This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json) Hash identifier: mwMDWryYYwvOJLmE8dMB15chMkHNK6uZJApe8TFrrBo= Subject key identifier: 0E:75:12:08:92:AF:9F:3C:0D:C7:C3:6C:52:E9:26:39:66:29:79:3E Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Certificate serial: 019B12DDDA73B05675CD742FC751611D1BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft Manifest number: 0523 Signing time: Fri 12 Dec 2025 14:01:27 +0000 Manifest this update: Fri 12 Dec 2025 14:01:27 +0000 Manifest next update: Sat 13 Dec 2025 14:01:27 +0000 Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=) 2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: 0RTufMC77WODMCCpGjziV2Nbsxpc7/zbtopA4sxP4nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:da:73:b0:56:75:cd:74:2f:c7:51:61:1d:1b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Validity Not Before: Dec 12 14:01:27 2025 GMT Not After : Dec 13 14:01:27 2025 GMT Subject: CN=0e75120892af9f3c0dc7c36c52e926396629793e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:84:63:54:62:78:b5:f8:f1:71:bd:b1:ba: 6d:7f:a7:a6:e4:f7:9c:66:f6:3b:ac:35:a9:f7:13: de:e3:b5:03:38:a2:14:09:75:77:26:87:60:34:3b: 5b:05:82:68:a0:83:cc:98:be:e7:4c:1f:40:cc:c5: c6:4c:27:b3:f9:aa:47:ea:f9:02:29:f1:e4:40:ec: 1b:18:b5:5e:07:42:d1:ed:57:97:cc:72:a2:de:1d: cc:6c:e0:c1:e7:52:ad:80:b3:df:3d:ea:70:74:70: 51:55:79:bb:d7:23:96:24:94:8d:5c:86:1d:71:ca: ee:66:a3:15:6f:ad:de:72:15:4a:43:32:c2:63:ad: 80:b6:3e:a2:2e:d1:31:b7:55:73:c7:45:77:29:23: b1:7a:0a:8a:1e:d4:b1:06:15:65:87:49:a1:9c:86: 4a:d1:2e:2d:ab:8b:f5:4e:26:6b:8a:32:df:91:4d: 36:79:93:2e:31:62:61:0f:25:a9:30:86:83:36:93: 2a:27:80:f4:50:5c:bb:f3:e8:b8:2d:07:76:94:99: c7:8c:66:a2:83:1f:95:c0:cb:23:00:33:f1:a2:c5: 31:eb:4b:4a:9b:e1:a4:de:f6:53:7b:0d:f9:e9:62: 0c:08:dd:fa:85:e9:4b:da:04:57:f9:75:21:a3:55: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:12:08:92:AF:9F:3C:0D:C7:C3:6C:52:E9:26:39:66:29:79:3E X509v3 Authority Key Identifier: keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:26:52:51:a8:01:c2:bd:f3:74:cf:f2:66:3b:82:a7:4b: 93:21:9c:a0:d0:84:2b:04:74:1c:16:94:9c:7c:49:9b:00:59: 9b:10:9d:f2:60:a5:9b:de:d3:7d:e2:99:a4:e1:d3:57:e9:ff: 9c:c0:a4:34:17:a2:7e:ce:cb:22:fe:f4:37:9a:19:0e:f5:93: 05:c0:19:31:ef:68:14:22:a5:9a:3a:bb:dc:1a:4c:fa:ef:d9: dc:1d:f3:6c:77:37:8b:35:c7:a4:7b:29:5e:a2:34:03:e7:f3: 62:92:2b:8f:a4:1f:46:80:9c:51:7a:86:05:58:99:7a:2b:0e: f1:66:2e:ec:57:2d:d9:35:9b:22:3a:22:ed:38:4e:32:96:5e: f3:31:07:30:b9:52:e7:11:1c:a9:fa:1d:fe:1a:d6:c4:5a:f7: 38:4f:54:8d:c0:29:fe:a0:07:1d:c1:b7:c9:27:9a:25:41:c1: 2d:0d:e9:70:1f:4b:f0:8a:01:8e:ea:d6:57:44:87:43:77:c3: b1:08:d7:f4:c0:eb:fa:d2:eb:b2:10:e4:15:4b:67:0d:65:6b: 35:9c:fd:3a:e9:93:92:54:e1:02:35:74:f1:c6:97:6f:ea:7e: a4:86:7c:6f:0f:8e:4f:08:d3:a8:32:41:ce:93:bb:66:95:b2: d2:46:30:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3dpzsFZ1zXQvx1FhHRvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz NTA5ZTYwHhcNMjUxMjEyMTQwMTI3WhcNMjUxMjEzMTQwMTI3WjAzMTEwLwYDVQQD EygwZTc1MTIwODkyYWY5ZjNjMGRjN2MzNmM1MmU5MjYzOTY2Mjk3OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfaEY1RieLX48XG9sbptf6em5Pec ZvY7rDWp9xPe47UDOKIUCXV3JodgNDtbBYJooIPMmL7nTB9AzMXGTCez+apH6vkC KfHkQOwbGLVeB0LR7VeXzHKi3h3MbODB51KtgLPfPepwdHBRVXm71yOWJJSNXIYd ccruZqMVb63echVKQzLCY62Atj6iLtExt1Vzx0V3KSOxegqKHtSxBhVlh0mhnIZK 0S4tq4v1TiZrijLfkU02eZMuMWJhDyWpMIaDNpMqJ4D0UFy78+i4LQd2lJnHjGai gx+VwMsjADPxosUx60tKm+Gk3vZTew356WIMCN36helL2gRX+XUho1X/xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA51EgiSr588DcfDbFLpJjlmKXk+MB8GA1UdIwQY MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt OGQxNTU2OWI1YmZlLzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK4mUlGo AcK983TP8mY7gqdLkyGcoNCEKwR0HBaUnHxJmwBZmxCd8mClm97TfeKZpOHTV+n/ nMCkNBeifs7LIv70N5oZDvWTBcAZMe9oFCKlmjq73BpM+u/Z3B3zbHc3izXHpHsp XqI0A+fzYpIrj6QfRoCcUXqGBViZeisO8WYu7Fct2TWbIjoi7ThOMpZe8zEHMLlS 5xEcqfod/hrWxFr3OE9UjcAp/qAHHcG3ySeaJUHBLQ3pcB9L8IoBjurWV0SHQ3fD sQjX9MDr+tLrshDkFUtnDWVrNZz9OumTklThAjV08caXb+p+pIZ8bw+OTwjTqDJB zpO7ZpWy0kYwfw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:27:42 2025 by rpki-client