This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json) Hash identifier: /0CTPqGhn+zXZfFJGuCC9ksARJtWOoFwHyEms5d9Q5Y= Subject key identifier: 73:7C:98:A3:C7:C6:81:70:01:73:03:BB:C5:F3:A4:C6:AB:15:74:51 Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Certificate serial: 019AF54072D1EB0A2E3FA166E3F50F62870F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft Manifest number: 143E Signing time: Sat 06 Dec 2025 20:00:32 +0000 Manifest this update: Sat 06 Dec 2025 20:00:32 +0000 Manifest next update: Sun 07 Dec 2025 20:00:32 +0000 Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: tb+y6z1IG8CH8Z8ZXzsPjwkPkvCUxNlpol8uUljbkt4=) 2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:72:d1:eb:0a:2e:3f:a1:66:e3:f5:0f:62:87:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Validity Not Before: Dec 6 20:00:32 2025 GMT Not After : Dec 7 20:00:32 2025 GMT Subject: CN=737c98a3c7c68170017303bbc5f3a4c6ab157451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:1b:43:eb:b5:a5:89:79:14:7e:ac:77:46: d8:71:12:f8:07:1e:dd:d0:7c:74:32:52:69:cb:17: 93:73:76:0d:51:15:e1:55:1e:0d:2b:db:23:b7:5a: 2e:84:a2:f9:c1:bc:b6:9d:44:f3:4b:2b:b9:19:b5: bc:00:b9:90:e2:e8:c5:87:8d:b2:c3:a6:97:7b:6d: c8:1a:37:bf:ff:95:44:31:97:67:ec:c6:c8:4d:82: 93:e7:c3:af:37:a0:66:63:f9:eb:be:89:07:5f:7d: ab:7c:29:57:e2:78:a0:17:d4:07:8d:ae:eb:b0:fc: 5a:bb:19:82:d0:dd:42:27:28:ab:c2:36:80:57:33: 9d:f0:17:e7:23:14:81:02:b6:a9:0d:8e:07:10:ed: f9:f9:ea:6a:9d:96:32:ac:b3:d5:72:6f:06:29:64: f7:1d:4c:79:05:35:30:c4:c8:3c:01:39:9c:6e:59: 42:56:f8:df:78:3b:cd:e1:fc:47:57:79:0e:fd:66: 70:4b:8c:08:23:bd:95:8d:90:67:f8:47:d3:4a:db: d9:95:13:47:ac:d3:19:93:85:a8:20:70:c2:08:96: 9e:b4:61:31:fd:96:fb:56:bd:b0:13:40:33:17:44: 1d:0c:09:8f:13:f9:70:f1:39:74:80:9d:58:ff:59: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7C:98:A3:C7:C6:81:70:01:73:03:BB:C5:F3:A4:C6:AB:15:74:51 X509v3 Authority Key Identifier: keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:8b:45:0b:8a:c6:9b:da:fa:7f:e7:89:62:8a:a5:97:fe:05: 4d:b6:01:e0:3e:32:ac:c6:0c:07:79:0f:fa:2b:33:d2:d8:18: 52:90:b2:33:9a:95:de:34:b2:8b:1a:33:0c:b0:48:1c:69:39: 12:7c:e3:dd:4e:f8:d3:f9:22:12:82:c1:8a:58:e6:5d:7b:4b: a4:a3:ca:c9:7b:34:6e:30:b8:9a:8d:5a:63:a5:a2:4d:82:3a: d5:41:04:70:b1:61:c3:36:42:8e:9e:50:38:db:fa:22:d6:64: cc:af:7a:08:a5:12:fb:02:f5:05:85:9b:7e:08:78:87:d9:08: 95:3a:2a:4d:5b:e4:bb:73:96:48:d8:fc:ff:ff:12:f7:b0:de: 77:af:fa:94:48:ae:44:4d:75:b2:33:85:06:c9:6c:56:f4:1e: f5:d6:7f:37:1e:4c:ac:2d:82:36:9b:06:3e:00:91:b8:8b:17: d9:b5:7a:54:bf:0f:9a:57:81:8e:e3:a1:9c:7d:34:34:20:51: 5d:e2:d2:b0:b0:09:c2:a9:82:11:98:f1:42:75:2b:21:af:1f: b7:d1:51:1b:f6:86:36:b6:7c:de:c1:fb:80:f6:d1:7d:df:b5: 42:38:ef:bf:d0:80:68:72:67:b8:9b:2e:e2:87:79:c6:d3:d7: b7:c2:fc:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHLR6wouP6Fm4/UPYocPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OGNiODViYzRlOWU0YjczMmU5NTdmMDhhYTFjMDIzN2Fh ZGM0N2YwHhcNMjUxMjA2MjAwMDMyWhcNMjUxMjA3MjAwMDMyWjAzMTEwLwYDVQQD Eyg3MzdjOThhM2M3YzY4MTcwMDE3MzAzYmJjNWYzYTRjNmFiMTU3NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmMbQ+u1pYl5FH6sd0bYcRL4Bx7d 0Hx0MlJpyxeTc3YNURXhVR4NK9sjt1ouhKL5wby2nUTzSyu5GbW8ALmQ4ujFh42y w6aXe23IGje//5VEMZdn7MbITYKT58OvN6BmY/nrvokHX32rfClX4nigF9QHja7r sPxauxmC0N1CJyirwjaAVzOd8BfnIxSBArapDY4HEO35+epqnZYyrLPVcm8GKWT3 HUx5BTUwxMg8ATmcbllCVvjfeDvN4fxHV3kO/WZwS4wII72VjZBn+EfTStvZlRNH rNMZk4WoIHDCCJaetGEx/Zb7Vr2wE0AzF0QdDAmPE/lw8Tl0gJ1Y/1lJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN8mKPHxoFwAXMDu8XzpMarFXRRMB8GA1UdIwQY MBaAFAaMuFvE6eS3MulX8IqhwCN6rcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMt MTlmMjJlZDYxM2E1LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMtMTlmMjJlZDYxM2E1 LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYtFC4rG m9r6f+eJYoqll/4FTbYB4D4yrMYMB3kP+isz0tgYUpCyM5qV3jSyixozDLBIHGk5 Enzj3U740/kiEoLBiljmXXtLpKPKyXs0bjC4mo1aY6WiTYI61UEEcLFhwzZCjp5Q ONv6ItZkzK96CKUS+wL1BYWbfgh4h9kIlToqTVvku3OWSNj8//8S97Ded6/6lEiu RE11sjOFBslsVvQe9dZ/Nx5MrC2CNpsGPgCRuIsX2bV6VL8PmleBjuOhnH00NCBR XeLSsLAJwqmCEZjxQnUrIa8ft9FRG/aGNrZ83sH7gPbRfd+1Qjjvv9CAaHJnuJsu 4od5xtPXt8L8FQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:50 2025 by rpki-client