This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json) Hash identifier: llhKY10qHmJM37xDM3u5+REAoP/Od35K/5FTo2dI5mg= Subject key identifier: 57:35:CA:D5:6F:66:88:5C:6F:80:3A:F8:5F:31:A9:C6:0B:DF:89:B5 Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Certificate serial: 019B3D5A3672035A4B8B901723BB8A84EFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 20:01:20 +0000 Manifest this update: Sat 20 Dec 2025 20:01:20 +0000 Manifest next update: Sun 21 Dec 2025 20:01:20 +0000 Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=) 2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=) 3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=) 4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: b4P41xLvlswc9QbO99wHiu7cmKs4uqwnen3/2kvdAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:36:72:03:5a:4b:8b:90:17:23:bb:8a:84:ef:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837 Validity Not Before: Dec 20 20:01:20 2025 GMT Not After : Dec 21 20:01:20 2025 GMT Subject: CN=5735cad56f66885c6f803af85f31a9c60bdf89b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:59:d8:32:1e:91:81:8c:56:26:0a:de:c1: 2d:37:ae:8c:0e:90:61:52:47:b0:77:eb:79:f1:da: ca:76:6c:da:9d:ad:09:c9:6d:df:40:21:1b:47:8c: fd:89:34:e0:09:ed:3e:43:10:09:bb:99:5a:4b:7d: cb:a1:bf:84:71:51:7d:e1:21:94:9f:4e:10:49:f4: 52:8f:49:ed:a8:50:df:53:f6:47:80:0a:2d:ec:6c: 0d:ba:1b:70:8a:51:9f:44:4d:9d:cc:99:3a:dc:02: 29:a7:bb:b0:f7:e2:c6:33:66:46:d3:0b:f0:80:34: 12:c3:1d:c3:01:9e:dc:c4:81:e6:3c:be:7f:3d:b8: 4e:e0:9f:26:f4:e3:41:43:86:38:48:a6:db:82:c1: 81:7e:c7:fc:67:9d:57:61:42:d9:45:8e:85:36:99: 8e:c8:e5:b6:69:ed:62:f1:b1:57:47:ea:2d:97:ca: 7c:41:1b:1f:59:2f:34:50:f4:3c:a3:4f:89:b1:94: ed:85:19:c8:06:43:49:0d:4c:e1:01:fc:79:20:e8: 3f:1d:e5:de:a5:59:7d:71:ef:15:26:68:c5:8b:3b: a1:7c:79:a3:5b:7a:c6:91:e8:ee:74:65:b7:b8:50: 76:04:6c:73:7b:a8:2c:b6:12:58:57:45:69:5d:09: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:35:CA:D5:6F:66:88:5C:6F:80:3A:F8:5F:31:A9:C6:0B:DF:89:B5 X509v3 Authority Key Identifier: keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2b:24:ba:e1:84:06:35:62:ba:0e:c7:63:95:22:8a:d6:b2: 8c:43:4b:b0:aa:d7:e4:4e:83:f4:f1:38:96:03:30:f4:be:14: 54:ac:4e:cb:00:ab:64:c0:28:07:08:e7:33:da:30:29:50:c1: f5:1c:36:3d:6f:1b:a8:be:6a:8a:7c:b9:3c:ad:ee:3a:e1:8d: 9c:a3:73:6a:3c:70:75:17:ba:d4:b5:73:2a:03:cc:6b:81:4a: c3:c6:65:8c:b9:77:24:e0:a2:0c:d6:06:66:f7:e8:42:c1:b9: 86:80:c4:3f:8a:4a:e8:59:0a:b0:28:f1:1f:bb:e7:75:f0:92: 20:4e:2d:33:37:0b:ae:94:ea:42:16:62:aa:3e:c7:67:61:98: 5f:8d:d8:83:f3:2d:8e:26:07:e1:60:e2:ba:dd:6b:f0:5c:6a: c8:fb:f9:fd:b5:07:26:a0:ac:3e:b9:1a:07:42:dd:b0:9d:58: af:ee:83:4b:16:1a:a4:4d:9a:37:84:60:2c:92:75:80:ae:fb: 66:a9:3f:78:4e:a8:1f:77:d9:5b:dd:52:46:0b:65:95:08:e7: 23:cb:ae:93:31:8a:01:7a:71:37:ef:aa:d5:eb:56:86:28:bb: b4:f2:02:ab:ea:61:5c:28:23:f5:09:76:f4:cf:bd:b5:4f:2b: 6e:e3:fc:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjZyA1pLi5AXI7uKhO/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj OWE4MzcwHhcNMjUxMjIwMjAwMTIwWhcNMjUxMjIxMjAwMTIwWjAzMTEwLwYDVQQD Eyg1NzM1Y2FkNTZmNjY4ODVjNmY4MDNhZjg1ZjMxYTljNjBiZGY4OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNtZ2DIekYGMViYK3sEtN66MDpBh Ukewd+t58drKdmzana0JyW3fQCEbR4z9iTTgCe0+QxAJu5laS33Lob+EcVF94SGU n04QSfRSj0ntqFDfU/ZHgAot7GwNuhtwilGfRE2dzJk63AIpp7uw9+LGM2ZG0wvw gDQSwx3DAZ7cxIHmPL5/PbhO4J8m9ONBQ4Y4SKbbgsGBfsf8Z51XYULZRY6FNpmO yOW2ae1i8bFXR+otl8p8QRsfWS80UPQ8o0+JsZTthRnIBkNJDUzhAfx5IOg/HeXe pVl9ce8VJmjFizuhfHmjW3rGkejudGW3uFB2BGxze6gsthJYV0VpXQlk6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc1ytVvZohcb4A6+F8xqcYL34m1MB8GA1UdIwQY MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt MDBmMDBhZjFjOGQ3LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3 LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSskuuGE BjViug7HY5UiitayjENLsKrX5E6D9PE4lgMw9L4UVKxOywCrZMAoBwjnM9owKVDB 9Rw2PW8bqL5qiny5PK3uOuGNnKNzajxwdRe61LVzKgPMa4FKw8ZljLl3JOCiDNYG ZvfoQsG5hoDEP4pK6FkKsCjxH7vndfCSIE4tMzcLrpTqQhZiqj7HZ2GYX43Yg/Mt jiYH4WDiut1r8FxqyPv5/bUHJqCsPrkaB0LdsJ1Yr+6DSxYapE2aN4RgLJJ1gK77 Zqk/eE6oH3fZW91SRgtllQjnI8uukzGKAXpxN++q1etWhii7tPICq+phXCgj9Ql2 9M+9tU8rbuP8HA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:28:41 2025 by rpki-client