This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json) Hash identifier: xMCCQeJ25agtl2LvMPUrw2WcjTFTNyEshCqi6JDUn1g= Subject key identifier: 8A:35:BB:64:D4:DD:3B:9E:25:0B:34:50:1B:8C:25:31:AF:AA:9D:2A Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b Certificate serial: 019B6D6A59F914D79935CADEF28CD43F4605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 04:00:44 +0000 Manifest this update: Tue 30 Dec 2025 04:00:44 +0000 Manifest next update: Wed 31 Dec 2025 04:00:44 +0000 Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=) 2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: tBKu9U5Cpv8fGZ/V1QzkBVujCjbyxEz1qQLHZbn5fNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:59:f9:14:d7:99:35:ca:de:f2:8c:d4:3f:46:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b Validity Not Before: Dec 30 04:00:44 2025 GMT Not After : Dec 31 04:00:44 2025 GMT Subject: CN=8a35bb64d4dd3b9e250b34501b8c2531afaa9d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:a9:ea:71:e8:a9:23:23:0d:1a:1d:87:4d: 25:89:5f:5b:67:65:ca:fd:f7:3e:78:54:8e:9c:b1: 33:7e:01:2d:61:b6:cd:37:71:d4:61:eb:4f:fb:4f: 53:4e:4c:95:2a:ca:b3:f1:97:cb:28:28:e0:ff:84: 71:50:fc:99:8a:5f:39:06:bb:8c:dc:a4:35:0a:cc: 36:4b:69:c6:a3:cf:8c:1f:2b:96:27:e8:d1:08:20: bd:6f:d7:ca:d2:75:c9:a8:9b:60:8e:f3:ba:e1:38: 78:f1:70:e2:24:5a:a1:2d:7f:34:e6:a0:78:98:c5: 6c:d3:49:de:17:48:27:56:e1:47:5e:0d:ac:84:fa: dd:e2:92:e0:9f:3a:0b:67:97:f3:9c:5b:cc:c7:d2: 26:7e:77:cf:6f:bf:c1:ba:8d:43:a5:ef:3b:4e:c6: ce:51:b7:8a:80:43:9b:2d:3f:ee:41:e3:e1:63:06: ca:9d:4a:47:88:e7:36:f7:24:8e:f1:1b:90:93:f7: aa:0d:a3:94:b1:87:e5:95:13:67:dc:ac:36:bc:88: de:ca:ff:e3:d9:61:db:2d:34:68:8f:01:90:86:25: 6c:df:11:ea:6c:cf:f4:e1:f9:b3:da:93:8e:a9:2c: 4b:53:3c:cf:df:4f:d8:c9:24:24:99:71:89:6a:93: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:BB:64:D4:DD:3B:9E:25:0B:34:50:1B:8C:25:31:AF:AA:9D:2A X509v3 Authority Key Identifier: keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:66:41:c7:a5:21:35:ab:a8:e4:6e:0d:54:aa:9b:d9:fb:1a: d5:1f:33:ba:ef:f3:02:07:4a:91:02:11:80:0e:db:b0:41:e8: 9d:2c:c3:5a:34:6e:90:a5:d7:1e:9c:09:f9:75:41:4f:4a:3d: 5f:db:7b:14:53:4e:69:a7:00:bf:5b:4a:27:d2:2b:83:15:e5: a6:c3:0d:9d:cd:bc:2f:00:fc:4a:a8:da:05:b1:38:e6:e1:10: d6:3b:eb:7c:ee:c3:c3:3e:5f:b1:1a:b1:f8:c0:ba:85:5d:8c: 19:d4:ca:28:b9:36:ec:f0:5b:c4:cb:51:4d:99:9c:d8:58:af: 41:6b:fe:02:4e:0f:a9:b4:38:9e:09:30:c3:d6:ce:88:71:44: 5c:fc:85:e7:46:b7:6f:6e:b8:3e:3d:9f:75:c6:b6:41:fe:d7: bd:7b:25:0e:3e:4a:0e:c7:3e:2e:01:a1:13:a3:a8:40:5c:88: 5b:c0:8e:fb:bc:88:fc:bd:d1:40:93:f1:e8:93:a5:e3:4b:10: 08:ae:8b:d9:41:35:9d:b8:98:75:1d:4f:e1:f3:9e:34:1a:ca: 94:db:7f:61:c2:5d:c9:9d:c3:cc:62:d3:32:0a:31:97:e5:ce: 38:58:d9:66:7f:eb:ba:28:b1:af:e3:8d:59:6c:e1:7b:01:85: b6:26:e1:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaln5FNeZNcre8ozUP0YFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODMxMDY2ZWE4ZmUyMGIwNjdhMTM2MDA2YjdhZjkwNjYz Mzg0M2IwHhcNMjUxMjMwMDQwMDQ0WhcNMjUxMjMxMDQwMDQ0WjAzMTEwLwYDVQQD Eyg4YTM1YmI2NGQ0ZGQzYjllMjUwYjM0NTAxYjhjMjUzMWFmYWE5ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBWp6nHoqSMjDRodh00liV9bZ2XK /fc+eFSOnLEzfgEtYbbNN3HUYetP+09TTkyVKsqz8ZfLKCjg/4RxUPyZil85BruM 3KQ1Csw2S2nGo8+MHyuWJ+jRCCC9b9fK0nXJqJtgjvO64Th48XDiJFqhLX805qB4 mMVs00neF0gnVuFHXg2shPrd4pLgnzoLZ5fznFvMx9ImfnfPb7/Buo1Dpe87TsbO UbeKgEObLT/uQePhYwbKnUpHiOc29ySO8RuQk/eqDaOUsYfllRNn3Kw2vIjeyv/j 2WHbLTRojwGQhiVs3xHqbM/04fmz2pOOqSxLUzzP30/YySQkmXGJapPgrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo1u2TU3TueJQs0UBuMJTGvqp0qMB8GA1UdIwQY MBaAFG6DEGbqj+ILBnoTYAa3r5BmM4Q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYt MmE0ZGQyM2EyZjlhLzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYtMmE0ZGQyM2EyZjlh LzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGZBx6Uh Nauo5G4NVKqb2fsa1R8zuu/zAgdKkQIRgA7bsEHonSzDWjRukKXXHpwJ+XVBT0o9 X9t7FFNOaacAv1tKJ9IrgxXlpsMNnc28LwD8SqjaBbE45uEQ1jvrfO7Dwz5fsRqx +MC6hV2MGdTKKLk27PBbxMtRTZmc2FivQWv+Ak4PqbQ4ngkww9bOiHFEXPyF50a3 b264Pj2fdca2Qf7XvXslDj5KDsc+LgGhE6OoQFyIW8CO+7yI/L3RQJPx6JOl40sQ CK6L2UE1nbiYdR1P4fOeNBrKlNt/YcJdyZ3DzGLTMgoxl+XOOFjZZn/ruiixr+ON WWzhewGFtibhSA== -----END CERTIFICATE-----Generated at Tue Dec 30 06:38:39 2025 by rpki-client