This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json) Hash identifier: 0dJGKQBiKulsqG5sayvPfTwwdRAe7Ay7PisdWy8RLao= Subject key identifier: EF:B7:4E:DF:1F:E2:91:A6:1F:FF:78:20:5A:25:37:7A:B9:69:83:3C Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Certificate serial: 019BF574DD1B55251577246391A975678725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft Manifest number: A1 Signing time: Sun 25 Jan 2026 14:00:35 +0000 Manifest this update: Sun 25 Jan 2026 14:00:35 +0000 Manifest next update: Mon 26 Jan 2026 14:00:35 +0000 Files and hashes: 1: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: GlXCCV7BCFaqoDY4FFG7QIgha1QY51WbOJZ/3yox7+4=) 2: kUqD1B_HqrRGQMfdm0p_nL5q1Yo.roa (hash: LGB+6qc6f2IFP3yURAz7uhoUKkg6z1TzwYrDl1Ny9tA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:dd:1b:55:25:15:77:24:63:91:a9:75:67:87:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Validity Not Before: Jan 25 14:00:35 2026 GMT Not After : Jan 26 14:00:35 2026 GMT Subject: CN=efb74edf1fe291a61fff78205a25377ab969833c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:11:06:93:c9:db:f9:6c:dc:85:05:6d:0e: 2e:be:c5:16:c3:8c:f3:37:5a:c5:08:06:07:87:68: ac:3e:6d:38:9b:07:0d:6d:53:82:89:a9:22:7b:b8: 15:70:06:cd:54:7e:d2:57:3d:60:45:d2:19:7c:d1: ab:f9:65:41:05:85:54:ce:e8:22:b3:b8:a9:58:ff: 94:95:ab:fd:b2:7f:46:73:d3:57:5a:79:3c:29:4c: 44:20:4c:37:30:40:4a:cb:b7:dd:1b:81:fc:b5:f2: 2a:74:64:7c:b8:b1:20:4f:ab:ab:07:5e:eb:9e:57: 6f:98:7a:d4:bf:53:62:06:1f:88:a4:19:4f:6d:50: 37:77:79:5e:00:e1:cc:72:00:30:7f:67:37:e2:38: 83:f8:8e:92:e2:e5:36:ba:33:fd:e2:d7:6b:fb:df: 8b:1a:47:3f:af:36:ac:e9:1a:2d:a5:e3:26:11:21: 67:df:cd:97:07:14:34:1a:4d:6e:bd:6f:dc:bf:0c: 59:ee:0d:44:5c:3e:91:80:de:ca:e1:a6:1c:fd:17: 74:91:c7:92:f0:13:f0:9b:14:50:2c:98:bc:43:bb: 9c:e4:af:91:25:9b:a6:8f:54:ec:23:fd:d9:80:0e: d8:cd:88:bb:b8:d1:41:eb:f7:c1:6f:90:bc:cf:3f: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B7:4E:DF:1F:E2:91:A6:1F:FF:78:20:5A:25:37:7A:B9:69:83:3C X509v3 Authority Key Identifier: keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d1:c9:cc:b4:40:cf:18:d4:10:31:ea:f3:9e:08:76:50:9a: 46:da:40:cb:d6:50:fa:1e:ea:45:43:02:77:9f:62:f3:4c:c4: ab:78:b3:2e:c5:7f:b5:f6:3a:e1:86:61:02:10:02:68:3e:58: 64:8c:ff:19:36:78:07:2f:8b:c8:2c:cd:cb:d0:57:dd:46:79: 27:5d:d4:f3:a3:ff:f5:9d:7d:80:9d:c3:d9:77:ab:25:91:18: 82:fd:d2:e9:70:99:27:57:20:54:29:02:c5:21:b9:fd:81:a0: d2:67:9a:a3:30:3d:3a:41:5e:44:02:c3:6e:0b:5d:af:ac:11: 63:0e:89:1d:6e:f5:18:9f:44:43:74:aa:1e:67:01:b0:ce:c2: a8:aa:f6:26:db:16:81:07:6d:ff:37:87:9a:79:75:1b:55:14: fe:a0:75:69:c9:3c:4f:c3:c6:b6:1a:95:c1:f3:38:25:46:af: 37:08:df:58:86:2d:9b:64:5a:66:21:b7:cb:9c:e6:f9:f6:14: db:38:07:d0:fa:81:0f:07:03:d1:d5:aa:39:e6:00:8b:33:01: 11:71:ac:8b:4b:96:3c:14:a2:45:89:90:60:49:f9:5a:c2:03: 18:93:f1:bb:ac:81:8b:44:d8:e1:7f:7a:47:80:be:fd:aa:31: a0:3b:ea:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dN0bVSUVdyRjkal1Z4clMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2EyMmQzY2U0NTNhYzBjMDNjYTliNmMyMTQwNzcxNGVi Nzg0MjUwHhcNMjYwMTI1MTQwMDM1WhcNMjYwMTI2MTQwMDM1WjAzMTEwLwYDVQQD EyhlZmI3NGVkZjFmZTI5MWE2MWZmZjc4MjA1YTI1Mzc3YWI5Njk4MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmcRBpPJ2/ls3IUFbQ4uvsUWw4zz N1rFCAYHh2isPm04mwcNbVOCiakie7gVcAbNVH7SVz1gRdIZfNGr+WVBBYVUzugi s7ipWP+Ulav9sn9Gc9NXWnk8KUxEIEw3MEBKy7fdG4H8tfIqdGR8uLEgT6urB17r nldvmHrUv1NiBh+IpBlPbVA3d3leAOHMcgAwf2c34jiD+I6S4uU2ujP94tdr+9+L Gkc/rzas6RotpeMmESFn382XBxQ0Gk1uvW/cvwxZ7g1EXD6RgN7K4aYc/Rd0kceS 8BPwmxRQLJi8Q7uc5K+RJZumj1TsI/3ZgA7YzYi7uNFB6/fBb5C8zz/rMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+3Tt8f4pGmH/94IFolN3q5aYM8MB8GA1UdIwQY MBaAFG7KItPORTrAwDyptsIUB3FOt4QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEt ODA5Y2E1MzRmYTU4LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEtODA5Y2E1MzRmYTU4 LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9HJzLRA zxjUEDHq854IdlCaRtpAy9ZQ+h7qRUMCd59i80zEq3izLsV/tfY64YZhAhACaD5Y ZIz/GTZ4By+LyCzNy9BX3UZ5J13U86P/9Z19gJ3D2XerJZEYgv3S6XCZJ1cgVCkC xSG5/YGg0meaozA9OkFeRALDbgtdr6wRYw6JHW71GJ9EQ3SqHmcBsM7CqKr2JtsW gQdt/zeHmnl1G1UU/qB1ack8T8PGthqVwfM4JUavNwjfWIYtm2RaZiG3y5zm+fYU 2zgH0PqBDwcD0dWqOeYAizMBEXGsi0uWPBSiRYmQYEn5WsIDGJPxu6yBi0TY4X96 R4C+/aoxoDvqMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:51 2026 by rpki-client