This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json) Hash identifier: T88XnGO5J2euXAXyy+uoehQ370nFm3gZFZdltfJY23s= Subject key identifier: 38:0C:36:47:5F:FD:BA:61:CA:17:3D:73:1B:6D:BA:AF:14:98:F7:22 Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Certificate serial: 019B33B21FFB7E1DDC477105DDF89565A3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft Manifest number: 0534 Signing time: Thu 18 Dec 2025 23:01:10 +0000 Manifest this update: Thu 18 Dec 2025 23:01:10 +0000 Manifest next update: Fri 19 Dec 2025 23:01:10 +0000 Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=) 2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: szGaIW2/Gb6HIoyEG6IahU4c7u5+9yr+lS5b48Rl7XA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:1f:fb:7e:1d:dc:47:71:05:dd:f8:95:65:a3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Validity Not Before: Dec 18 23:01:10 2025 GMT Not After : Dec 19 23:01:10 2025 GMT Subject: CN=380c36475ffdba61ca173d731b6dbaaf1498f722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:a9:ae:3f:8f:80:60:3a:f1:b1:1a:7f:d2: 90:0e:97:81:c1:32:28:a6:a9:93:51:25:13:b8:93: d0:ea:7b:0c:3e:44:52:b8:be:73:08:c0:56:cf:93: 5d:74:e9:76:ab:6e:6b:5f:de:59:d4:a0:f2:39:b8: 90:77:66:27:00:4a:6e:92:d9:da:00:26:74:fd:72: fb:0d:02:be:a3:94:99:00:e6:cc:84:3d:7c:46:e7: 40:1b:71:f9:8c:e8:73:97:17:51:22:28:d8:e0:cc: 93:cf:a4:2d:0b:a4:72:91:50:58:b3:8d:d6:12:24: ed:75:5e:c0:65:e4:b6:03:79:e9:34:84:3c:61:5d: ff:9b:dd:99:1e:bc:78:6a:01:7e:1d:45:f7:cf:f9: f4:da:f3:31:12:8f:bb:a6:92:2e:a7:f1:f5:02:3e: 4a:88:45:1c:c5:bc:36:63:41:f1:da:c9:c5:68:d7: 93:97:bc:20:ca:1b:6b:e9:8c:6c:55:3b:7d:b2:e1: 57:77:b6:2a:f4:ef:a2:95:1f:91:db:54:81:03:31: 9f:1c:87:e2:43:3e:8d:1c:7f:09:eb:b2:b1:2d:50: bb:24:ce:67:a7:1f:54:5d:ce:5c:99:6f:9b:8d:8e: 80:47:10:ce:09:5a:a0:a2:93:74:c4:47:ac:ee:34: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:36:47:5F:FD:BA:61:CA:17:3D:73:1B:6D:BA:AF:14:98:F7:22 X509v3 Authority Key Identifier: keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:46:38:bd:5b:0b:95:6b:de:d1:68:a1:65:ea:62:31:0d:39: ed:50:4f:ef:a4:33:55:c9:c5:ae:95:52:8e:7b:13:6a:45:2c: 6a:a9:db:a3:a3:de:99:b3:f1:d3:b9:56:4f:ac:06:0d:de:f8: 59:e0:1b:41:d3:4e:59:d3:45:e6:d1:43:76:5e:42:23:82:76: 73:28:e2:27:db:68:ec:95:a7:f4:07:2f:e4:c6:c0:c0:b0:40: de:cb:2f:cf:cf:44:89:f0:d4:33:ff:25:27:f7:31:96:0d:95: 28:0a:65:6f:25:84:18:40:eb:ca:03:0c:ec:14:6e:8f:a6:fe: 3a:d3:97:60:55:7d:66:c5:8a:49:a3:6b:b4:2e:ab:44:de:f6: 24:3a:c5:a0:26:48:ea:cb:db:31:61:eb:eb:c1:f7:3b:3c:58: 48:bc:74:af:79:02:49:3d:77:f3:f6:2e:0b:d9:2f:e9:8e:a5: 93:4c:ce:c2:fd:0f:1f:aa:fc:12:98:a7:dc:f0:f0:a5:eb:4c: 7e:00:88:dd:1d:27:6e:06:f9:34:5c:3d:bb:26:17:15:98:d3: 17:36:3b:b8:e1:81:2f:e1:5a:be:f6:f4:fb:48:ab:be:32:8a: 92:8f:ea:0e:c9:4a:c1:75:b8:5c:a0:59:42:23:db:02:b1:81: 7e:4b:20:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsh/7fh3cR3EF3fiVZaPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz NTA5ZTYwHhcNMjUxMjE4MjMwMTEwWhcNMjUxMjE5MjMwMTEwWjAzMTEwLwYDVQQD EygzODBjMzY0NzVmZmRiYTYxY2ExNzNkNzMxYjZkYmFhZjE0OThmNzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD6prj+PgGA68bEaf9KQDpeBwTIo pqmTUSUTuJPQ6nsMPkRSuL5zCMBWz5NddOl2q25rX95Z1KDyObiQd2YnAEpuktna ACZ0/XL7DQK+o5SZAObMhD18RudAG3H5jOhzlxdRIijY4MyTz6QtC6RykVBYs43W EiTtdV7AZeS2A3npNIQ8YV3/m92ZHrx4agF+HUX3z/n02vMxEo+7ppIup/H1Aj5K iEUcxbw2Y0Hx2snFaNeTl7wgyhtr6YxsVTt9suFXd7Yq9O+ilR+R21SBAzGfHIfi Qz6NHH8J67KxLVC7JM5npx9UXc5cmW+bjY6ARxDOCVqgopN0xEes7jQP/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgMNkdf/bphyhc9cxttuq8UmPciMB8GA1UdIwQY MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt OGQxNTU2OWI1YmZlLzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0Y4vVsL lWve0WihZepiMQ057VBP76QzVcnFrpVSjnsTakUsaqnbo6PembPx07lWT6wGDd74 WeAbQdNOWdNF5tFDdl5CI4J2cyjiJ9to7JWn9Acv5MbAwLBA3ssvz89EifDUM/8l J/cxlg2VKAplbyWEGEDrygMM7BRuj6b+OtOXYFV9ZsWKSaNrtC6rRN72JDrFoCZI 6svbMWHr68H3OzxYSLx0r3kCST138/YuC9kv6Y6lk0zOwv0PH6r8Epin3PDwpetM fgCI3R0nbgb5NFw9uyYXFZjTFzY7uOGBL+Favvb0+0irvjKKko/qDslKwXW4XKBZ QiPbArGBfksg4w== -----END CERTIFICATE-----Generated at Fri Dec 19 02:00:00 2025 by rpki-client