This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json) Hash identifier: 32F7lsxFMB/qjO4jzBj1lVZwjApg5vtJgv1XL151zsw= Subject key identifier: 67:1D:8D:56:BA:6D:DD:92:1F:CE:22:3F:21:BD:E2:A0:49:BE:E9:07 Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Certificate serial: 019B175F3709D558F6EF9B6F1C9D61F4E06F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft Manifest number: 2D Signing time: Sat 13 Dec 2025 11:01:14 +0000 Manifest this update: Sat 13 Dec 2025 11:01:14 +0000 Manifest next update: Sun 14 Dec 2025 11:01:14 +0000 Files and hashes: 1: Q-j_3_g0NR0emzmYR6DOVMhxXms.roa (hash: ne2pObyk47ycl3a3yBLEH+A55DHlk9VQjUbzDqVxeGM=) 2: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: lcHRZaOL3/VvN8t3XV6WC1bgKOBDaXkQYNqg+3VRKGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:37:09:d5:58:f6:ef:9b:6f:1c:9d:61:f4:e0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Validity Not Before: Dec 13 11:01:14 2025 GMT Not After : Dec 14 11:01:14 2025 GMT Subject: CN=671d8d56ba6ddd921fce223f21bde2a049bee907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:e2:c4:c9:f6:36:a7:24:81:af:66:be:ea: 42:84:80:9d:8e:a1:b0:82:9b:8b:4f:3c:b2:68:30: 16:9c:3c:64:fd:c1:15:2c:99:a2:4b:00:d6:94:5e: 7d:bc:e8:ed:ae:4d:6d:ad:2c:05:6a:61:00:81:6c: 95:0f:13:0e:07:fb:dd:2e:95:8e:46:15:3a:3a:6e: b5:2e:7f:e8:c2:1c:6d:71:9e:9b:69:29:83:6b:4f: 73:d1:83:07:6b:61:9f:53:e4:9b:c2:60:fb:ae:ff: 9c:23:b4:49:1d:74:09:94:53:7c:ba:15:36:7c:b1: 38:3f:35:3d:3b:f6:44:7a:93:ac:2b:f1:85:23:d4: 0f:d1:4a:79:a8:75:34:0c:37:b7:b8:5a:d0:07:4d: 0a:2e:b0:5f:68:71:a2:e9:21:c1:01:29:63:25:86: a6:78:ed:3b:30:cd:18:a9:f8:fd:43:62:7a:6b:32: 9f:15:68:f4:33:35:d4:dc:1c:a4:5d:3a:df:b8:0d: 11:f7:5a:b6:f4:2b:30:cf:c8:ab:5e:07:6d:88:9d: 9c:e1:92:e1:27:23:c3:4e:c3:d1:5d:a4:05:37:7d: 47:6b:af:b2:c0:1f:c2:75:3a:48:96:17:e8:1e:2e: f5:8a:d5:df:e5:00:24:8b:65:9e:8e:f8:4b:9d:a9: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:8D:56:BA:6D:DD:92:1F:CE:22:3F:21:BD:E2:A0:49:BE:E9:07 X509v3 Authority Key Identifier: keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c2:f3:97:bb:97:a5:af:ab:d9:c1:52:83:84:7f:8c:59:4f: c6:93:ba:a5:12:8c:25:e7:0f:9f:27:e7:c7:3f:6e:82:ef:f4: b4:b9:bd:64:ee:df:a8:ab:5f:9c:14:e9:68:e4:4d:e4:de:a8: b4:f7:b7:78:9f:ad:06:22:85:4b:c9:75:e8:d2:d7:ca:ae:7a: 1a:60:75:46:50:3b:5f:dc:f0:5d:7d:9f:fb:19:ab:20:06:00: aa:b6:c8:93:f8:8a:fb:49:c5:e6:40:46:94:05:7c:fc:7f:7e: fc:56:97:5d:f3:69:26:8f:12:6e:94:d0:46:80:d9:f1:3d:4d: b0:8c:7a:57:e8:a5:6b:36:de:e4:77:e2:29:0a:9c:e5:07:c0: 10:58:24:37:52:46:d3:66:d2:e1:f7:22:65:3e:c4:0a:e8:8a: c9:bd:9f:ad:da:b0:c0:aa:16:b2:68:52:a7:2f:34:f0:bd:03: 87:f5:b4:6f:bf:a5:2e:5f:85:c2:3d:a8:ae:36:85:55:08:5c: 5e:fa:65:77:68:af:58:95:3c:aa:4a:e6:be:09:8a:20:55:52: ca:d8:09:e4:05:32:0a:7a:55:86:a9:72:35:5b:3f:2d:0c:64: 05:86:fc:e9:63:69:50:9d:ab:2b:f8:ab:15:30:3b:9f:08:dc: 52:d0:84:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXXzcJ1Vj275tvHJ1h9OBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2EyMmQzY2U0NTNhYzBjMDNjYTliNmMyMTQwNzcxNGVi Nzg0MjUwHhcNMjUxMjEzMTEwMTE0WhcNMjUxMjE0MTEwMTE0WjAzMTEwLwYDVQQD Eyg2NzFkOGQ1NmJhNmRkZDkyMWZjZTIyM2YyMWJkZTJhMDQ5YmVlOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN/ixMn2Nqckga9mvupChICdjqGw gpuLTzyyaDAWnDxk/cEVLJmiSwDWlF59vOjtrk1trSwFamEAgWyVDxMOB/vdLpWO RhU6Om61Ln/owhxtcZ6baSmDa09z0YMHa2GfU+SbwmD7rv+cI7RJHXQJlFN8uhU2 fLE4PzU9O/ZEepOsK/GFI9QP0Up5qHU0DDe3uFrQB00KLrBfaHGi6SHBASljJYam eO07MM0Yqfj9Q2J6azKfFWj0MzXU3BykXTrfuA0R91q29Cswz8irXgdtiJ2c4ZLh JyPDTsPRXaQFN31Ha6+ywB/CdTpIlhfoHi71itXf5QAki2WejvhLnanEOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcdjVa6bd2SH84iPyG94qBJvukHMB8GA1UdIwQY MBaAFG7KItPORTrAwDyptsIUB3FOt4QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEt ODA5Y2E1MzRmYTU4LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEtODA5Y2E1MzRmYTU4 LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosLzl7uX pa+r2cFSg4R/jFlPxpO6pRKMJecPnyfnxz9ugu/0tLm9ZO7fqKtfnBTpaORN5N6o tPe3eJ+tBiKFS8l16NLXyq56GmB1RlA7X9zwXX2f+xmrIAYAqrbIk/iK+0nF5kBG lAV8/H9+/FaXXfNpJo8SbpTQRoDZ8T1NsIx6V+ilazbe5HfiKQqc5QfAEFgkN1JG 02bS4fciZT7ECuiKyb2frdqwwKoWsmhSpy808L0Dh/W0b7+lLl+Fwj2orjaFVQhc Xvpld2ivWJU8qkrmvgmKIFVSytgJ5AUyCnpVhqlyNVs/LQxkBYb86WNpUJ2rK/ir FTA7nwjcUtCETw== -----END CERTIFICATE-----Generated at Sat Dec 13 15:00:45 2025 by rpki-client