This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json) Hash identifier: KmFbTwut+HY/frhnlMut7bp0Y0fet7XzQWDXPpQzT7s= Subject key identifier: AD:15:F2:FA:F4:85:7E:DC:D5:9A:4D:EF:AF:B4:09:F9:CD:BD:84:D5 Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16 Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416 Certificate serial: 019B435B9AA6ACD7BA1C3A70605D2B940D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 00:00:35 +0000 Manifest this update: Mon 22 Dec 2025 00:00:35 +0000 Manifest next update: Tue 23 Dec 2025 00:00:35 +0000 Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: BXOyFJK7NyofkKjymUWaJWcZUYooAkuXlsUnhJDVNzo=) 2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:9a:a6:ac:d7:ba:1c:3a:70:60:5d:2b:94:0d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416 Validity Not Before: Dec 22 00:00:35 2025 GMT Not After : Dec 23 00:00:35 2025 GMT Subject: CN=ad15f2faf4857edcd59a4defafb409f9cdbd84d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:2c:cc:8e:31:e3:72:8d:5b:29:62:b0:23: 1d:24:ce:0a:6d:44:66:36:8a:ef:ff:65:af:6d:f3: 60:e7:26:17:74:52:ce:4f:7a:a2:98:14:13:b2:d4: d9:59:af:61:d0:a0:c5:69:12:34:cb:e7:93:e7:ae: 5a:39:92:26:bb:aa:1a:56:bb:b1:5a:fe:43:d0:4a: f0:db:40:c6:46:1a:1f:00:f2:29:67:09:c4:ad:a3: 22:e5:8f:15:c8:3d:2e:21:5c:d6:3c:00:68:34:ea: 4b:2e:a0:07:35:6d:80:12:53:4a:d7:c7:87:42:60: c0:60:ff:d5:be:79:63:03:b9:ff:79:34:a8:39:86: af:8f:c4:01:d7:d3:02:be:02:84:40:00:3e:76:ef: 88:7c:f1:ff:26:bc:26:ec:5d:6a:88:9b:c5:77:54: 65:3c:d3:c2:15:a7:7c:9a:61:c1:34:49:c1:6c:ab: a7:a4:9d:da:50:a3:9d:33:f7:d0:54:f2:79:a8:76: 89:12:44:61:0f:96:61:38:0f:a4:91:22:bc:5f:21: 6e:d9:bb:47:64:a5:d4:6a:b0:11:d4:c0:d1:d0:ae: cd:96:5e:4b:8a:bd:82:ad:f9:f7:7a:80:c1:e1:28: ae:47:ed:03:be:11:11:1c:73:ec:be:34:cc:f9:fa: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:F2:FA:F4:85:7E:DC:D5:9A:4D:EF:AF:B4:09:F9:CD:BD:84:D5 X509v3 Authority Key Identifier: keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:00:af:ad:23:1d:65:b7:e0:3f:d0:bd:06:28:87:66:21:8c: 35:c4:de:3d:51:be:8b:d1:a7:b6:79:86:ed:7d:67:67:9b:35: 65:5f:4f:37:cd:8f:76:76:51:c1:05:9d:41:b3:2b:f9:12:87: 10:66:65:02:77:01:c3:d6:b8:46:9b:b6:80:63:cf:67:38:69: 10:1b:b5:66:a3:cb:09:27:6a:23:ba:b5:d5:4b:20:5c:4f:78: 48:55:39:4f:be:4a:e2:c0:41:e9:42:87:91:39:af:c7:bc:f9: 1a:0a:fd:45:10:c7:1f:09:e4:6f:5a:60:96:d1:bd:5d:13:f9: 49:61:d5:27:a9:18:87:b5:45:e1:95:a6:63:00:3b:00:a6:d4: 46:73:6e:eb:40:7d:43:78:f1:88:21:b6:04:f0:b4:ff:fc:3a: 33:53:58:6e:7a:f6:b7:03:88:c3:b3:9a:cf:6b:1d:c4:84:d8: d9:46:4b:7d:12:2d:83:78:42:21:79:14:3c:99:ce:3b:f4:0f: 60:02:57:61:73:c0:17:d3:b9:4e:e1:54:1c:a9:61:8c:13:1f: 42:3c:33:80:3e:d6:69:c9:ae:ad:01:91:2b:e3:e5:86:cd:b1: 00:f5:d2:ba:4d:52:dd:f1:00:68:23:0e:2d:11:31:5f:57:45: da:23:d1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW5qmrNe6HDpwYF0rlA0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1 ZDQ0MTYwHhcNMjUxMjIyMDAwMDM1WhcNMjUxMjIzMDAwMDM1WjAzMTEwLwYDVQQD EyhhZDE1ZjJmYWY0ODU3ZWRjZDU5YTRkZWZhZmI0MDlmOWNkYmQ4NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOoszI4x43KNWylisCMdJM4KbURm Norv/2WvbfNg5yYXdFLOT3qimBQTstTZWa9h0KDFaRI0y+eT565aOZImu6oaVrux Wv5D0Erw20DGRhofAPIpZwnEraMi5Y8VyD0uIVzWPABoNOpLLqAHNW2AElNK18eH QmDAYP/VvnljA7n/eTSoOYavj8QB19MCvgKEQAA+du+IfPH/Jrwm7F1qiJvFd1Rl PNPCFad8mmHBNEnBbKunpJ3aUKOdM/fQVPJ5qHaJEkRhD5ZhOA+kkSK8XyFu2btH ZKXUarAR1MDR0K7Nll5Lir2Crfn3eoDB4SiuR+0DvhERHHPsvjTM+fo9NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0V8vr0hX7c1ZpN76+0CfnNvYTVMB8GA1UdIwQY MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeACvrSMd ZbfgP9C9BiiHZiGMNcTePVG+i9GntnmG7X1nZ5s1ZV9PN82PdnZRwQWdQbMr+RKH EGZlAncBw9a4Rpu2gGPPZzhpEBu1ZqPLCSdqI7q11UsgXE94SFU5T75K4sBB6UKH kTmvx7z5Ggr9RRDHHwnkb1pgltG9XRP5SWHVJ6kYh7VF4ZWmYwA7AKbURnNu60B9 Q3jxiCG2BPC0//w6M1NYbnr2twOIw7Oaz2sdxITY2UZLfRItg3hCIXkUPJnOO/QP YAJXYXPAF9O5TuFUHKlhjBMfQjwzgD7WacmurQGRK+Plhs2xAPXSuk1S3fEAaCMO LRExX1dF2iPRrQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:28 2025 by rpki-client