This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json) Hash identifier: HLbPorDzKYL1UTXwtmGY2f+l0WyWRUgA4rgebiKZK7s= Subject key identifier: 7C:08:1B:94:6D:E2:C9:8B:D6:35:30:0D:43:31:43:D3:57:D8:00:0E Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Certificate serial: 019B360E195464B52ABB28600921B6A7FC0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft Manifest number: 0486 Signing time: Fri 19 Dec 2025 10:00:52 +0000 Manifest this update: Fri 19 Dec 2025 10:00:52 +0000 Manifest next update: Sat 20 Dec 2025 10:00:52 +0000 Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: DJ8mQk8ZG6ykQxK2hRI18y3dw6bxqrl8dOFRPbDSs1s=) 2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=) 3: _b4C80puZ4QQZiCjVn1A8db2DMM.roa (hash: BTn925eDDhMQbieFlWe3FviXvz8DAA+vgg6fsWjWAFs=) 4: t794Rq3oD5hjUa_fm7_FJ1kTjgY.roa (hash: e8v8ak73SzlgLcU/OgDyl114eL/kRo4XPjTTeE0Y/3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:19:54:64:b5:2a:bb:28:60:09:21:b6:a7:fc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb Validity Not Before: Dec 19 10:00:52 2025 GMT Not After : Dec 20 10:00:52 2025 GMT Subject: CN=7c081b946de2c98bd635300d433143d357d8000e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:f5:e3:3d:b5:ce:9c:d7:5b:d5:2d:df:52: b1:d7:a0:35:68:fd:be:ae:fe:67:2a:50:24:a7:7a: b7:ce:08:42:a7:09:1b:ed:e6:e8:36:08:e0:5e:dc: a8:82:7e:d4:0b:b3:17:18:65:a0:7b:bf:7e:ea:88: 60:c9:f5:ad:a3:76:c5:af:1d:50:dd:d1:18:47:fb: b7:ce:0b:9b:32:23:b1:dc:27:dd:02:b2:70:c3:7c: 86:6e:22:35:27:79:cf:4f:97:38:c2:24:53:a2:0c: 74:5e:00:e0:ae:c5:35:cd:f8:cc:2b:6c:84:35:65: ac:ff:42:96:a2:c5:e3:a0:31:1b:31:71:62:99:61: d4:11:c5:b0:5a:40:df:cc:bb:c2:2c:89:bd:2a:e9: a3:c9:88:b4:6f:ac:3f:2a:ca:a7:90:7a:86:85:97: a6:e9:15:46:5e:53:da:08:f3:cc:8a:b5:0a:68:b5: 77:b9:92:f2:bd:88:e9:3f:a0:30:f2:da:f8:60:5d: b3:ed:00:55:da:de:25:af:76:31:8f:c9:6b:cd:2e: cb:56:7d:7a:4f:b9:07:12:63:ba:15:7b:ca:0f:13: 64:ab:07:3b:0d:20:83:95:e7:36:be:74:ff:fe:a9: e4:5e:b9:92:bd:f9:d5:2d:28:1e:f0:16:a0:b8:00: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:08:1B:94:6D:E2:C9:8B:D6:35:30:0D:43:31:43:D3:57:D8:00:0E X509v3 Authority Key Identifier: keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:23:20:d4:3f:9e:ee:38:a4:64:48:15:64:bd:9c:44:7c:ae: 4c:00:79:80:62:35:f1:8f:7b:55:3d:a8:cc:1a:fa:e2:7d:9a: c2:73:33:96:5b:71:de:e9:2f:9e:2a:e0:2d:5f:e7:f1:dc:0f: 36:21:f0:e6:73:51:25:b0:5a:06:e8:25:99:e9:f9:1c:b5:71: 11:88:d6:c2:5f:20:3b:f8:d6:a2:08:05:45:7b:ee:a3:93:3d: 17:5d:c6:14:64:e9:10:53:d1:fc:b8:1c:1d:cc:1c:40:c7:e5: 39:00:2b:25:d6:25:ca:d1:a2:36:e9:7c:1f:aa:2c:37:bb:78: 31:fa:99:18:cd:ea:63:c2:da:bb:ac:58:8b:aa:1e:b2:22:8e: be:63:e6:4c:e0:70:1d:50:b2:47:9a:5d:79:82:3e:bd:1f:df: bb:3d:20:a8:3e:82:4d:39:67:06:56:2d:70:b1:8c:1b:8c:b5: 56:26:cc:98:2f:fe:06:a3:4f:38:38:87:d4:d0:51:1b:48:b4: 27:f2:5f:c4:8b:b8:18:a7:9b:b9:24:43:92:c4:4f:f4:67:4a: 0a:30:16:fe:39:ab:ba:d2:5c:6e:6d:88:f3:17:d2:94:89:7e: 88:0b:ee:a1:e0:87:8d:b3:8d:36:9d:f1:e2:10:0a:ad:06:de: 72:5e:fb:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DhlUZLUquyhgCSG2p/wLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0 NTdiY2IwHhcNMjUxMjE5MTAwMDUyWhcNMjUxMjIwMTAwMDUyWjAzMTEwLwYDVQQD Eyg3YzA4MWI5NDZkZTJjOThiZDYzNTMwMGQ0MzMxNDNkMzU3ZDgwMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8314z21zpzXW9Ut31Kx16A1aP2+ rv5nKlAkp3q3zghCpwkb7eboNgjgXtyogn7UC7MXGGWge79+6ohgyfWto3bFrx1Q 3dEYR/u3zgubMiOx3CfdArJww3yGbiI1J3nPT5c4wiRTogx0XgDgrsU1zfjMK2yE NWWs/0KWosXjoDEbMXFimWHUEcWwWkDfzLvCLIm9KumjyYi0b6w/KsqnkHqGhZem 6RVGXlPaCPPMirUKaLV3uZLyvYjpP6Aw8tr4YF2z7QBV2t4lr3Yxj8lrzS7LVn16 T7kHEmO6FXvKDxNkqwc7DSCDlec2vnT//qnkXrmSvfnVLSge8BaguACU7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwIG5Rt4smL1jUwDUMxQ9NX2AAOMB8GA1UdIwQY MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt N2RmOWU0YTIzOGNjLzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvCMg1D+e 7jikZEgVZL2cRHyuTAB5gGI18Y97VT2ozBr64n2awnMzlltx3ukvnirgLV/n8dwP NiHw5nNRJbBaBuglmen5HLVxEYjWwl8gO/jWoggFRXvuo5M9F13GFGTpEFPR/Lgc HcwcQMflOQArJdYlytGiNul8H6osN7t4MfqZGM3qY8Lau6xYi6oesiKOvmPmTOBw HVCyR5pdeYI+vR/fuz0gqD6CTTlnBlYtcLGMG4y1VibMmC/+BqNPODiH1NBRG0i0 J/JfxIu4GKebuSRDksRP9GdKCjAW/jmrutJcbm2I8xfSlIl+iAvuoeCHjbONNp3x 4hAKrQbecl77jw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:53 2025 by rpki-client