This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft File: boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json) Hash identifier: w6DzXYRU1lUPcKGX/TnN0IwmmaU/knHt3J9iYi9pSRc= Subject key identifier: 4C:C1:35:B6:FA:67:1E:22:F0:A5:2C:D9:82:06:4B:78:A8:E2:A2:FE Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Certificate serial: 019B3AC6E0D1DA3E221A46F9186D13F3AAD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 08:01:10 +0000 Manifest this update: Sat 20 Dec 2025 08:01:10 +0000 Manifest next update: Sun 21 Dec 2025 08:01:10 +0000 Files and hashes: 1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=) 2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: jv1ea4HcZDoDFU4eU5H/z5TjgjfqpApMZcHwv6Z/xXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:e0:d1:da:3e:22:1a:46:f9:18:6d:13:f3:aa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30 Validity Not Before: Dec 20 08:01:10 2025 GMT Not After : Dec 21 08:01:10 2025 GMT Subject: CN=4cc135b6fa671e22f0a52cd982064b78a8e2a2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:49:84:c0:7c:67:bf:5b:e0:6a:d9:15:90: 7a:c1:75:c2:07:34:4c:15:05:7a:ec:58:a9:91:51: f9:04:da:6b:40:77:21:f1:e2:3f:4c:76:08:fa:3a: 00:57:76:2a:78:02:b3:b0:47:18:d6:55:46:0b:79: d7:04:7e:4f:3d:61:de:6e:37:53:47:80:18:4e:3d: 39:d1:03:78:cb:39:fb:0e:62:82:75:a4:62:a5:f9: 11:26:51:f1:a8:41:3b:08:2a:57:94:96:0d:ea:ba: cf:cf:bc:1b:2a:17:34:f6:1a:53:db:02:dd:19:eb: 77:4c:8c:9e:92:27:ee:30:e4:4a:f6:1a:30:7c:84: 11:e2:28:29:19:1f:e2:a4:55:9f:8c:42:b1:81:4c: 08:42:7c:aa:65:d0:7f:c3:75:de:2c:20:1c:9d:fc: 16:99:0a:e2:33:3d:ca:23:2d:6a:64:d2:7f:f3:0a: 2e:41:d0:e6:bd:b2:4b:f2:7c:6d:91:85:dc:4a:b3: 8f:65:27:af:18:68:c4:af:69:f9:01:91:b5:7c:66: 00:67:0a:a2:bd:6c:86:c3:89:2d:b1:df:d5:a1:f3: ae:51:dd:9b:e2:7f:cb:41:af:af:08:17:d4:6b:84: a0:08:20:ce:53:e9:53:bd:4d:85:09:87:f2:4c:eb: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:35:B6:FA:67:1E:22:F0:A5:2C:D9:82:06:4B:78:A8:E2:A2:FE X509v3 Authority Key Identifier: keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:88:69:d8:4e:76:cd:70:9a:1d:0a:bc:6c:e4:41:16:47:e9: 79:19:43:b4:c8:15:83:aa:1d:0b:65:a4:77:87:af:cc:f8:8c: f1:59:2b:cb:c6:74:10:e1:73:78:5b:df:16:6c:6f:50:a0:9d: 2e:f6:30:b3:4b:0e:53:ff:e7:2b:55:03:c4:c2:fa:2b:8f:c4: 80:25:6e:70:a5:f4:03:a3:e9:3e:aa:0c:1d:42:a0:b1:3a:2e: 36:40:d4:2a:6d:33:6b:4d:bc:94:a9:76:91:5b:1d:b0:dd:65: 54:86:c9:ad:79:fd:a9:77:56:25:c7:4f:7a:2f:77:68:51:9c: 39:0d:de:e0:e0:cd:d0:85:cc:12:20:cf:7e:42:cc:9e:cf:d5: f1:33:5b:a7:cb:b3:9c:c7:06:7f:28:e1:03:a0:14:c4:56:ae: b2:2c:4c:26:df:04:66:d2:98:08:ab:43:a9:06:57:29:7e:60: ae:24:dc:73:b8:e1:e1:fa:91:1b:1f:9e:aa:35:60:47:6c:4b: 77:4d:10:17:6f:f3:37:5e:d8:fd:a9:ff:d7:99:4a:9b:a1:b1: 6e:05:ba:a8:36:28:8d:52:15:79:e2:97:7a:c4:13:e5:bc:4b: 2e:67:46:3d:73:0e:91:e8:45:3e:3b:5b:99:8e:46:40:ec:0d: 36:f3:d2:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xuDR2j4iGkb5GG0T86rWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm YzliMzAwHhcNMjUxMjIwMDgwMTEwWhcNMjUxMjIxMDgwMTEwWjAzMTEwLwYDVQQD Eyg0Y2MxMzViNmZhNjcxZTIyZjBhNTJjZDk4MjA2NGI3OGE4ZTJhMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/5JhMB8Z79b4GrZFZB6wXXCBzRM FQV67FipkVH5BNprQHch8eI/THYI+joAV3YqeAKzsEcY1lVGC3nXBH5PPWHebjdT R4AYTj050QN4yzn7DmKCdaRipfkRJlHxqEE7CCpXlJYN6rrPz7wbKhc09hpT2wLd Get3TIyekifuMORK9howfIQR4igpGR/ipFWfjEKxgUwIQnyqZdB/w3XeLCAcnfwW mQriMz3KIy1qZNJ/8wouQdDmvbJL8nxtkYXcSrOPZSevGGjEr2n5AZG1fGYAZwqi vWyGw4ktsd/VofOuUd2b4n/LQa+vCBfUa4SgCCDOU+lTvU2FCYfyTOv3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzBNbb6Zx4i8KUs2YIGS3io4qL+MB8GA1UdIwQY MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIhp2E52 zXCaHQq8bORBFkfpeRlDtMgVg6odC2Wkd4evzPiM8Vkry8Z0EOFzeFvfFmxvUKCd LvYws0sOU//nK1UDxML6K4/EgCVucKX0A6PpPqoMHUKgsTouNkDUKm0za028lKl2 kVsdsN1lVIbJrXn9qXdWJcdPei93aFGcOQ3e4ODN0IXMEiDPfkLMns/V8TNbp8uz nMcGfyjhA6AUxFausixMJt8EZtKYCKtDqQZXKX5griTcc7jh4fqRGx+eqjVgR2xL d00QF2/zN17Y/an/15lKm6GxbgW6qDYojVIVeeKXesQT5bxLLmdGPXMOkehFPjtb mY5GQOwNNvPS2g== -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:25 2025 by rpki-client