This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json) Hash identifier: P+a2un9aJ+iahGpKaS1Vk4W3ecrFvxatzGRMn/CT6z4= Subject key identifier: E8:06:43:6C:FE:C6:E5:37:77:7F:79:C5:E1:CF:ED:85:45:09:E2:A7 Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Certificate serial: 019C43C6D3631513909E5FDC311BED83C89C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft Manifest number: 09CA Signing time: Mon 09 Feb 2026 19:00:29 +0000 Manifest this update: Mon 09 Feb 2026 19:00:29 +0000 Manifest next update: Tue 10 Feb 2026 19:00:29 +0000 Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: rQerMN3fqxRTgISgnMR+wxQ4HyBeXbWFbZXTazy2xuA=) 2: xNUHHeKL5gyglULSwBpb7Qy-WwI.roa (hash: +glq0PaufWCQhOFjvFVpKvbSAAw+d7Af8r+hPXAyxiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d3:63:15:13:90:9e:5f:dc:31:1b:ed:83:c8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Validity Not Before: Feb 9 19:00:29 2026 GMT Not After : Feb 10 19:00:29 2026 GMT Subject: CN=e806436cfec6e537777f79c5e1cfed854509e2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:7b:91:d3:2e:19:65:c6:5b:ae:8c:92:a0: 90:33:c4:51:4c:3d:e8:62:4c:de:66:1f:d3:44:40: a4:fa:79:96:5e:c7:4b:39:74:83:74:53:a0:cc:9c: a4:69:6d:6a:6e:f8:12:61:ed:e2:11:17:a0:d5:53: 54:c8:76:c4:c7:22:a6:09:96:ec:97:1b:00:49:98: b5:58:73:92:d6:f4:63:0f:37:55:1f:82:cd:f5:e7: 62:80:81:6e:92:28:ae:9e:43:71:f7:e6:b3:7b:ff: 9e:b3:d6:a9:72:1f:72:4e:cd:43:70:67:db:a9:30: ab:e5:f9:5e:d2:4b:dc:b3:bf:57:8e:76:62:28:9f: 5a:86:ed:ed:62:13:c7:20:68:9d:3f:3f:6b:d9:93: 62:70:c5:1e:99:e6:bb:f2:11:20:41:c5:c1:cf:9b: 30:53:2d:d1:bf:4a:2e:0b:9a:f6:c6:97:81:64:b5: 6a:75:e7:a0:32:0d:96:d3:d9:1e:e7:af:fe:52:2a: 6f:79:db:ea:9b:2f:99:d6:b2:63:f4:22:29:0d:21: 77:7f:2a:05:a2:44:c2:ca:51:db:55:43:c3:85:79: 5e:45:26:bb:a8:80:96:cc:be:f6:7a:a4:79:c9:3b: d5:15:70:cb:0b:e6:24:24:38:8f:91:17:b2:2b:52: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:06:43:6C:FE:C6:E5:37:77:7F:79:C5:E1:CF:ED:85:45:09:E2:A7 X509v3 Authority Key Identifier: keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d7:9c:2f:fe:69:65:ce:f4:a4:15:fd:6c:b4:b9:39:7d:6c: 2a:bf:96:ab:01:16:63:6b:4b:e8:38:3d:9f:f5:0e:ba:57:d6: 11:04:dc:4f:0b:5b:f0:f0:f1:9a:b7:f2:d5:8e:e7:26:58:4d: 73:dd:ae:e4:f7:67:ec:de:f1:9f:5f:45:75:cb:97:00:40:0f: 42:b1:ac:6d:1e:b7:e5:12:c4:7a:aa:2b:7b:11:ae:a7:be:91: 47:d9:b7:cc:e2:c0:4a:95:c4:33:d3:20:df:4f:54:fe:2b:a8: f9:f9:40:87:3e:38:ba:ae:d0:dd:16:6f:6c:0e:1b:09:59:bb: 28:7d:d5:f6:1f:ce:e1:20:c8:14:67:14:20:99:e8:23:d3:69: c4:ae:ed:e0:8f:14:4b:52:36:41:6d:17:0d:f0:c4:ad:bd:94: 06:ef:21:af:d4:db:fb:90:6f:02:88:47:69:ae:08:47:39:4c: 85:95:e2:9f:d0:99:95:1b:f0:9d:c5:3e:76:f2:56:92:64:60: 72:7d:51:93:7a:60:f5:f7:34:c4:94:50:02:12:f5:d6:98:90: 39:ac:ce:9c:5a:13:36:f5:90:af:34:20:74:51:d4:c2:c6:a0: b4:95:08:16:82:aa:03:a8:c9:d4:72:db:01:e2:95:46:e1:02: db:9d:80:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtNjFROQnl/cMRvtg8icMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy ODlhNzgwHhcNMjYwMjA5MTkwMDI5WhcNMjYwMjEwMTkwMDI5WjAzMTEwLwYDVQQD EyhlODA2NDM2Y2ZlYzZlNTM3Nzc3Zjc5YzVlMWNmZWQ4NTQ1MDllMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVV7kdMuGWXGW66MkqCQM8RRTD3o YkzeZh/TRECk+nmWXsdLOXSDdFOgzJykaW1qbvgSYe3iEReg1VNUyHbExyKmCZbs lxsASZi1WHOS1vRjDzdVH4LN9edigIFukiiunkNx9+aze/+es9apch9yTs1DcGfb qTCr5fle0kvcs79XjnZiKJ9ahu3tYhPHIGidPz9r2ZNicMUemea78hEgQcXBz5sw Uy3Rv0ouC5r2xpeBZLVqdeegMg2W09ke56/+Uipvedvqmy+Z1rJj9CIpDSF3fyoF okTCylHbVUPDhXleRSa7qICWzL72eqR5yTvVFXDLC+YkJDiPkReyK1LU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgGQ2z+xuU3d395xeHP7YVFCeKnMB8GA1UdIwQY MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNecL/5p Zc70pBX9bLS5OX1sKr+WqwEWY2tL6Dg9n/UOulfWEQTcTwtb8PDxmrfy1Y7nJlhN c92u5Pdn7N7xn19FdcuXAEAPQrGsbR635RLEeqorexGup76RR9m3zOLASpXEM9Mg 309U/iuo+flAhz44uq7Q3RZvbA4bCVm7KH3V9h/O4SDIFGcUIJnoI9NpxK7t4I8U S1I2QW0XDfDErb2UBu8hr9Tb+5BvAohHaa4IRzlMhZXin9CZlRvwncU+dvJWkmRg cn1Rk3pg9fc0xJRQAhL11piQOazOnFoTNvWQrzQgdFHUwsagtJUIFoKqA6jJ1HLb AeKVRuEC252AZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:34 2026 by rpki-client