This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json) Hash identifier: WfQm2ddg6ptXUw3Q00vGLH9KMvpL4uU2wlSmnRzSERo= Subject key identifier: 19:0C:8F:FC:CA:03:02:73:EE:DF:92:21:F0:65:BF:5D:D0:88:2F:F5 Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Certificate serial: 019B529815F827F13CF8DDAF6065BF6F0119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft Manifest number: 1799 Signing time: Wed 24 Dec 2025 23:00:57 +0000 Manifest this update: Wed 24 Dec 2025 23:00:57 +0000 Manifest next update: Thu 25 Dec 2025 23:00:57 +0000 Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=) 2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=) 3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=) 4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: jjT/k6iAj3ftzsatjDyf4z7n8z++HrnCBDIuGudQkgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:15:f8:27:f1:3c:f8:dd:af:60:65:bf:6f:01:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Validity Not Before: Dec 24 23:00:57 2025 GMT Not After : Dec 25 23:00:57 2025 GMT Subject: CN=190c8ffcca030273eedf9221f065bf5dd0882ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:c0:6b:ee:0d:e9:68:1f:b9:43:fa:e9:d1: f7:8e:ba:bd:8f:cf:ef:a2:5f:0a:3f:b8:24:4b:26: 38:f7:09:d9:c2:91:5b:46:c5:2f:64:ee:49:60:8c: b5:21:4c:4f:95:2e:db:72:4a:36:c4:5e:ca:f5:a3: db:b9:bd:a1:a7:78:b4:35:7d:0f:e2:4b:14:6d:c4: 01:d2:a1:59:c5:3d:ea:50:2f:65:68:fa:81:8b:4e: 34:c9:b0:f6:ea:68:22:b9:f1:a0:54:96:0c:81:93: ee:25:f7:e8:4a:48:b2:9f:43:c3:e8:7e:3e:c5:ac: 6c:47:67:92:4a:34:01:aa:28:25:67:47:af:d6:0b: 12:8e:b2:46:23:98:2e:b0:8c:e7:23:c2:c6:e5:10: 79:36:cf:be:f7:ad:2b:33:03:28:44:92:ff:44:e8: d2:a1:fe:19:bb:bb:d7:66:13:2e:86:79:f3:3d:c5: ef:c2:2c:b6:ea:22:b9:a7:db:45:d3:ec:3c:1f:d9: 25:63:f4:4b:61:42:5e:88:02:02:f3:8a:b4:bb:a4: f3:f0:b1:31:6e:97:c7:33:27:c1:60:14:98:74:88: 8c:7f:48:4c:83:bc:bd:30:1b:4c:cb:7f:19:e8:77: fc:8c:14:fc:4b:87:62:ee:51:87:24:58:c5:f1:be: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:8F:FC:CA:03:02:73:EE:DF:92:21:F0:65:BF:5D:D0:88:2F:F5 X509v3 Authority Key Identifier: keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:97:fc:24:9a:de:2b:b3:71:c6:6d:2a:ac:03:dd:6e:f3:9a: 2b:41:a8:99:e8:55:fa:e0:d7:5d:ca:cf:ad:02:c6:5d:94:f4: 24:08:ae:4b:e4:b2:dd:46:8e:f7:a2:b0:c0:8d:39:ba:75:3e: b0:57:96:8d:19:96:12:8a:d3:75:3a:df:9e:2e:f4:5c:89:42: 90:3b:4c:ba:9b:f8:59:f5:f4:c6:16:03:85:35:87:b1:0d:05: 77:9b:68:f2:a2:a1:5b:ee:1e:5a:b4:1b:4c:a6:e9:29:1b:91: b4:f7:35:ad:40:d2:b9:75:f5:f8:6c:f7:1c:2f:7b:c8:1d:89: 29:9b:82:a5:8b:18:c1:9b:cf:3f:82:54:7b:d4:da:89:c8:66: 7c:bc:ce:43:51:19:a5:3d:26:bd:e9:58:d1:a7:7c:73:e5:e4: 8c:14:a2:43:e1:cc:b0:60:fa:e2:96:d9:a4:23:70:d4:51:59: d2:1f:de:6e:cb:ce:91:26:15:2a:c8:ff:19:c0:b1:fa:2d:d3: 74:ec:cb:73:ca:ff:a1:16:47:f6:a6:20:84:39:2f:0c:fa:6b: 2e:0e:15:66:91:52:6a:fa:6a:70:20:f8:b5:19:6e:31:f3:1b: e1:8f:5c:61:e1:84:e6:5a:60:6e:5d:ad:99:2b:10:5a:a8:99: 0e:06:b9:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmBX4J/E8+N2vYGW/bwEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj OWE4MzcwHhcNMjUxMjI0MjMwMDU3WhcNMjUxMjI1MjMwMDU3WjAzMTEwLwYDVQQD EygxOTBjOGZmY2NhMDMwMjczZWVkZjkyMjFmMDY1YmY1ZGQwODgyZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOvAa+4N6WgfuUP66dH3jrq9j8/v ol8KP7gkSyY49wnZwpFbRsUvZO5JYIy1IUxPlS7bcko2xF7K9aPbub2hp3i0NX0P 4ksUbcQB0qFZxT3qUC9laPqBi040ybD26mgiufGgVJYMgZPuJffoSkiyn0PD6H4+ xaxsR2eSSjQBqiglZ0ev1gsSjrJGI5gusIznI8LG5RB5Ns++960rMwMoRJL/ROjS of4Zu7vXZhMuhnnzPcXvwiy26iK5p9tF0+w8H9klY/RLYUJeiAIC84q0u6Tz8LEx bpfHMyfBYBSYdIiMf0hMg7y9MBtMy38Z6Hf8jBT8S4di7lGHJFjF8b7ymQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkMj/zKAwJz7t+SIfBlv13QiC/1MB8GA1UdIwQY MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt MDBmMDBhZjFjOGQ3LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3 LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJf8JJre K7Nxxm0qrAPdbvOaK0GomehV+uDXXcrPrQLGXZT0JAiuS+Sy3UaO96KwwI05unU+ sFeWjRmWEorTdTrfni70XIlCkDtMupv4WfX0xhYDhTWHsQ0Fd5to8qKhW+4eWrQb TKbpKRuRtPc1rUDSuXX1+Gz3HC97yB2JKZuCpYsYwZvPP4JUe9TaichmfLzOQ1EZ pT0mvelY0ad8c+XkjBSiQ+HMsGD64pbZpCNw1FFZ0h/ebsvOkSYVKsj/GcCx+i3T dOzLc8r/oRZH9qYghDkvDPprLg4VZpFSavpqcCD4tRluMfMb4Y9cYeGE5lpgbl2t mSsQWqiZDga50w== -----END CERTIFICATE-----Generated at Thu Dec 25 07:06:30 2025 by rpki-client