This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft File: boByUGD_SztVrN5qOXwx7ql8I3w.mft (raw, json) Hash identifier: hII+XfihJRT6nBX+OfkXUu6FOlEaJUN5ZQ7BbMELT7g= Subject key identifier: D4:25:C1:E2:E8:9F:E1:EA:59:32:BA:C9:44:48:C2:05:B5:F8:0E:95 Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c Certificate serial: 019AF5783576FF646EEA2CE59999A9C20D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft Manifest number: 0A61 Signing time: Sat 06 Dec 2025 21:01:27 +0000 Manifest this update: Sat 06 Dec 2025 21:01:27 +0000 Manifest next update: Sun 07 Dec 2025 21:01:27 +0000 Files and hashes: 1: G5hDxevfZCHIynIb7kl9zkkafFo.roa (hash: 8zV/uIn4iieWxxlFcNsO96ew34Z1C3Yh+YZ7EOCmJ5k=) 2: boByUGD_SztVrN5qOXwx7ql8I3w.crl (hash: Of3wipd0v0KCF2uoR2y5t5jnGbYJJ3KKG/STegFlZyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:35:76:ff:64:6e:ea:2c:e5:99:99:a9:c2:0d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c Validity Not Before: Dec 6 21:01:27 2025 GMT Not After : Dec 7 21:01:27 2025 GMT Subject: CN=d425c1e2e89fe1ea5932bac94448c205b5f80e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:e2:31:15:b1:34:1e:d3:27:fe:38:29:60: 02:d3:4a:78:c4:0b:c9:b0:a4:71:f7:f2:96:0f:d9: ac:36:ec:67:04:89:7d:a9:27:e8:5b:9c:b9:2b:af: 00:8d:b3:d9:2e:7a:ea:d1:f3:12:5a:b8:26:82:ea: 74:66:be:3d:7b:ab:cc:96:75:92:74:7c:34:2f:87: 98:bd:8f:5c:96:b0:53:b9:48:82:5d:1a:d3:62:cf: 4f:b7:88:57:bb:f6:94:79:e9:f0:b5:45:06:72:de: 78:db:0c:63:68:5c:97:26:76:9d:d8:a1:f0:41:7d: 03:1c:0f:11:f1:ef:51:a1:62:87:b8:c8:e5:bc:25: 20:46:8d:fe:ea:12:36:b7:ac:a1:43:c3:8a:09:e8: 22:06:c3:d0:45:2c:4f:d6:0a:31:36:4e:8e:46:a8: 45:bb:d0:71:7d:55:27:11:5c:49:1a:c9:aa:18:40: 59:0e:99:07:be:3e:6b:c1:05:f9:9e:14:32:9c:cc: 26:ff:b7:9e:2e:b5:18:46:b9:d1:8c:c7:1b:2e:f0: 61:fa:c0:e8:f5:0b:56:ab:dc:81:b3:64:f3:fa:63: ee:dc:65:a9:fa:2f:75:6f:56:da:1f:d2:15:da:e3: 16:50:61:a3:5c:0a:22:c3:18:4f:d0:70:c7:41:b7: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:25:C1:E2:E8:9F:E1:EA:59:32:BA:C9:44:48:C2:05:B5:F8:0E:95 X509v3 Authority Key Identifier: keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:41:90:ca:d1:ca:68:a2:4b:11:48:d3:66:1b:25:18:49:c7: a7:e7:2e:a0:7b:67:48:45:6a:7f:a4:88:0d:1d:48:78:26:92: 66:af:2d:4f:6d:35:e0:45:88:e4:e4:23:1e:d2:40:95:8b:a9: 68:29:71:a1:a5:3d:74:4c:5a:78:aa:ba:61:40:69:e3:dd:ce: 97:30:c9:1e:68:09:72:fa:12:72:10:3b:ec:05:03:47:81:b4: 10:58:bd:69:08:23:65:fe:3e:fc:62:c1:9f:e6:de:bd:45:5d: b8:6b:72:68:7d:93:a1:3d:6a:c4:73:e2:38:ff:28:95:eb:06: 84:2b:c9:b8:26:48:74:08:c2:71:81:ec:db:de:42:cd:77:90: 3e:2b:26:af:af:3f:dc:8b:c7:ee:af:ff:33:17:cb:c2:be:24: 82:a3:a6:15:e6:97:b6:65:78:bb:93:73:f6:5f:69:1e:a6:6e: ef:82:28:b8:69:bd:fd:2e:5d:88:a7:64:6b:69:25:1c:ae:2a: 20:ba:9a:82:f8:d6:97:5a:0e:27:48:f1:b8:c2:71:0b:4a:4e: 2f:b6:de:c2:19:fd:fd:30:ab:f1:ba:6c:26:59:e1:3c:54:cb: 8e:e5:a4:dd:01:cb:b6:ae:a8:57:15:fe:21:6f:e8:8a:8c:eb: fa:1f:4b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eDV2/2Ru6izlmZmpwg0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3 YzIzN2MwHhcNMjUxMjA2MjEwMTI3WhcNMjUxMjA3MjEwMTI3WjAzMTEwLwYDVQQD EyhkNDI1YzFlMmU4OWZlMWVhNTkzMmJhYzk0NDQ4YzIwNWI1ZjgwZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AjiMRWxNB7TJ/44KWAC00p4xAvJ sKRx9/KWD9msNuxnBIl9qSfoW5y5K68AjbPZLnrq0fMSWrgmgup0Zr49e6vMlnWS dHw0L4eYvY9clrBTuUiCXRrTYs9Pt4hXu/aUeenwtUUGct542wxjaFyXJnad2KHw QX0DHA8R8e9RoWKHuMjlvCUgRo3+6hI2t6yhQ8OKCegiBsPQRSxP1goxNk6ORqhF u9BxfVUnEVxJGsmqGEBZDpkHvj5rwQX5nhQynMwm/7eeLrUYRrnRjMcbLvBh+sDo 9QtWq9yBs2Tz+mPu3GWp+i91b1baH9IV2uMWUGGjXAoiwxhP0HDHQbfWvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQlweLon+HqWTK6yURIwgW1+A6VMB8GA1UdIwQY MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt NTMzMzVkYTBjZmQzLzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0GQytHK aKJLEUjTZhslGEnHp+cuoHtnSEVqf6SIDR1IeCaSZq8tT2014EWI5OQjHtJAlYup aClxoaU9dExaeKq6YUBp493OlzDJHmgJcvoSchA77AUDR4G0EFi9aQgjZf4+/GLB n+bevUVduGtyaH2ToT1qxHPiOP8olesGhCvJuCZIdAjCcYHs295CzXeQPismr68/ 3IvH7q//MxfLwr4kgqOmFeaXtmV4u5Nz9l9pHqZu74IouGm9/S5diKdka2klHK4q ILqagvjWl1oOJ0jxuMJxC0pOL7bewhn9/TCr8bpsJlnhPFTLjuWk3QHLtq6oVxX+ IW/oiozr+h9L1g== -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:24 2025 by rpki-client