This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft File: boByUGD_SztVrN5qOXwx7ql8I3w.mft (raw, json) Hash identifier: wQbG4g8uCHvlsTcRkwYx9c7Ju3qEJZM8wrfVEzWOVLg= Subject key identifier: 09:17:06:4B:4B:F2:63:BF:EE:9A:78:01:72:F8:A3:41:D6:DF:95:7C Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c Certificate serial: 019B3EDA5C52A493D3C727C032B9A8A62359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft Manifest number: 0A87 Signing time: Sun 21 Dec 2025 03:00:56 +0000 Manifest this update: Sun 21 Dec 2025 03:00:56 +0000 Manifest next update: Mon 22 Dec 2025 03:00:56 +0000 Files and hashes: 1: G5hDxevfZCHIynIb7kl9zkkafFo.roa (hash: 8zV/uIn4iieWxxlFcNsO96ew34Z1C3Yh+YZ7EOCmJ5k=) 2: boByUGD_SztVrN5qOXwx7ql8I3w.crl (hash: e6jWXtCNntsoLYW74a0rhy0u4Wq5fIukCoSiuKD6+SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5c:52:a4:93:d3:c7:27:c0:32:b9:a8:a6:23:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c Validity Not Before: Dec 21 03:00:56 2025 GMT Not After : Dec 22 03:00:56 2025 GMT Subject: CN=0917064b4bf263bfee9a780172f8a341d6df957c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:d5:78:c8:8f:e0:4e:ef:01:4b:7f:e4:b4: 3e:ad:9c:0a:0f:41:77:c3:a3:14:af:99:6b:ec:84: da:fc:eb:11:97:59:ed:94:e0:19:76:58:ba:74:c5: 33:70:bf:d6:93:81:7d:5e:a7:ec:d5:bb:af:16:5c: 77:9c:d8:9a:71:69:be:31:a2:53:23:45:1e:af:ff: f8:d8:e4:31:ff:a4:4d:ff:de:41:09:18:0c:61:eb: cb:41:c3:d2:59:53:57:5c:1b:a3:ec:fb:7c:58:8e: 64:14:c8:1a:48:b3:2e:a3:b6:70:d1:93:e3:61:a8: ba:38:cd:3c:f7:19:d8:51:f1:12:4d:db:c6:fe:09: a4:3f:2c:68:ff:a6:07:ec:d3:44:d1:2d:1e:af:c6: 86:92:41:64:8f:7c:b9:fd:6e:de:0b:db:dc:1b:6d: 59:e2:3e:8c:b2:9a:27:ae:e1:e8:14:f4:8a:d7:e4: b9:69:b9:62:2c:1d:72:fd:87:e3:2c:ef:c5:4a:59: 15:5d:05:b1:bf:eb:7e:b5:c0:1c:58:ec:76:1d:ed: d0:88:4a:b3:cb:bc:40:5f:22:53:c4:d9:1c:bc:3e: 56:74:84:af:a7:f6:e2:88:51:4e:03:1c:ca:9b:36: 45:e3:7c:7b:00:f0:c4:78:5d:04:22:38:61:96:73: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:17:06:4B:4B:F2:63:BF:EE:9A:78:01:72:F8:A3:41:D6:DF:95:7C X509v3 Authority Key Identifier: keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d2:25:04:c0:69:66:e9:e1:cd:63:04:6a:1b:96:79:ae:75: 54:a7:a8:bf:ea:0f:1f:46:37:fc:5a:ad:1a:bb:e2:53:92:89: 24:42:3e:04:ed:32:1f:d1:eb:50:be:49:04:e9:c1:c9:35:36: 25:97:40:9a:5f:f1:f3:a4:d7:5b:e1:31:9a:69:dd:04:92:11: 39:09:3c:fe:93:0d:ff:29:bf:78:fa:c3:09:e3:86:83:2b:f6: 9c:2f:55:19:46:8c:30:34:b2:82:51:33:b0:e0:51:66:62:c1: b6:6e:b9:41:a6:f1:93:99:d1:d5:56:cb:2e:2b:f0:37:7c:cf: 26:35:25:4c:f4:d2:b7:56:c6:99:13:5d:79:10:37:49:d8:51: 2d:4b:af:0c:ad:90:5f:98:a5:35:1f:7a:86:8f:f1:d3:38:2c: bd:93:cd:c5:89:65:2b:37:59:32:b7:04:9e:9d:1d:a6:cc:a9: d2:bf:8c:a8:c3:f4:55:21:a4:f9:c4:8d:4c:47:af:93:65:5e: 23:2f:a5:0b:97:57:e1:7d:e7:e2:a0:43:cf:13:47:f1:3d:0c: dd:c5:db:dd:68:bc:81:4a:95:0d:bf:96:13:54:9b:27:3b:85: f5:f2:f5:9c:cf:0e:a8:72:c6:e9:55:00:56:3a:17:a0:66:c6: dc:c9:16:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lxSpJPTxyfAMrmopiNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3 YzIzN2MwHhcNMjUxMjIxMDMwMDU2WhcNMjUxMjIyMDMwMDU2WjAzMTEwLwYDVQQD EygwOTE3MDY0YjRiZjI2M2JmZWU5YTc4MDE3MmY4YTM0MWQ2ZGY5NTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZzVeMiP4E7vAUt/5LQ+rZwKD0F3 w6MUr5lr7ITa/OsRl1ntlOAZdli6dMUzcL/Wk4F9Xqfs1buvFlx3nNiacWm+MaJT I0Uer//42OQx/6RN/95BCRgMYevLQcPSWVNXXBuj7Pt8WI5kFMgaSLMuo7Zw0ZPj Yai6OM089xnYUfESTdvG/gmkPyxo/6YH7NNE0S0er8aGkkFkj3y5/W7eC9vcG21Z 4j6MsponruHoFPSK1+S5abliLB1y/YfjLO/FSlkVXQWxv+t+tcAcWOx2He3QiEqz y7xAXyJTxNkcvD5WdISvp/biiFFOAxzKmzZF43x7APDEeF0EIjhhlnOGUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkXBktL8mO/7pp4AXL4o0HW35V8MB8GA1UdIwQY MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt NTMzMzVkYTBjZmQzLzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdIlBMBp ZunhzWMEahuWea51VKeov+oPH0Y3/FqtGrviU5KJJEI+BO0yH9HrUL5JBOnByTU2 JZdAml/x86TXW+ExmmndBJIROQk8/pMN/ym/ePrDCeOGgyv2nC9VGUaMMDSyglEz sOBRZmLBtm65Qabxk5nR1VbLLivwN3zPJjUlTPTSt1bGmRNdeRA3SdhRLUuvDK2Q X5ilNR96ho/x0zgsvZPNxYllKzdZMrcEnp0dpsyp0r+MqMP0VSGk+cSNTEevk2Ve Iy+lC5dX4X3n4qBDzxNH8T0M3cXb3Wi8gUqVDb+WE1SbJzuF9fL1nM8OqHLG6VUA VjoXoGbG3MkWHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:23:50 2025 by rpki-client