This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json) Hash identifier: CcYk8jDrF5X4CWb1b+l+TB5ZMXFt6cPeIs2TZVNP29k= Subject key identifier: 02:B8:47:BB:9C:88:62:FE:85:58:AF:08:1C:D9:31:4F:6E:69:E9:94 Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Certificate serial: 019B409207D0AB2142826E7C190473E0D696 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 11:01:10 +0000 Manifest this update: Sun 21 Dec 2025 11:01:10 +0000 Manifest next update: Mon 22 Dec 2025 11:01:10 +0000 Files and hashes: 1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=) 2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: EQfcwf2vqORZkvQp2WB9Wna2DwzK3zi1ZlWBqkk/pO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:07:d0:ab:21:42:82:6e:7c:19:04:73:e0:d6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Validity Not Before: Dec 21 11:01:10 2025 GMT Not After : Dec 22 11:01:10 2025 GMT Subject: CN=02b847bb9c8862fe8558af081cd9314f6e69e994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:6b:37:88:d9:b2:39:83:83:22:ff:de:d6: 89:5a:42:7c:c7:91:41:c8:c3:c2:f8:cf:7d:70:f2: ab:90:4d:c8:67:f8:b8:28:77:85:82:cc:5c:15:54: b7:ca:a6:58:01:83:4b:18:a1:5c:eb:f3:6f:26:84: 0f:5d:55:5a:ac:a6:d1:a3:2b:55:f2:d8:68:8a:c0: a3:9b:fc:36:31:1a:f2:6c:7f:b8:48:f1:8a:17:68: 27:b5:aa:98:2c:7a:96:94:2c:88:aa:77:02:3b:29: 59:06:e3:46:5d:ba:6b:af:89:cf:09:bb:11:5a:0e: b9:26:c9:4f:c6:fe:18:87:6e:f7:ca:0a:5f:ca:09: 3a:cb:75:3e:35:da:15:9c:d6:fc:71:44:ac:d2:52: da:94:e5:7d:45:42:ae:11:5e:73:4e:b0:91:f3:57: 8d:b4:72:26:d0:92:22:18:9e:c0:05:8b:4e:20:d4: 63:db:e3:6f:37:90:7e:dd:5f:1e:27:d6:81:8b:3d: 22:bb:88:f0:4a:3a:d4:59:b0:d0:46:b0:0d:d2:52: 94:f4:02:f6:f0:97:2c:96:af:80:a1:d7:31:17:7e: f7:b9:b7:cb:e6:7d:e8:49:37:66:09:f0:17:49:dc: 42:25:b5:bc:48:bb:1f:9c:53:80:e3:24:94:fa:06: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:47:BB:9C:88:62:FE:85:58:AF:08:1C:D9:31:4F:6E:69:E9:94 X509v3 Authority Key Identifier: keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ce:55:1d:a0:b8:19:2a:50:0b:4e:74:ad:66:5b:69:49:e9: 5b:fa:f7:fa:15:c3:05:b2:a7:44:e4:01:36:98:7b:d2:ad:9e: a2:1f:83:cd:15:94:34:71:81:e3:8d:59:3f:e3:99:08:b0:0f: ba:2b:d4:4f:ac:2a:fa:d0:22:fb:de:58:00:6c:31:f6:67:f9: a4:91:0b:00:f5:6d:69:32:31:04:ec:c4:f4:59:89:98:24:40: 76:4d:72:4f:63:f9:99:c4:c6:d2:53:85:db:77:18:eb:d6:ea: e2:94:21:a4:6e:a6:5b:2d:06:00:c9:5b:46:b6:3f:aa:cc:24: c7:1b:e5:53:70:a2:6a:ac:3d:71:e9:a3:ad:94:e7:e7:96:e0: 9e:0f:68:17:39:36:11:d6:1b:67:5f:1b:a6:88:06:18:7d:54: d4:84:ec:3d:cd:77:3e:10:d5:39:27:23:36:3a:3c:73:99:53: d3:40:2a:de:1c:e1:a2:a3:1b:d8:8d:24:85:c7:04:a3:a7:42: 28:21:ca:8f:3a:00:5d:43:52:c0:ee:ba:9c:6d:3c:5a:f7:89: cf:53:89:87:1e:07:31:cf:b4:52:7e:f6:af:64:90:11:30:54: 1b:00:99:e3:74:78:64:72:bf:d9:9e:8d:69:75:c0:21:75:cb: cf:bb:69:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkgfQqyFCgm58GQRz4NaWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm YzliMzAwHhcNMjUxMjIxMTEwMTEwWhcNMjUxMjIyMTEwMTEwWjAzMTEwLwYDVQQD EygwMmI4NDdiYjljODg2MmZlODU1OGFmMDgxY2Q5MzE0ZjZlNjllOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K9rN4jZsjmDgyL/3taJWkJ8x5FB yMPC+M99cPKrkE3IZ/i4KHeFgsxcFVS3yqZYAYNLGKFc6/NvJoQPXVVarKbRoytV 8thoisCjm/w2MRrybH+4SPGKF2gntaqYLHqWlCyIqncCOylZBuNGXbprr4nPCbsR Wg65JslPxv4Yh273ygpfygk6y3U+NdoVnNb8cUSs0lLalOV9RUKuEV5zTrCR81eN tHIm0JIiGJ7ABYtOINRj2+NvN5B+3V8eJ9aBiz0iu4jwSjrUWbDQRrAN0lKU9AL2 8Jcslq+AodcxF373ubfL5n3oSTdmCfAXSdxCJbW8SLsfnFOA4ySU+gZvYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK4R7uciGL+hVivCBzZMU9uaemUMB8GA1UdIwQY MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc5VHaC4 GSpQC050rWZbaUnpW/r3+hXDBbKnROQBNph70q2eoh+DzRWUNHGB441ZP+OZCLAP uivUT6wq+tAi+95YAGwx9mf5pJELAPVtaTIxBOzE9FmJmCRAdk1yT2P5mcTG0lOF 23cY69bq4pQhpG6mWy0GAMlbRrY/qswkxxvlU3Ciaqw9cemjrZTn55bgng9oFzk2 EdYbZ18bpogGGH1U1ITsPc13PhDVOScjNjo8c5lT00Aq3hzhoqMb2I0khccEo6dC KCHKjzoAXUNSwO66nG08WveJz1OJhx4HMc+0Un72r2SQETBUGwCZ43R4ZHK/2Z6N aXXAIXXLz7tpZw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:20:32 2025 by rpki-client