This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json) Hash identifier: OeQ7Uedvl47C3U5jW8IfUu49nxVa5xrnWb+/9ud94pQ= Subject key identifier: 74:E9:88:74:80:B0:C5:6C:51:9A:6C:3A:95:9B:1A:B4:6B:6C:BA:88 Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Certificate serial: 019B3E6CFB255285F654D3A43A412000AEB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft Manifest number: 0942 Signing time: Sun 21 Dec 2025 01:01:28 +0000 Manifest this update: Sun 21 Dec 2025 01:01:28 +0000 Manifest next update: Mon 22 Dec 2025 01:01:28 +0000 Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: Ij2qfxurNlQzi5Th7mcIK51gYhwiIFhbkbVd3+yd5Ro=) 2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:fb:25:52:85:f6:54:d3:a4:3a:41:20:00:ae:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78 Validity Not Before: Dec 21 01:01:28 2025 GMT Not After : Dec 22 01:01:28 2025 GMT Subject: CN=74e9887480b0c56c519a6c3a959b1ab46b6cba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c7:1a:f3:50:31:c3:d8:a1:d4:36:34:61:99: 30:d8:46:0e:c5:57:a4:9f:06:9b:b3:ef:4b:4d:b2: 09:3d:e4:17:8f:65:34:17:67:f9:e3:42:2a:76:cc: 54:ad:c1:95:8a:46:6d:97:e2:17:18:01:16:62:5d: 55:3b:78:2c:32:ca:22:16:ee:60:f8:e4:a2:4b:a0: bc:ba:66:89:5a:a8:00:8f:59:da:3f:ea:e8:8e:18: c3:85:0d:84:3c:c1:5e:39:2c:76:dc:8d:a4:85:73: 40:02:af:02:f6:2b:b0:d1:c6:88:f8:e2:af:9c:81: 84:2e:44:96:e0:34:a9:c2:86:97:3c:2b:2b:5c:05: fc:b3:c2:a6:ef:3e:bb:bc:11:09:80:f0:a2:6c:41: e7:60:6f:74:f3:d5:27:f5:34:61:bb:95:f1:1f:70: a1:a3:4e:9c:47:ff:c8:dd:67:02:9b:41:42:ad:20: 8f:24:cb:4d:50:ab:a6:1a:42:08:5c:1d:08:db:1d: b0:01:8a:03:82:ee:3d:f5:d0:ea:71:79:18:56:ab: 91:98:c6:29:9f:5e:22:b6:cc:77:51:98:7b:b1:63: f1:9f:d6:88:63:18:f0:00:ad:7a:5d:38:fa:e7:05: 34:fa:b6:ea:ef:f8:56:b9:20:b1:eb:56:ab:9d:ee: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E9:88:74:80:B0:C5:6C:51:9A:6C:3A:95:9B:1A:B4:6B:6C:BA:88 X509v3 Authority Key Identifier: keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a1:a1:51:00:b4:b1:be:03:f8:23:48:90:e7:7b:a5:11:34: af:16:4e:76:6f:ba:cb:f6:ff:76:c9:4d:1c:71:44:5c:90:78: 7e:44:1b:7e:82:15:57:e0:1b:68:b4:e3:6a:a8:70:46:22:8e: 68:26:57:cb:f6:54:12:24:27:d4:d3:c0:d5:b4:42:09:c9:b5: be:91:43:c3:aa:ae:8b:e7:2f:f1:70:db:d9:16:d8:fa:b5:9a: 2d:32:f6:8a:15:3a:47:ea:d0:40:4a:cc:c7:0c:d8:24:50:0c: c3:97:f0:fe:6f:78:bd:92:4f:0c:ef:19:4b:55:77:6d:90:53: f4:16:4b:5e:65:51:d1:d4:28:18:8d:96:58:ef:eb:ec:07:3c: e2:88:7d:8e:1a:3f:4e:91:98:1e:80:49:93:91:0f:a1:ac:fc: 81:60:00:7c:59:d0:39:3f:71:08:d1:1c:7f:5e:5b:9b:86:23: 8c:e9:68:26:22:53:50:f1:52:c0:2a:fd:8c:1f:d0:8e:4b:3d: 32:fe:ff:e8:d8:7f:29:54:b1:17:9f:c0:4a:07:c7:d1:85:20: 53:6b:3f:29:da:8b:56:29:6f:2c:4e:99:d7:2c:fd:c3:5e:4d: 2f:44:a2:e9:61:f2:3f:fd:0e:7a:24:4f:cd:2d:93:76:07:05: 14:1f:5f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPslUoX2VNOkOkEgAK6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ODdhNGFjYTU4MWQ4ZWJjZGZlMjRiNjVmMWU3MGExMmYy ODlhNzgwHhcNMjUxMjIxMDEwMTI4WhcNMjUxMjIyMDEwMTI4WjAzMTEwLwYDVQQD Eyg3NGU5ODg3NDgwYjBjNTZjNTE5YTZjM2E5NTliMWFiNDZiNmNiYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cca81Axw9ih1DY0YZkw2EYOxVek nwabs+9LTbIJPeQXj2U0F2f540IqdsxUrcGVikZtl+IXGAEWYl1VO3gsMsoiFu5g +OSiS6C8umaJWqgAj1naP+rojhjDhQ2EPMFeOSx23I2khXNAAq8C9iuw0caI+OKv nIGELkSW4DSpwoaXPCsrXAX8s8Km7z67vBEJgPCibEHnYG9089Un9TRhu5XxH3Ch o06cR//I3WcCm0FCrSCPJMtNUKumGkIIXB0I2x2wAYoDgu499dDqcXkYVquRmMYp n14itsx3UZh7sWPxn9aIYxjwAK16XTj65wU0+rbq7/hWuSCx61arne5PuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTpiHSAsMVsUZpsOpWbGrRrbLqIMB8GA1UdIwQY MBaAFAaHpKylgdjrzf4ktl8ecKEvKJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEt MmQyOGExOTEzNWZkLzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85ZGYxMWItMDE4Ny00YTkxLWI1ZDEtMmQyOGExOTEzNWZk LzEvQm9la3JLV0IyT3ZOX2lTMlh4NXdvUzhvbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKGhUQC0 sb4D+CNIkOd7pRE0rxZOdm+6y/b/dslNHHFEXJB4fkQbfoIVV+AbaLTjaqhwRiKO aCZXy/ZUEiQn1NPA1bRCCcm1vpFDw6qui+cv8XDb2RbY+rWaLTL2ihU6R+rQQErM xwzYJFAMw5fw/m94vZJPDO8ZS1V3bZBT9BZLXmVR0dQoGI2WWO/r7Ac84oh9jho/ TpGYHoBJk5EPoaz8gWAAfFnQOT9xCNEcf15bm4YjjOloJiJTUPFSwCr9jB/Qjks9 Mv7/6Nh/KVSxF5/ASgfH0YUgU2s/KdqLVilvLE6Z1yz9w15NL0Si6WHyP/0OeiRP zS2TdgcFFB9fSA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:11 2025 by rpki-client