This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File:                     bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier:          6vDGLLBWhnvrfOTsKfqIAdJf2PuCZasmjNFrxT+OGBE=
Subject key identifier:   AC:85:8D:C6:31:35:15:E0:80:C6:9B:82:38:6E:B9:D9:F8:0C:2D:A0
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer:       /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial:       019B47385EEB5669486BC9B1C5ADD68A06D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number:          178E
Signing time:             Mon 22 Dec 2025 18:00:35 +0000
Manifest this update:     Mon 22 Dec 2025 18:00:35 +0000
Manifest next update:     Tue 23 Dec 2025 18:00:35 +0000
Files and hashes:         1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=)
                          2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: Zn//6FYu0z7lkMGEJ9Y449u7F2m3VLVNFj26GwtzcnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 15:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:47:38:5e:eb:56:69:48:6b:c9:b1:c5:ad:d6:8a:06:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
        Validity
            Not Before: Dec 22 18:00:35 2025 GMT
            Not After : Dec 23 18:00:35 2025 GMT
        Subject: CN=ac858dc6313515e080c69b82386eb9d9f80c2da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:ef:1a:5d:50:a5:fc:15:f1:7a:63:c1:df:
                    b5:0a:2e:69:43:ab:4e:cf:aa:f0:0a:b0:66:ea:9c:
                    61:ee:90:3a:9c:41:da:62:d7:16:11:53:1e:c1:77:
                    0e:43:44:50:bd:97:79:c2:b2:8b:7d:31:f6:33:e6:
                    4e:14:65:58:fc:61:2a:80:51:d3:dc:c1:a5:8c:47:
                    cd:7f:42:f8:9b:35:28:65:68:1a:61:66:ba:3a:1b:
                    ac:8d:16:88:ad:4f:a2:e1:75:0e:fa:b1:b1:e2:ad:
                    8b:21:7d:d6:19:e3:8f:e2:bf:df:ae:74:82:e7:94:
                    08:0a:4c:74:da:00:88:ad:a0:68:5d:dc:4f:32:5d:
                    5f:d6:96:bc:87:74:e6:5f:6f:f9:c5:59:ea:e1:6b:
                    c0:d5:1c:c0:4e:95:a3:f2:56:51:3d:2b:d2:7e:7c:
                    cb:4c:8c:8f:4e:23:29:f2:63:66:64:86:57:c9:fa:
                    1d:11:4f:5c:fa:96:1d:d5:53:8c:e8:88:7f:b5:fb:
                    a2:a7:6d:73:e2:9e:8f:f3:cd:46:4a:11:3d:2a:72:
                    b2:4d:12:18:38:ff:a0:ea:87:34:20:23:6d:72:66:
                    0f:d4:37:c1:07:3c:52:92:ee:d4:ea:7c:c5:17:c7:
                    1e:19:98:4f:8c:33:44:c8:ba:ea:15:65:7c:40:60:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:85:8D:C6:31:35:15:E0:80:C6:9B:82:38:6E:B9:D9:F8:0C:2D:A0
            X509v3 Authority Key Identifier:
                keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:79:4d:79:a1:31:d9:74:7a:13:17:30:e6:c9:74:d5:f8:9a:
         fb:e7:23:bc:83:0d:5d:54:5d:e0:19:d4:e3:96:f7:cc:35:bc:
         58:a3:b7:5f:db:4d:dc:22:1e:6c:27:20:dd:44:7a:b4:0b:86:
         38:39:41:7d:ed:2e:20:d7:5c:1c:5d:57:1e:c0:1a:f1:0f:b4:
         9a:b8:06:ee:99:10:7d:88:65:81:ec:ae:b0:ca:50:37:f5:0e:
         d0:f9:72:ac:e3:2b:d7:d2:c2:9a:d4:d6:56:9e:61:93:34:f0:
         f5:bd:24:d9:94:8d:c8:90:35:85:ce:c9:75:3d:22:55:af:65:
         51:62:c1:0d:20:ac:d8:30:3f:f6:66:a1:ae:f6:3f:3e:52:e7:
         8d:df:e8:36:e7:2c:9a:08:98:a8:d4:f1:24:6b:97:f5:72:fa:
         df:61:06:53:0f:b6:b1:f9:48:18:c7:78:72:d2:ee:5c:ba:6b:
         f4:11:80:fc:1d:dc:2b:a8:81:27:d2:c3:5c:5d:5a:97:fc:05:
         94:b6:01:11:4b:bf:4a:90:fd:90:f1:38:72:91:11:40:3d:88:
         4a:67:57:0d:7e:19:6d:77:df:03:5e:6c:2a:c7:06:73:4a:ca:
         a3:13:e1:18:92:49:c7:02:3e:42:07:f6:20:44:06:09:89:c2:
         86:b3:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:47:23 2025 by rpki-client