This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json) Hash identifier: qpLmH43rzE8Z4ssIo7ALBP/mtQNVrdZT4/Hg95CbDUw= Subject key identifier: 11:56:EE:2F:DB:96:88:6A:1A:EB:EC:D6:3A:7C:8A:89:AB:1A:94:73 Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Certificate serial: 019AF464CD9D8C5AFA64819F4A193A64F232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft Manifest number: 0464 Signing time: Sat 06 Dec 2025 16:00:38 +0000 Manifest this update: Sat 06 Dec 2025 16:00:38 +0000 Manifest next update: Sun 07 Dec 2025 16:00:38 +0000 Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: IJLdZHjxfUlDurzXaFLd6KPULlTwqUIKrBhG22+poos=) 2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=) 3: _b4C80puZ4QQZiCjVn1A8db2DMM.roa (hash: BTn925eDDhMQbieFlWe3FviXvz8DAA+vgg6fsWjWAFs=) 4: t794Rq3oD5hjUa_fm7_FJ1kTjgY.roa (hash: e8v8ak73SzlgLcU/OgDyl114eL/kRo4XPjTTeE0Y/3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:cd:9d:8c:5a:fa:64:81:9f:4a:19:3a:64:f2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Validity Not Before: Dec 6 16:00:38 2025 GMT Not After : Dec 7 16:00:38 2025 GMT Subject: CN=1156ee2fdb96886a1aebecd63a7c8a89ab1a9473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:2b:20:52:fb:c3:2e:47:ef:b0:cd:c4:81: 8e:96:f3:f9:4b:f7:96:b1:ac:b3:63:d6:f2:df:08: 92:23:4f:33:15:ad:a7:f4:2d:a7:f1:5d:b8:bf:f8: a0:07:8b:a0:80:ab:a3:72:3a:a6:61:2b:59:1b:3a: 7f:3d:31:ba:44:ac:35:a3:1e:c0:70:31:a3:73:21: d1:7e:3c:47:88:02:c3:c3:47:db:96:5a:2c:0c:c7: 1b:53:3e:c2:28:93:3e:ff:b1:fd:86:80:32:0c:f7: 69:76:02:20:1c:75:93:d5:ef:4e:8d:92:d3:f7:f2: 8b:34:e1:86:6b:5a:40:94:e9:5d:b6:c5:49:f5:2c: 0c:4a:91:e7:b1:f6:23:a5:49:02:1a:56:fc:58:c2: 46:3b:bc:85:24:05:e3:9a:a1:b5:19:7a:48:00:fc: 0d:20:01:78:8d:37:dd:4c:5a:4f:9c:f6:54:25:0d: 46:3b:d3:75:81:f9:b5:0c:23:f9:ce:61:e8:28:82: b7:07:4e:12:c2:d6:6f:15:c7:94:78:80:76:0e:d0: 2d:ad:5b:fd:fd:3a:53:53:dc:b2:2e:22:d0:bb:3b: 02:00:53:21:6e:dd:63:73:67:03:46:44:e6:6d:ac: 77:84:09:8d:9e:1a:06:cf:90:f3:5c:07:31:28:f1: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:56:EE:2F:DB:96:88:6A:1A:EB:EC:D6:3A:7C:8A:89:AB:1A:94:73 X509v3 Authority Key Identifier: keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7c:19:14:0f:27:2a:be:6a:ce:18:89:02:0f:61:ee:ae:8a: 58:b2:cc:04:e6:3d:5b:79:01:bb:25:5d:c9:ad:63:e9:00:c9: e3:67:12:7a:08:9d:67:3a:2d:0c:77:37:6e:08:bd:d6:42:b7: a4:9b:cf:93:10:93:21:3b:28:ce:ee:39:9e:da:9f:dc:e6:1a: df:39:b2:8c:98:df:eb:c3:fd:75:62:76:e4:c9:17:3e:3c:f0: f8:37:a5:85:d4:f4:ea:47:b7:e1:4b:e6:dd:cb:9b:a2:06:27: dd:13:6f:f7:0e:4e:b6:93:a5:81:9b:09:5e:4e:24:25:2e:17: 52:77:cb:cb:c0:12:e6:d2:80:36:af:ab:09:41:8d:c9:5f:8b: 2a:65:f0:fb:82:80:15:84:1b:f1:7b:7c:68:7c:2b:f3:c9:29: 75:83:e1:a1:d3:a1:70:1f:d4:c0:11:f8:11:ed:2b:6d:79:48: cc:20:6b:81:01:43:a3:92:bc:48:62:1f:08:8a:07:14:d1:5f: e5:26:88:bd:eb:f0:8d:23:02:f9:af:63:77:77:c9:fd:3f:4f: 19:41:cf:5c:08:42:d8:c5:6a:2d:83:20:f1:56:b3:b7:26:36: 94:ea:16:e6:56:b4:6f:5b:42:e0:8f:85:ad:a2:01:a7:e8:71: 2c:a5:31:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZM2djFr6ZIGfShk6ZPIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0 NTdiY2IwHhcNMjUxMjA2MTYwMDM4WhcNMjUxMjA3MTYwMDM4WjAzMTEwLwYDVQQD EygxMTU2ZWUyZmRiOTY4ODZhMWFlYmVjZDYzYTdjOGE4OWFiMWE5NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9srIFL7wy5H77DNxIGOlvP5S/eW sayzY9by3wiSI08zFa2n9C2n8V24v/igB4uggKujcjqmYStZGzp/PTG6RKw1ox7A cDGjcyHRfjxHiALDw0fbllosDMcbUz7CKJM+/7H9hoAyDPdpdgIgHHWT1e9OjZLT 9/KLNOGGa1pAlOldtsVJ9SwMSpHnsfYjpUkCGlb8WMJGO7yFJAXjmqG1GXpIAPwN IAF4jTfdTFpPnPZUJQ1GO9N1gfm1DCP5zmHoKIK3B04SwtZvFceUeIB2DtAtrVv9 /TpTU9yyLiLQuzsCAFMhbt1jc2cDRkTmbax3hAmNnhoGz5DzXAcxKPHPLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFW7i/blohqGuvs1jp8iomrGpRzMB8GA1UdIwQY MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt N2RmOWU0YTIzOGNjLzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXwZFA8n Kr5qzhiJAg9h7q6KWLLMBOY9W3kBuyVdya1j6QDJ42cSegidZzotDHc3bgi91kK3 pJvPkxCTITsozu45ntqf3OYa3zmyjJjf68P9dWJ25MkXPjzw+DelhdT06ke34Uvm 3cubogYn3RNv9w5OtpOlgZsJXk4kJS4XUnfLy8AS5tKANq+rCUGNyV+LKmXw+4KA FYQb8Xt8aHwr88kpdYPhodOhcB/UwBH4Ee0rbXlIzCBrgQFDo5K8SGIfCIoHFNFf 5SaIvevwjSMC+a9jd3fJ/T9PGUHPXAhC2MVqLYMg8VaztyY2lOoW5la0b1tC4I+F raIBp+hxLKUxew== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:02 2025 by rpki-client