This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: llhKY10qHmJM37xDM3u5+REAoP/Od35K/5FTo2dI5mg=
Subject key identifier: 57:35:CA:D5:6F:66:88:5C:6F:80:3A:F8:5F:31:A9:C6:0B:DF:89:B5
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019B3D5A3672035A4B8B901723BB8A84EFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 178E
Signing time: Sat 20 Dec 2025 20:01:20 +0000
Manifest this update: Sat 20 Dec 2025 20:01:20 +0000
Manifest next update: Sun 21 Dec 2025 20:01:20 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: b4P41xLvlswc9QbO99wHiu7cmKs4uqwnen3/2kvdAP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:5a:36:72:03:5a:4b:8b:90:17:23:bb:8a:84:ef:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Dec 20 20:01:20 2025 GMT
Not After : Dec 21 20:01:20 2025 GMT
Subject: CN=5735cad56f66885c6f803af85f31a9c60bdf89b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:59:d8:32:1e:91:81:8c:56:26:0a:de:c1:
2d:37:ae:8c:0e:90:61:52:47:b0:77:eb:79:f1:da:
ca:76:6c:da:9d:ad:09:c9:6d:df:40:21:1b:47:8c:
fd:89:34:e0:09:ed:3e:43:10:09:bb:99:5a:4b:7d:
cb:a1:bf:84:71:51:7d:e1:21:94:9f:4e:10:49:f4:
52:8f:49:ed:a8:50:df:53:f6:47:80:0a:2d:ec:6c:
0d:ba:1b:70:8a:51:9f:44:4d:9d:cc:99:3a:dc:02:
29:a7:bb:b0:f7:e2:c6:33:66:46:d3:0b:f0:80:34:
12:c3:1d:c3:01:9e:dc:c4:81:e6:3c:be:7f:3d:b8:
4e:e0:9f:26:f4:e3:41:43:86:38:48:a6:db:82:c1:
81:7e:c7:fc:67:9d:57:61:42:d9:45:8e:85:36:99:
8e:c8:e5:b6:69:ed:62:f1:b1:57:47:ea:2d:97:ca:
7c:41:1b:1f:59:2f:34:50:f4:3c:a3:4f:89:b1:94:
ed:85:19:c8:06:43:49:0d:4c:e1:01:fc:79:20:e8:
3f:1d:e5:de:a5:59:7d:71:ef:15:26:68:c5:8b:3b:
a1:7c:79:a3:5b:7a:c6:91:e8:ee:74:65:b7:b8:50:
76:04:6c:73:7b:a8:2c:b6:12:58:57:45:69:5d:09:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:35:CA:D5:6F:66:88:5C:6F:80:3A:F8:5F:31:A9:C6:0B:DF:89:B5
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2b:24:ba:e1:84:06:35:62:ba:0e:c7:63:95:22:8a:d6:b2:
8c:43:4b:b0:aa:d7:e4:4e:83:f4:f1:38:96:03:30:f4:be:14:
54:ac:4e:cb:00:ab:64:c0:28:07:08:e7:33:da:30:29:50:c1:
f5:1c:36:3d:6f:1b:a8:be:6a:8a:7c:b9:3c:ad:ee:3a:e1:8d:
9c:a3:73:6a:3c:70:75:17:ba:d4:b5:73:2a:03:cc:6b:81:4a:
c3:c6:65:8c:b9:77:24:e0:a2:0c:d6:06:66:f7:e8:42:c1:b9:
86:80:c4:3f:8a:4a:e8:59:0a:b0:28:f1:1f:bb:e7:75:f0:92:
20:4e:2d:33:37:0b:ae:94:ea:42:16:62:aa:3e:c7:67:61:98:
5f:8d:d8:83:f3:2d:8e:26:07:e1:60:e2:ba:dd:6b:f0:5c:6a:
c8:fb:f9:fd:b5:07:26:a0:ac:3e:b9:1a:07:42:dd:b0:9d:58:
af:ee:83:4b:16:1a:a4:4d:9a:37:84:60:2c:92:75:80:ae:fb:
66:a9:3f:78:4e:a8:1f:77:d9:5b:dd:52:46:0b:65:95:08:e7:
23:cb:ae:93:31:8a:01:7a:71:37:ef:aa:d5:eb:56:86:28:bb:
b4:f2:02:ab:ea:61:5c:28:23:f5:09:76:f4:cf:bd:b5:4f:2b:
6e:e3:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:28:41 2025 by rpki-client