This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json) Hash identifier: s3ZNLdcqEAZ25RctE5O/2C1oBxue8f72vALJHJ5iHU4= Subject key identifier: 76:87:4B:09:C5:16:CA:2A:4D:4E:1F:13:C0:7F:EB:4E:95:E6:BF:CE Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce Certificate serial: 019B70D955E9606BE454628B5F656BB7EAC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft Manifest number: 16C1 Signing time: Tue 30 Dec 2025 20:00:49 +0000 Manifest this update: Tue 30 Dec 2025 20:00:49 +0000 Manifest next update: Wed 31 Dec 2025 20:00:49 +0000 Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: TSQi3QvHuEj8sFPdF6E1rTPRRLC7ud+vEWW/lRVvEWE=) 2: dPa9U6HWifFU_Cos6EbPpdfP3tk.roa (hash: 3jOPrvgsW1hyX1vCwFVn+4LuXyROUmkvR9VpXoAHZWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:55:e9:60:6b:e4:54:62:8b:5f:65:6b:b7:ea:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce Validity Not Before: Dec 30 20:00:49 2025 GMT Not After : Dec 31 20:00:49 2025 GMT Subject: CN=76874b09c516ca2a4d4e1f13c07feb4e95e6bfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:bb:11:ca:e2:2d:bc:20:6d:8f:d3:a5:cb: fd:d1:fb:ab:9e:b1:a9:1d:d3:47:97:16:d5:af:34: 56:c8:40:00:c6:1e:6e:a8:7a:cd:a2:4b:ad:d1:fd: 74:f5:7b:8d:ef:c1:ce:fd:c3:27:77:d8:4b:a3:4e: 46:bf:73:95:50:a5:bb:2d:58:37:51:c5:d0:a0:48: ef:97:ae:fd:17:d5:3b:98:d9:a6:e1:ea:f5:80:7f: 8b:3c:62:7b:9d:7b:f0:04:61:53:ae:e4:7a:e6:96: 94:c7:af:58:0b:58:38:30:0e:11:32:42:b5:27:76: 4e:6d:47:d4:f4:0e:da:ea:ed:f4:f8:1a:e0:e2:4e: 36:c7:af:04:79:0e:b6:cb:e9:98:e3:b2:7b:32:65: e6:31:81:73:df:95:ce:61:35:c3:e1:6e:6a:64:15: 84:e9:23:a9:46:49:34:ad:3f:cf:27:35:d4:31:a7: 91:79:22:3f:31:77:b9:e2:db:99:9c:a1:0c:27:34: 42:c4:46:7d:90:09:14:63:9b:5f:d3:79:e2:8c:46: 57:1e:40:77:0c:ec:31:a6:66:6f:ff:d0:2d:b5:57: a2:4f:94:6b:0d:c0:60:16:a6:77:d9:b0:47:f5:63: e6:c1:30:0b:75:db:cf:02:10:2d:42:38:3d:d8:49: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:87:4B:09:C5:16:CA:2A:4D:4E:1F:13:C0:7F:EB:4E:95:E6:BF:CE X509v3 Authority Key Identifier: keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:30:79:8c:02:a0:8f:49:f4:fe:16:4d:8d:9f:7c:f4:8d:f6: d5:2d:a7:8f:bf:40:4a:e2:a5:bc:84:d0:19:02:f9:f2:6f:39: fe:bf:fe:06:20:1b:c3:69:75:90:99:79:04:1e:8d:af:eb:9b: 4e:ae:2f:0b:53:a6:26:ee:37:cb:a6:0e:1b:ff:30:42:20:b8: 98:b7:f0:e2:36:ff:e1:00:ab:50:46:2d:9b:b9:f0:d3:72:b3: 2c:74:52:0b:22:45:9e:8e:54:8a:d8:58:57:29:f5:c3:85:5a: ab:42:6d:2b:7c:4c:f5:f7:55:86:34:f8:1f:20:98:97:7e:0e: 69:7d:c3:bb:ce:9f:07:9f:6c:f7:12:c5:e8:85:82:a9:a6:39: 7c:3a:e2:a8:7f:81:e1:86:e9:23:b6:62:d4:c6:2e:3a:16:f6: f4:1d:73:cc:ba:5d:7b:c3:c1:4e:6f:18:3f:37:83:64:10:9d: 58:4c:21:ba:d3:8b:9f:32:50:5c:8b:d3:10:fe:92:bd:53:3f: 13:bd:c9:52:36:9c:31:a0:80:b7:21:45:7a:32:39:52:0e:7f: bd:fd:5e:e9:9c:4a:41:99:c5:6a:41:17:78:5c:ff:70:fd:c1: 54:5e:27:99:f1:bf:60:f1:d0:ad:93:b5:ec:2d:48:8a:c8:50: 38:19:23:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2VXpYGvkVGKLX2Vrt+rHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTYwNGE0NTY3N2JlNzczMTM5NjlhZDE3YWVjNjljZTk3 YzQzY2UwHhcNMjUxMjMwMjAwMDQ5WhcNMjUxMjMxMjAwMDQ5WjAzMTEwLwYDVQQD Eyg3Njg3NGIwOWM1MTZjYTJhNGQ0ZTFmMTNjMDdmZWI0ZTk1ZTZiZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2u7EcriLbwgbY/Tpcv90furnrGp HdNHlxbVrzRWyEAAxh5uqHrNokut0f109XuN78HO/cMnd9hLo05Gv3OVUKW7LVg3 UcXQoEjvl679F9U7mNmm4er1gH+LPGJ7nXvwBGFTruR65paUx69YC1g4MA4RMkK1 J3ZObUfU9A7a6u30+Brg4k42x68EeQ62y+mY47J7MmXmMYFz35XOYTXD4W5qZBWE 6SOpRkk0rT/PJzXUMaeReSI/MXe54tuZnKEMJzRCxEZ9kAkUY5tf03nijEZXHkB3 DOwxpmZv/9AttVeiT5RrDcBgFqZ32bBH9WPmwTALddvPAhAtQjg92ElqlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaHSwnFFsoqTU4fE8B/606V5r/OMB8GA1UdIwQY MBaAFATmBKRWd753MTlprReuxpzpfEPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2Qt NTJhN2I5MjViMjI0LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2QtNTJhN2I5MjViMjI0 LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDB5jAKg j0n0/hZNjZ989I321S2nj79ASuKlvITQGQL58m85/r/+BiAbw2l1kJl5BB6Nr+ub Tq4vC1OmJu43y6YOG/8wQiC4mLfw4jb/4QCrUEYtm7nw03KzLHRSCyJFno5UithY Vyn1w4Vaq0JtK3xM9fdVhjT4HyCYl34OaX3Du86fB59s9xLF6IWCqaY5fDriqH+B 4YbpI7Zi1MYuOhb29B1zzLpde8PBTm8YPzeDZBCdWEwhutOLnzJQXIvTEP6SvVM/ E73JUjacMaCAtyFFejI5Ug5/vf1e6ZxKQZnFakEXeFz/cP3BVF4nmfG/YPHQrZO1 7C1IishQOBkjAQ== -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:40 2025 by rpki-client