This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json) Hash identifier: arYTX1VtDZKalpvaq9QMK+2sZg/pBjSuFwITVMk30Ro= Subject key identifier: F9:F3:B9:9D:62:28:44:DA:7A:88:35:BA:C0:BA:D9:D9:ED:50:90:70 Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Certificate serial: 019AF0BF805EF6FF92EEF342ADE8D874635B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft Manifest number: 19 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: Q-j_3_g0NR0emzmYR6DOVMhxXms.roa (hash: ne2pObyk47ycl3a3yBLEH+A55DHlk9VQjUbzDqVxeGM=) 2: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: gkV3Hdeh/4E8YqEbd/pIqbraFWy6FrpJGKjqljGgiz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:80:5e:f6:ff:92:ee:f3:42:ad:e8:d8:74:63:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=f9f3b99d622844da7a8835bac0bad9d9ed509070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:65:61:d4:96:26:f9:ab:56:60:e1:d2:1c: 8b:ab:67:33:c0:3d:dd:50:c7:69:50:d0:93:99:62: b4:b3:a6:ae:46:34:0d:c8:15:80:61:8e:15:b0:04: 92:65:2b:5c:f2:44:a6:f3:df:cf:ca:d4:c5:4a:5e: cd:99:80:60:a6:26:b7:50:69:24:80:7f:6a:39:69: 3b:10:aa:f6:37:a6:e0:42:42:f7:10:55:4a:65:54: 4f:a6:24:56:6c:3d:53:e7:79:57:16:2a:bd:0a:02: f2:8e:9c:b0:a6:f1:28:5d:be:92:54:53:0f:b8:09: 02:f9:45:c0:e7:ec:90:73:54:03:0b:a9:1b:f5:ec: 79:62:9b:79:10:2d:4c:aa:a0:db:aa:a1:b7:e8:1a: 35:a6:52:aa:57:ea:83:2c:b6:89:f3:9c:0d:2e:68: e5:80:2c:97:d1:33:0f:db:1a:88:07:1f:9c:59:06: e0:70:1a:87:23:42:fb:ce:cf:c9:ea:06:13:d1:77: 8d:17:47:4e:85:e2:8b:ec:cc:16:e8:6b:2e:53:1d: 64:2c:c3:b0:67:a3:f0:f1:46:2d:94:b9:2c:b7:b7: fe:44:44:6e:19:77:57:d6:a8:fe:b4:6d:25:51:5d: 2d:79:72:a6:de:e3:1b:f4:6e:dd:6c:71:c3:aa:6f: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:B9:9D:62:28:44:DA:7A:88:35:BA:C0:BA:D9:D9:ED:50:90:70 X509v3 Authority Key Identifier: keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:77:5a:7a:0c:bf:0f:4a:97:7b:5e:ba:4a:71:ef:cd:62: e6:9e:33:ac:47:c4:73:c9:03:8a:56:54:2a:e7:66:ec:1b:69: b7:52:8b:45:c6:62:ad:c5:e4:23:bc:03:58:48:76:78:6c:b8: f5:22:2b:2e:b7:9f:3a:8b:58:1b:ea:a8:45:bb:88:f8:42:d3: d4:ce:de:dc:51:98:91:9e:7d:a7:5a:76:eb:07:48:fa:10:c8: f0:47:de:2c:a9:6a:d4:2f:2b:4b:77:e3:6e:91:e2:dc:fa:aa: 45:00:bb:cd:7a:52:89:99:ac:ae:f6:7e:27:a2:a8:98:96:c7: e1:22:79:cf:48:68:36:5d:ec:2c:6d:aa:81:0f:88:f6:34:5e: ee:0b:e5:73:28:14:52:a1:1d:4c:60:e9:d6:d1:e8:2f:d0:67: 4d:e6:5c:80:77:a7:93:cc:91:29:d7:10:5b:a1:23:15:87:35: 27:53:21:0b:59:3e:67:ad:b5:70:3a:33:d6:1e:06:78:ae:d8: 27:54:d0:ed:b7:7d:3e:cf:39:9e:ed:c2:4f:5e:cc:83:f6:9e: 83:d5:9a:1d:70:03:78:d7:6e:dd:52:18:d6:41:08:3c:c2:1d: d3:48:15:59:13:cd:d3:f6:c0:03:23:a4:73:33:66:ef:ce:81: 79:82:d6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4Be9v+S7vNCrejYdGNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2EyMmQzY2U0NTNhYzBjMDNjYTliNmMyMTQwNzcxNGVi Nzg0MjUwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EyhmOWYzYjk5ZDYyMjg0NGRhN2E4ODM1YmFjMGJhZDlkOWVkNTA5MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA5lYdSWJvmrVmDh0hyLq2czwD3d UMdpUNCTmWK0s6auRjQNyBWAYY4VsASSZStc8kSm89/PytTFSl7NmYBgpia3UGkk gH9qOWk7EKr2N6bgQkL3EFVKZVRPpiRWbD1T53lXFiq9CgLyjpywpvEoXb6SVFMP uAkC+UXA5+yQc1QDC6kb9ex5Ypt5EC1MqqDbqqG36Bo1plKqV+qDLLaJ85wNLmjl gCyX0TMP2xqIBx+cWQbgcBqHI0L7zs/J6gYT0XeNF0dOheKL7MwW6GsuUx1kLMOw Z6Pw8UYtlLkst7f+RERuGXdX1qj+tG0lUV0teXKm3uMb9G7dbHHDqm9SRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnzuZ1iKETaeog1usC62dntUJBwMB8GA1UdIwQY MBaAFG7KItPORTrAwDyptsIUB3FOt4QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEt ODA5Y2E1MzRmYTU4LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEtODA5Y2E1MzRmYTU4 LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh53WnoM vw9Kl3teukpx781i5p4zrEfEc8kDilZUKudm7Btpt1KLRcZircXkI7wDWEh2eGy4 9SIrLrefOotYG+qoRbuI+ELT1M7e3FGYkZ59p1p26wdI+hDI8EfeLKlq1C8rS3fj bpHi3PqqRQC7zXpSiZmsrvZ+J6KomJbH4SJ5z0hoNl3sLG2qgQ+I9jRe7gvlcygU UqEdTGDp1tHoL9BnTeZcgHenk8yRKdcQW6EjFYc1J1MhC1k+Z621cDoz1h4GeK7Y J1TQ7bd9Ps85nu3CT17Mg/aeg9WaHXADeNdu3VIY1kEIPMId00gVWRPN0/bAAyOk czNm786BeYLWlg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:16 2025 by rpki-client