This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json) Hash identifier: ZUtjQmxNOzhlpBmPq1Jja28TvQzvPx3RJIYJFjvenaA= Subject key identifier: 7B:BB:57:7E:D3:C8:47:54:98:BD:C5:97:A5:60:1D:9B:97:4B:9B:89 Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16 Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416 Certificate serial: 019B33E8BB14E92AA5919AA727D9B9026180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 00:00:48 +0000 Manifest this update: Fri 19 Dec 2025 00:00:48 +0000 Manifest next update: Sat 20 Dec 2025 00:00:48 +0000 Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: LsHtyoiORQIjutP1D84+YNfr8Q/amUTI8T4PvEe99Pc=) 2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:bb:14:e9:2a:a5:91:9a:a7:27:d9:b9:02:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416 Validity Not Before: Dec 19 00:00:48 2025 GMT Not After : Dec 20 00:00:48 2025 GMT Subject: CN=7bbb577ed3c8475498bdc597a5601d9b974b9b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:3e:f9:77:b5:b2:47:8c:85:d4:44:be:75: 3d:90:8b:9d:78:9f:13:18:4c:af:36:43:54:c7:66: 63:ab:8b:2c:58:71:73:77:c1:b6:46:90:13:30:eb: 75:99:af:eb:82:6b:53:cd:00:94:29:91:6e:8e:6d: 76:82:c7:1c:70:3c:46:0a:b3:8d:90:e0:31:19:ca: 16:f1:3e:4e:61:79:00:e6:f1:d0:79:fd:03:2f:09: 45:1f:60:d2:d7:12:0d:b8:3f:8e:ce:b4:08:c2:47: 38:5b:10:0a:90:61:9c:dc:08:c8:0b:e4:ee:cb:79: 61:0b:34:4e:a8:c8:61:50:19:e8:60:04:35:a2:ff: 88:8b:ac:84:64:5b:04:39:60:a0:40:c7:4a:5a:dc: c2:24:33:e5:91:61:95:e6:49:be:5a:1e:af:fe:77: 22:8b:b2:5d:a6:7f:11:88:f0:84:a6:fc:4e:e1:f4: 72:42:a7:e6:cc:f8:6c:6e:f0:5c:97:ab:fe:e1:05: 06:58:d2:f2:57:6f:65:09:7a:ee:ec:eb:ed:c1:6b: b4:9b:21:32:c9:1b:f2:bd:7b:f9:7c:d6:ed:44:98: a7:3a:01:2c:ff:f9:cd:b4:e2:bd:e2:50:b5:8d:60: 82:49:43:0d:88:35:e9:72:e7:24:fe:83:91:48:a7: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BB:57:7E:D3:C8:47:54:98:BD:C5:97:A5:60:1D:9B:97:4B:9B:89 X509v3 Authority Key Identifier: keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:91:b3:5a:a0:7e:7f:a5:af:0f:67:ba:7e:ca:1e:5a:38:3a: 69:c1:a9:2f:e8:cf:37:43:65:49:3c:07:30:01:3f:3c:b6:53: 04:26:88:ac:02:b3:a6:9e:fd:4e:c0:e6:95:59:ce:17:c3:51: 24:88:93:96:64:57:02:e2:8c:aa:be:b3:83:19:a4:61:6d:73: 4d:40:fe:26:c1:d7:fb:f4:b3:0b:42:1d:8b:75:66:66:d4:fe: aa:7e:b4:a3:48:93:35:86:3f:7b:14:23:d7:2b:57:64:27:b9: e5:78:02:01:9e:4b:d1:d6:27:a3:ff:07:fb:70:da:5a:6e:57: 15:0d:cf:85:35:be:e7:fb:c9:19:13:4b:69:f6:5c:5d:8e:3d: 97:dc:cc:c1:ac:d9:fb:a7:22:89:af:66:9a:ec:8d:ab:98:55: 57:38:36:6e:63:8a:38:cb:f6:e9:46:14:b1:02:fb:a3:dd:7d: ac:c4:7d:0e:88:2d:ef:6c:2e:7a:98:64:fc:7a:6f:68:79:de: 66:dd:be:42:d2:77:2c:45:54:67:c5:92:88:1e:64:31:8b:bc: 5d:59:97:40:49:db:f7:dc:45:6d:79:8f:c0:bd:c6:62:f1:41: c7:8a:a4:ad:5d:8b:e2:47:6b:88:a8:32:69:a5:7e:48:84:ce: 13:64:c3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LsU6SqlkZqnJ9m5AmGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1 ZDQ0MTYwHhcNMjUxMjE5MDAwMDQ4WhcNMjUxMjIwMDAwMDQ4WjAzMTEwLwYDVQQD Eyg3YmJiNTc3ZWQzYzg0NzU0OThiZGM1OTdhNTYwMWQ5Yjk3NGI5Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlM++Xe1skeMhdREvnU9kIudeJ8T GEyvNkNUx2Zjq4ssWHFzd8G2RpATMOt1ma/rgmtTzQCUKZFujm12gscccDxGCrON kOAxGcoW8T5OYXkA5vHQef0DLwlFH2DS1xINuD+OzrQIwkc4WxAKkGGc3AjIC+Tu y3lhCzROqMhhUBnoYAQ1ov+Ii6yEZFsEOWCgQMdKWtzCJDPlkWGV5km+Wh6v/nci i7Jdpn8RiPCEpvxO4fRyQqfmzPhsbvBcl6v+4QUGWNLyV29lCXru7OvtwWu0myEy yRvyvXv5fNbtRJinOgEs//nNtOK94lC1jWCCSUMNiDXpcuck/oORSKcaPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu7V37TyEdUmL3Fl6VgHZuXS5uJMB8GA1UdIwQY MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5GzWqB+ f6WvD2e6fsoeWjg6acGpL+jPN0NlSTwHMAE/PLZTBCaIrAKzpp79TsDmlVnOF8NR JIiTlmRXAuKMqr6zgxmkYW1zTUD+JsHX+/SzC0Idi3VmZtT+qn60o0iTNYY/exQj 1ytXZCe55XgCAZ5L0dYno/8H+3DaWm5XFQ3PhTW+5/vJGRNLafZcXY49l9zMwazZ +6ciia9mmuyNq5hVVzg2bmOKOMv26UYUsQL7o919rMR9Dogt72wuephk/HpvaHne Zt2+QtJ3LEVUZ8WSiB5kMYu8XVmXQEnb99xFbXmPwL3GYvFBx4qkrV2L4kdriKgy aaV+SITOE2TDaA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:57:10 2025 by rpki-client