZWIxMzBiNzQ0NWY3YzFjNTY1NTdmMzdlNTkzNDlkMzkxOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+wSNF+ycTUg94V4epeIE4UOMwbV 99CDqm5LjLiInhRDKn1FEa5/47gjjwXtkDdHYoBUqk784pfojsanl3Qd0HDjvN5e kbrCXeXgrjba/E4i5DW7paDJbYN1S7jie9p1GiPlnCqruw9jqOOQ0w+aREM+73f5 XDBG9Rj6+f0TG11VbpcHpFBbdpmsDTpzmEA30HX9yYydiVDHf77mOY3A1jk7Nlb2 ddGjEcXbOkv/1ULHftVttAQOHrALUIwkgp7NqiJEZeE1p16roKU65s9Yc9wQDPAk 1Tbe2BfjcFfumzCn9br/wxgJK4RCnGZSq+E1X9/jLiAa6siO79WJ8I/+swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZW6xMLdEX3wcVlV/N+WTSdORnMMB8GA1UdIwQY MBaAFG6L+FeuB/DV79V3WtUpzk7tm30vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNDUxNDctMzZiZS00OTgxLTg3YTMt YTZkY2I5ZmI4ZTZmLzEvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNDUxNDctMzZiZS00OTgxLTg3YTMtYTZkY2I5ZmI4ZTZm LzEvYm92NFY2NEg4Tlh2MVhkYTFTbk9UdTJiZlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObeNvmgT Fo03XdbEpk91TZyR1buxCsMVTpj86HxHHxLQfp9eH0z/GgARp2WL5cfDdeghuaBs XnMoH4SiidY/aDv0j7EkbuTjKDtebsWaExSVF+iUbUV/YJ2PMY8Y6v9ecEnGe9f7 BoQmMpoBIaLLZQFVKgy4bTelFZgcTcLT6D50EZ3tkcQukHkzBscOPkCQXDFWLXYN jWqW43b9obs3+ubf60cpFRUZ5wo4LYR6pzeskBZxRzRRJuwePuu1RXXL3JVwHpGA 7htEogHvSD5Tlb9IGgP0dY5QCe26f4omsPq3IlqOyK+lJoxLXAwkUnJ5aNcgGHel fNHMDH3G+Vv0mA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:49 2025 by rpki-client