This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json) Hash identifier: HMlxHetgyvKIUe6/Lx+PAWZeahHOQgcGgQ0LtocMHwU= Subject key identifier: 4C:E8:E5:F4:12:E2:8B:26:71:B5:FC:2B:26:24:2B:05:21:DE:54:7A Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Certificate serial: 019B3EA36829CB6159433DCCD8BA770BA207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft Manifest number: 1464 Signing time: Sun 21 Dec 2025 02:00:54 +0000 Manifest this update: Sun 21 Dec 2025 02:00:54 +0000 Manifest next update: Mon 22 Dec 2025 02:00:54 +0000 Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: gmWL74SoEo8BsEwp+Ay8FKUhdbh/1e2Fwyygz6B0IpQ=) 2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:68:29:cb:61:59:43:3d:cc:d8:ba:77:0b:a2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f Validity Not Before: Dec 21 02:00:54 2025 GMT Not After : Dec 22 02:00:54 2025 GMT Subject: CN=4ce8e5f412e28b2671b5fc2b26242b0521de547a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:7e:10:65:7a:43:ae:22:6c:50:21:7f:50: 9d:6d:5b:7f:30:2d:e1:c0:b7:05:eb:8c:c8:7a:09: 87:d2:1f:a4:ec:4e:4c:7b:42:55:be:45:d5:ff:2e: 67:ef:25:fe:c2:f4:03:82:df:83:e5:ed:a4:cc:8a: b6:7b:fc:89:bd:57:4a:94:c5:02:3e:e0:b7:c7:0b: f0:c0:0e:be:97:10:b6:d6:63:29:6e:d9:f5:1b:7b: c8:b0:f9:bf:77:7f:4f:6d:29:6f:bf:e6:8a:82:db: 07:b7:f4:e3:ac:ee:d0:06:22:cf:ad:c6:d0:b2:b3: e9:31:fa:9f:55:ea:79:1e:27:a5:a3:70:a4:e0:9c: 16:7d:76:29:f9:12:34:ac:05:01:05:88:72:3f:a8: 9a:48:5b:26:c2:2b:1f:89:18:75:cc:87:50:48:05: a5:0c:f9:6e:82:27:0a:99:97:7d:c6:f7:02:00:38: 9d:09:b6:7f:f2:a2:ed:b4:41:fb:45:3c:26:89:b1: 19:fa:1b:f3:27:79:ed:ab:e9:07:ba:ec:ec:37:69: 4a:a2:63:db:3d:f2:c7:f5:31:94:09:fb:07:40:b6: 87:6b:d7:a5:61:47:79:62:6a:89:f0:39:6e:6d:4f: fe:7f:b1:ce:fb:4d:54:0f:18:31:f2:f6:87:fa:e8: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E8:E5:F4:12:E2:8B:26:71:B5:FC:2B:26:24:2B:05:21:DE:54:7A X509v3 Authority Key Identifier: keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3b:41:d9:cf:17:f8:38:fc:90:fd:87:aa:e3:08:25:2b:4b: dc:4f:44:26:9b:a8:f8:41:c2:2e:c0:92:e6:25:f2:a9:44:a8: 47:9d:c1:b4:a3:5a:be:6d:80:ae:bd:f0:e4:f8:dc:62:8f:2e: b9:53:64:a3:e2:a9:7a:23:c9:ee:15:e7:9b:90:09:ed:95:0e: 1d:c8:02:5e:62:20:b7:34:54:92:d9:e5:dc:96:c5:1c:00:8d: 40:bb:05:46:08:bd:61:f0:62:35:2d:c8:0d:51:fa:36:a7:3e: d6:92:39:66:84:87:cb:d1:25:46:18:88:65:6f:47:84:d2:d9: b5:a3:8a:ab:6c:cb:5d:0a:20:a0:ad:23:63:9c:98:4f:47:88: 7a:31:39:de:16:e7:9d:6c:9e:04:5b:64:4c:cc:17:b8:9f:7c: e1:e3:86:f0:3a:b3:47:99:b1:6a:eb:be:a9:e4:78:67:dd:3b: c6:f4:f5:67:62:1d:f1:8e:94:28:b6:4f:49:bc:2d:97:83:48: fe:cf:2f:16:3b:7c:5b:2d:63:15:6a:ca:be:f2:4f:e1:9a:8c: 5b:82:bc:05:52:fa:6a:dc:b0:3c:48:5f:7a:74:8b:d8:bc:7d: 24:14:fe:a3:b3:19:e0:8d:4d:e7:c8:c8:3d:4a:eb:9d:b2:47: 3e:90:54:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2gpy2FZQz3M2Lp3C6IHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OGNiODViYzRlOWU0YjczMmU5NTdmMDhhYTFjMDIzN2Fh ZGM0N2YwHhcNMjUxMjIxMDIwMDU0WhcNMjUxMjIyMDIwMDU0WjAzMTEwLwYDVQQD Eyg0Y2U4ZTVmNDEyZTI4YjI2NzFiNWZjMmIyNjI0MmIwNTIxZGU1NDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuR+EGV6Q64ibFAhf1CdbVt/MC3h wLcF64zIegmH0h+k7E5Me0JVvkXV/y5n7yX+wvQDgt+D5e2kzIq2e/yJvVdKlMUC PuC3xwvwwA6+lxC21mMpbtn1G3vIsPm/d39PbSlvv+aKgtsHt/TjrO7QBiLPrcbQ srPpMfqfVep5Hielo3Ck4JwWfXYp+RI0rAUBBYhyP6iaSFsmwisfiRh1zIdQSAWl DPlugicKmZd9xvcCADidCbZ/8qLttEH7RTwmibEZ+hvzJ3ntq+kHuuzsN2lKomPb PfLH9TGUCfsHQLaHa9elYUd5YmqJ8DlubU/+f7HO+01UDxgx8vaH+ug01QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzo5fQS4osmcbX8KyYkKwUh3lR6MB8GA1UdIwQY MBaAFAaMuFvE6eS3MulX8IqhwCN6rcR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMt MTlmMjJlZDYxM2E1LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xOGM4NTYtMThiMS00Mzc1LWJjYWMtMTlmMjJlZDYxM2E1 LzEvQm95NFc4VHA1TGN5NlZmd2lxSEFJM3F0eEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjtB2c8X +Dj8kP2HquMIJStL3E9EJpuo+EHCLsCS5iXyqUSoR53BtKNavm2Arr3w5PjcYo8u uVNko+KpeiPJ7hXnm5AJ7ZUOHcgCXmIgtzRUktnl3JbFHACNQLsFRgi9YfBiNS3I DVH6Nqc+1pI5ZoSHy9ElRhiIZW9HhNLZtaOKq2zLXQogoK0jY5yYT0eIejE53hbn nWyeBFtkTMwXuJ984eOG8DqzR5mxauu+qeR4Z907xvT1Z2Id8Y6UKLZPSbwtl4NI /s8vFjt8Wy1jFWrKvvJP4ZqMW4K8BVL6atywPEhfenSL2Lx9JBT+o7MZ4I1N58jI PUrrnbJHPpBUTg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:07:05 2025 by rpki-client