This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json) Hash identifier: zgEMqI3xaQrIsIcsDqC/Pu4V7PjtQh5zjVDuKC6nlZI= Subject key identifier: 53:39:FB:1A:B3:5C:4D:E9:AD:98:B9:CF:34:AE:27:84:DA:57:58:D4 Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Certificate serial: 019B1BA9579CBF55045BE62E14A018945EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft Manifest number: 0930 Signing time: Sun 14 Dec 2025 07:00:41 +0000 Manifest this update: Sun 14 Dec 2025 07:00:41 +0000 Manifest next update: Mon 15 Dec 2025 07:00:41 +0000 Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: GzjOunVi7OAYyChTtXqa2TpeoGQrSReEcEF8W6po7Uc=) 2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:57:9c:bf:55:04:5b:e6:2e:14:a0:18:94:5e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Validity Not Before: Dec 14 07:00:41 2025 GMT Not After : Dec 15 07:00:41 2025 GMT Subject: CN=5339fb1ab35c4de9ad98b9cf34ae2784da5758d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:19:e8:f6:23:c8:f8:f0:c5:fc:cb:ce:4f: 23:75:5d:c6:16:c8:fc:9c:ff:94:32:70:f1:f7:cc: 55:74:c0:04:e5:b7:22:df:59:e2:5a:81:98:91:f9: 63:84:2f:5f:92:15:c2:75:d4:62:c5:ef:9e:f3:3c: e5:73:d0:c1:60:a2:47:13:d1:21:01:c2:88:be:bf: 0c:00:da:ec:e8:bb:9b:50:f6:a6:59:04:62:de:3a: 72:61:f8:a9:03:e1:27:c3:ac:d9:55:7e:82:8f:b4: 00:f4:e3:43:8a:d3:41:5f:f9:72:d5:db:3f:b7:3d: 8f:38:42:cf:59:92:3d:f0:5a:71:cb:82:4d:4d:3b: 16:ce:18:9a:65:85:09:58:8d:7a:82:74:f1:da:fb: 5b:14:88:e1:c8:79:97:fa:1b:02:c0:e7:6b:67:e7: 46:13:d0:41:09:5f:d9:de:8e:62:71:7f:e1:6b:0d: 92:7e:25:39:43:ae:2d:3f:15:8d:80:12:0b:f6:13: ed:41:58:08:d7:13:bc:8e:a3:33:82:58:ac:02:1d: 46:8b:51:27:5f:50:23:ca:ce:01:8e:be:c6:e2:b3: b2:58:04:5d:6f:53:9b:38:e5:4e:1d:81:e5:2b:fc: 9f:43:20:cb:19:5e:5b:13:16:a4:17:f7:c0:7c:73: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:FB:1A:B3:5C:4D:E9:AD:98:B9:CF:34:AE:27:84:DA:57:58:D4 X509v3 Authority Key Identifier: keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e0:b0:f0:b5:e9:56:50:eb:9d:4d:ef:b9:7e:01:06:f0:c0: 1c:22:ae:ea:90:e1:8c:66:74:03:01:6e:13:27:2e:a8:21:86: 06:10:27:94:af:15:1a:cf:fe:74:44:6f:c4:eb:bb:b8:bb:e3: 19:db:03:0d:ce:76:dc:e3:49:5f:09:2b:85:f1:b6:6f:70:90: 7a:40:80:74:2d:c9:a9:b8:39:15:07:5d:1f:e8:d9:ad:4f:24: ad:d2:ca:ea:2a:a9:71:b7:40:11:1d:b6:58:60:79:ad:d6:ec: 8d:b3:76:50:e5:71:5a:b0:f4:4d:6e:dc:ec:ac:ba:9a:32:a1: 0c:2f:d8:87:6b:d3:73:d0:3c:7f:28:b8:95:94:66:46:0a:9e: 80:fe:22:c3:c6:35:09:6c:cb:b1:59:b5:bf:23:62:e5:1f:5f: 6e:c3:f1:5c:ff:ed:da:99:97:34:11:10:2b:55:d3:ed:69:7f: 60:dd:83:cc:e4:a3:9f:fc:78:a2:08:d2:06:79:da:eb:ba:f3: ec:3c:47:2f:f9:03:b0:e2:c9:24:86:76:18:6b:ec:50:d2:37: 3d:5c:6a:66:d2:2e:99:bf:7d:2a:2a:d2:ef:a6:3c:08:71:c6: a2:0d:73:02:50:6a:98:da:ee:c9:ab:d5:57:02:93:c1:71:b1: f6:89:a8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqVecv1UEW+YuFKAYlF7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy ODlhNzgwHhcNMjUxMjE0MDcwMDQxWhcNMjUxMjE1MDcwMDQxWjAzMTEwLwYDVQQD Eyg1MzM5ZmIxYWIzNWM0ZGU5YWQ5OGI5Y2YzNGFlMjc4NGRhNTc1OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI8Z6PYjyPjwxfzLzk8jdV3GFsj8 nP+UMnDx98xVdMAE5bci31niWoGYkfljhC9fkhXCddRixe+e8zzlc9DBYKJHE9Eh AcKIvr8MANrs6LubUPamWQRi3jpyYfipA+Enw6zZVX6Cj7QA9ONDitNBX/ly1ds/ tz2POELPWZI98Fpxy4JNTTsWzhiaZYUJWI16gnTx2vtbFIjhyHmX+hsCwOdrZ+dG E9BBCV/Z3o5icX/haw2SfiU5Q64tPxWNgBIL9hPtQVgI1xO8jqMzglisAh1Gi1En X1Ajys4Bjr7G4rOyWARdb1ObOOVOHYHlK/yfQyDLGV5bExakF/fAfHNrsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM5+xqzXE3prZi5zzSuJ4TaV1jUMB8GA1UdIwQY MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueCw8LXp VlDrnU3vuX4BBvDAHCKu6pDhjGZ0AwFuEycuqCGGBhAnlK8VGs/+dERvxOu7uLvj GdsDDc523ONJXwkrhfG2b3CQekCAdC3Jqbg5FQddH+jZrU8krdLK6iqpcbdAER22 WGB5rdbsjbN2UOVxWrD0TW7c7Ky6mjKhDC/Yh2vTc9A8fyi4lZRmRgqegP4iw8Y1 CWzLsVm1vyNi5R9fbsPxXP/t2pmXNBEQK1XT7Wl/YN2DzOSjn/x4ogjSBnna67rz 7DxHL/kDsOLJJIZ2GGvsUNI3PVxqZtIumb99KirS76Y8CHHGog1zAlBqmNruyavV VwKTwXGx9omo5Q== -----END CERTIFICATE-----Generated at Sun Dec 14 08:42:47 2025 by rpki-client