This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json) Hash identifier: UZ6vXsazC0kCk+o5mpG1RpCStLciJEA5tWlZWpDFjeU= Subject key identifier: E6:54:68:8C:66:91:0B:B6:D3:09:32:F1:72:A7:4B:51:B2:CE:CD:A8 Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce Certificate serial: 019B4091C9080143B34A805ECDFCC31534A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft Manifest number: 16A8 Signing time: Sun 21 Dec 2025 11:00:54 +0000 Manifest this update: Sun 21 Dec 2025 11:00:54 +0000 Manifest next update: Mon 22 Dec 2025 11:00:54 +0000 Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: 35HZ3wgFWJxejGT1f+JIN3H0LpbxmdyY49MyE+LLuJg=) 2: dPa9U6HWifFU_Cos6EbPpdfP3tk.roa (hash: 3jOPrvgsW1hyX1vCwFVn+4LuXyROUmkvR9VpXoAHZWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:c9:08:01:43:b3:4a:80:5e:cd:fc:c3:15:34:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce Validity Not Before: Dec 21 11:00:54 2025 GMT Not After : Dec 22 11:00:54 2025 GMT Subject: CN=e654688c66910bb6d30932f172a74b51b2cecda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:2c:f5:36:c6:eb:d8:6b:82:97:6f:ce:80: 87:6e:5c:5a:45:3d:9b:bc:78:7a:c5:b0:91:16:4f: 0c:61:53:5f:9c:e9:3f:3b:58:2f:fd:3a:1e:78:d5: 37:8d:ef:d1:ce:51:73:88:a5:d8:05:78:25:3c:76: 07:4b:05:25:03:c7:dc:56:81:39:09:1a:b5:1d:b3: 7b:de:00:ea:da:85:ab:ef:18:cc:07:e0:3f:c4:bd: 13:db:45:fd:9f:81:0d:3e:f3:63:79:2e:6d:b8:03: e4:40:32:e8:e5:f8:20:c7:10:41:e4:06:73:a7:e7: ae:e1:95:dc:5a:7a:e5:56:eb:41:ad:b5:ef:dc:4f: a6:8e:16:6b:96:85:95:64:5a:19:fd:e9:b6:29:c3: 4c:b7:21:a1:a3:a8:ce:2e:4b:c2:d7:a8:a1:5f:6a: 40:d9:0d:9e:c4:02:88:dd:39:49:0c:df:bf:61:dc: 32:62:6e:6e:2a:7d:2e:30:8f:72:2d:14:85:ef:96: a3:6b:30:44:b9:88:22:ae:1b:45:b5:d3:56:3f:ae: 15:2c:f2:8d:f8:ab:16:75:31:f2:e8:03:f2:af:20: 62:8e:7d:32:46:0a:05:8f:33:6f:f6:63:31:a5:4a: a5:91:a0:27:c7:a2:f3:9f:ca:b1:30:1c:e7:9d:4f: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:68:8C:66:91:0B:B6:D3:09:32:F1:72:A7:4B:51:B2:CE:CD:A8 X509v3 Authority Key Identifier: keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:53:ed:81:14:ec:80:70:9f:78:6c:f3:ff:0a:3d:94:cb:72: b3:4d:4a:e1:87:93:28:3b:62:cd:71:d0:b2:3f:0d:33:f0:d1: 64:54:f8:c0:e5:fd:16:2a:11:14:44:f5:30:34:25:c4:dc:34: 89:ab:12:5e:71:26:ce:25:4f:f6:b4:0e:e9:91:5f:6f:62:31: 70:ca:15:8b:56:44:c1:1c:11:c7:16:e6:a4:e3:b5:f6:4d:1d: b3:9a:3d:87:04:16:e8:46:a9:2c:ef:8b:aa:f9:c4:2f:08:78: 52:f3:38:73:47:44:95:df:b3:5c:93:f7:66:02:6d:c5:0f:f3: 6d:de:6f:e3:1d:a2:4d:64:3e:6d:ec:2f:c0:1e:c2:f0:47:e2: ec:87:f5:45:6d:4b:46:b3:34:20:5f:39:5b:e9:1d:0a:e1:f0: a1:77:52:8f:4d:86:9d:1e:d3:4f:e4:d3:de:05:03:75:92:cd: 8d:fd:5c:9a:a8:bd:d7:8c:94:da:12:9a:fd:6e:fd:ae:ba:90: fb:d8:21:08:b7:e6:dc:34:b1:a4:73:4f:83:53:3b:9c:bf:f1: 4b:a4:de:8a:5e:ed:56:73:77:cc:24:70:81:7d:4e:30:d5:ca: f8:31:4f:c6:14:2d:6a:9a:db:11:a6:84:a4:6a:9b:23:6b:79: 40:4d:18:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkckIAUOzSoBezfzDFTSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTYwNGE0NTY3N2JlNzczMTM5NjlhZDE3YWVjNjljZTk3 YzQzY2UwHhcNMjUxMjIxMTEwMDU0WhcNMjUxMjIyMTEwMDU0WjAzMTEwLwYDVQQD EyhlNjU0Njg4YzY2OTEwYmI2ZDMwOTMyZjE3MmE3NGI1MWIyY2VjZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdws9TbG69hrgpdvzoCHblxaRT2b vHh6xbCRFk8MYVNfnOk/O1gv/ToeeNU3je/RzlFziKXYBXglPHYHSwUlA8fcVoE5 CRq1HbN73gDq2oWr7xjMB+A/xL0T20X9n4ENPvNjeS5tuAPkQDLo5fggxxBB5AZz p+eu4ZXcWnrlVutBrbXv3E+mjhZrloWVZFoZ/em2KcNMtyGho6jOLkvC16ihX2pA 2Q2exAKI3TlJDN+/YdwyYm5uKn0uMI9yLRSF75ajazBEuYgirhtFtdNWP64VLPKN +KsWdTHy6APyryBijn0yRgoFjzNv9mMxpUqlkaAnx6Lzn8qxMBznnU+1iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZUaIxmkQu20wky8XKnS1Gyzs2oMB8GA1UdIwQY MBaAFATmBKRWd753MTlprReuxpzpfEPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2Qt NTJhN2I5MjViMjI0LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2QtNTJhN2I5MjViMjI0 LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVPtgRTs gHCfeGzz/wo9lMtys01K4YeTKDtizXHQsj8NM/DRZFT4wOX9FioRFET1MDQlxNw0 iasSXnEmziVP9rQO6ZFfb2IxcMoVi1ZEwRwRxxbmpOO19k0ds5o9hwQW6EapLO+L qvnELwh4UvM4c0dEld+zXJP3ZgJtxQ/zbd5v4x2iTWQ+bewvwB7C8Efi7If1RW1L RrM0IF85W+kdCuHwoXdSj02GnR7TT+TT3gUDdZLNjf1cmqi914yU2hKa/W79rrqQ +9ghCLfm3DSxpHNPg1M7nL/xS6Teil7tVnN3zCRwgX1OMNXK+DFPxhQtaprbEaaE pGqbI2t5QE0Y6Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:52:32 2025 by rpki-client