This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft File: boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json) Hash identifier: IpeUYAV4hAuXnke3Kz8b0TGdxrNcxPMin+iaNoclsug= Subject key identifier: C9:73:AE:0C:B1:58:EC:BD:16:27:87:59:01:BC:3B:60:62:BE:EC:97 Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A Certificate issuer: /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Certificate serial: 019B51853B0731BDEB276F8F3AB5D1EEDA56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 18:00:44 +0000 Manifest this update: Wed 24 Dec 2025 18:00:44 +0000 Manifest next update: Thu 25 Dec 2025 18:00:44 +0000 Files and hashes: 1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: BQ/+YbxzZuF9I+cUQY6es3uNuNAh9b5IWU/vvKphVc4=) 2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:3b:07:31:bd:eb:27:6f:8f:3a:b5:d1:ee:da:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a Validity Not Before: Dec 24 18:00:44 2025 GMT Not After : Dec 25 18:00:44 2025 GMT Subject: CN=c973ae0cb158ecbd1627875901bc3b6062beec97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:d8:7b:5c:71:46:ec:46:f0:71:01:d4:37: 3b:0f:b6:a8:08:78:e8:0e:6c:21:f2:74:a6:e5:1d: be:41:fd:d8:fc:54:c6:e3:8a:28:40:93:89:cc:01: 9b:99:36:fc:98:15:93:bb:05:c7:39:13:b2:0e:6c: c7:60:ec:81:15:c2:de:7a:e7:7d:7a:a5:b7:7d:41: a3:b8:ef:8a:c9:0a:ba:d6:27:ce:20:fa:31:40:8b: b4:49:ab:38:d3:e0:fd:40:e7:d9:2b:fd:10:1a:6a: 29:36:5a:17:0a:95:f0:47:67:6b:f4:3f:f7:c0:c7: fc:09:b6:b9:83:33:18:3d:19:ec:6b:09:53:2c:59: 02:ec:8c:3b:0d:5c:39:31:24:09:04:f7:98:2a:90: 98:c7:a7:0e:5f:6a:5f:f1:25:d3:72:15:dc:51:4d: e3:43:b2:60:8e:4f:bd:e6:71:21:a8:67:de:53:ed: ee:ea:59:a2:69:63:fb:ad:50:18:67:0d:a8:ed:80: 74:57:ca:b8:b1:92:a3:69:36:7f:ca:4c:39:2c:b1: a9:81:12:27:49:96:e7:64:cb:ec:63:da:2b:d0:64: 5c:83:b4:58:c7:46:e9:19:1b:f5:f1:20:51:02:e5: c9:eb:13:b1:ee:80:09:3f:57:e4:8a:c6:fd:20:27: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:AE:0C:B1:58:EC:BD:16:27:87:59:01:BC:3B:60:62:BE:EC:97 X509v3 Authority Key Identifier: keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7f:63:be:22:b1:9c:67:39:63:ed:49:77:79:14:5d:8c:f6: 2a:c6:49:74:d3:19:26:95:11:c8:60:35:18:b2:41:c1:3f:a2: ee:1b:7b:b8:d3:7d:1f:54:4c:1f:64:37:3c:d1:2f:6c:33:c5: e0:aa:39:1a:33:42:87:b3:b7:ec:81:a4:5a:83:48:9e:f1:dc: f9:a3:60:b4:cb:b2:6b:31:8c:61:96:c9:e0:4e:b6:b6:2f:5d: a9:6b:59:ff:4c:5f:1a:08:34:67:0c:72:9b:87:ff:06:61:35: b3:e7:ba:9a:d5:c1:d5:3d:13:cd:d2:0e:62:cc:42:a7:12:b7: 26:af:68:e2:fb:ca:3c:e3:e6:9d:ff:3b:ed:93:88:ec:90:ea: db:84:d7:33:c3:2b:5a:7d:20:7e:e7:c1:47:4f:11:32:2f:32: c5:3f:fc:b6:75:e8:7c:46:a0:00:ae:fb:9a:58:0b:5a:b4:60: 18:be:63:b0:f3:2e:1a:7f:de:d8:fb:b0:25:1c:1a:1d:58:8e: a3:df:7a:5b:85:8c:e6:37:63:2e:27:1b:08:94:97:6c:cb:82: 58:70:45:cb:45:3d:84:a4:04:7f:e7:6a:74:ee:bb:79:07:c1: db:88:cc:40:8d:64:f4:a8:c5:a6:f0:f6:4f:a7:39:de:e0:3d: fa:c8:36:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhTsHMb3rJ2+POrXR7tpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODNmNjg1ZWI3YjZhMmY4NDY0Yjk5NzEyOTMzOGQ2M2Y3 ZWVkNmEwHhcNMjUxMjI0MTgwMDQ0WhcNMjUxMjI1MTgwMDQ0WjAzMTEwLwYDVQQD EyhjOTczYWUwY2IxNThlY2JkMTYyNzg3NTkwMWJjM2I2MDYyYmVlYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthXYe1xxRuxG8HEB1Dc7D7aoCHjo Dmwh8nSm5R2+Qf3Y/FTG44ooQJOJzAGbmTb8mBWTuwXHOROyDmzHYOyBFcLeeud9 eqW3fUGjuO+KyQq61ifOIPoxQIu0Sas40+D9QOfZK/0QGmopNloXCpXwR2dr9D/3 wMf8Cba5gzMYPRnsawlTLFkC7Iw7DVw5MSQJBPeYKpCYx6cOX2pf8SXTchXcUU3j Q7Jgjk+95nEhqGfeU+3u6lmiaWP7rVAYZw2o7YB0V8q4sZKjaTZ/ykw5LLGpgRIn SZbnZMvsY9or0GRcg7RYx0bpGRv18SBRAuXJ6xOx7oAJP1fkisb9ICcW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlzrgyxWOy9FieHWQG8O2BivuyXMB8GA1UdIwQY MBaAFG6D9oXre2ovhGS5lxKTONY/fu1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUt ZWFiZTM0ZTgwMmI0LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80YWViOGEtYjk2Zi00ZWM0LThkOGUtZWFiZTM0ZTgwMmI0 LzEvYm9QMmhldDdhaS1FWkxtWEVwTTQxajktN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKn9jviKx nGc5Y+1Jd3kUXYz2KsZJdNMZJpURyGA1GLJBwT+i7ht7uNN9H1RMH2Q3PNEvbDPF 4Ko5GjNCh7O37IGkWoNInvHc+aNgtMuyazGMYZbJ4E62ti9dqWtZ/0xfGgg0Zwxy m4f/BmE1s+e6mtXB1T0TzdIOYsxCpxK3Jq9o4vvKPOPmnf877ZOI7JDq24TXM8Mr Wn0gfufBR08RMi8yxT/8tnXofEagAK77mlgLWrRgGL5jsPMuGn/e2PuwJRwaHViO o996W4WM5jdjLicbCJSXbMuCWHBFy0U9hKQEf+dqdO67eQfB24jMQI1k9KjFpvD2 T6c53uA9+sg2rA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:06:03 2025 by rpki-client