This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json) Hash identifier: HHwReT2BvkukxNARJsYw1jNLk1m88uD4s7hGfR7sHTQ= Subject key identifier: 16:A4:C9:D0:08:2A:1C:0E:F7:19:19:07:BD:D7:F9:23:F2:F8:60:0D Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Certificate serial: 019AF20904DEADF08D4FD685A822E32CD395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft Manifest number: 0512 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=) 2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: gb+L5Aw5u8jqXfUhmUBbyMOBKahKU7IePtpa/eS6wdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:04:de:ad:f0:8d:4f:d6:85:a8:22:e3:2c:d3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6 Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=16a4c9d0082a1c0ef7191907bdd7f923f2f8600d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:fa:86:4e:b4:14:55:47:ea:9e:df:db:c7: 2b:87:01:15:e4:97:08:33:42:e7:12:93:26:23:ec: 84:3c:7b:0b:7e:8d:45:33:13:2a:0b:00:05:29:77: ee:57:3e:e3:ee:70:08:b9:30:17:75:a6:51:67:bb: c7:8c:13:c4:39:a2:98:d7:4f:85:a5:70:49:17:f4: 86:51:ee:08:60:bd:69:24:15:fa:59:c2:72:a6:c3: d6:b7:2c:b3:53:3e:b0:22:a9:e2:bb:a6:69:17:8d: 63:58:f8:ae:0e:50:d4:6c:d6:e1:15:a2:f0:2d:a9: 36:6b:a7:d8:28:73:3d:3f:10:35:ab:14:85:f0:9e: 52:e5:c4:5f:b9:9c:78:b2:60:ba:18:7e:bf:c8:4d: 4b:68:b7:5f:38:12:0a:84:38:eb:bc:4f:3b:97:a4: 5b:fc:4b:c6:f2:d8:43:26:a7:0a:61:9f:d5:92:46: 86:df:86:26:bd:a2:db:70:97:05:2b:78:07:f0:85: d0:69:9b:fe:eb:e7:7f:99:e5:cb:4f:39:a1:50:b6: 74:2a:c5:4a:05:e9:c5:a5:5b:96:c0:d4:8c:f2:1f: fb:fe:63:9d:6b:f5:12:b0:7b:40:cd:75:15:e1:7b: f4:1d:e2:63:b6:e3:83:77:52:68:5c:4a:0d:d1:b5: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A4:C9:D0:08:2A:1C:0E:F7:19:19:07:BD:D7:F9:23:F2:F8:60:0D X509v3 Authority Key Identifier: keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:0f:f1:c0:fa:0e:00:45:ae:f7:41:d7:ae:0a:e5:25:ae: 20:87:2c:8a:33:00:81:51:8a:db:41:82:cf:fe:b1:29:12:fa: 22:17:4b:c7:d5:3e:ef:9b:4c:19:b4:fc:88:ef:e7:c9:06:79: bf:1b:9f:75:93:3f:18:57:20:54:75:02:d4:b8:20:73:35:b3: d9:bb:9b:9c:36:da:a4:b6:45:30:5b:02:93:92:52:2f:49:e2: 28:77:87:88:dc:02:22:1f:39:b3:b0:bf:9f:23:aa:12:0e:90: 72:36:65:b7:dc:8c:d5:ee:c6:99:76:dd:01:b4:3d:98:c7:b3: aa:f3:a5:ba:fc:6c:31:03:4f:04:05:b7:a4:15:db:cc:2e:b3: a2:49:c6:56:58:12:ee:ea:65:da:48:95:f1:ff:72:e0:8d:81: 78:0c:7e:71:4c:ce:7e:d1:d8:f2:c7:8a:a2:b5:7a:a7:0a:7a: 1b:57:b2:f4:13:27:92:87:4c:50:16:ed:ae:4a:f9:62:e3:47: 15:83:ca:9c:61:d4:db:8c:c7:6a:87:82:18:99:ae:89:4a:3f: 7a:d0:b2:ce:be:6d:ac:8d:16:c4:b0:a6:89:dc:60:99:2c:9b: bd:49:f5:6d:80:7c:f3:f9:dd:02:db:e7:e3:8c:46:d7:56:53: 1b:ea:be:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQTerfCNT9aFqCLjLNOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz NTA5ZTYwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EygxNmE0YzlkMDA4MmExYzBlZjcxOTE5MDdiZGQ3ZjkyM2YyZjg2MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWv6hk60FFVH6p7f28crhwEV5JcI M0LnEpMmI+yEPHsLfo1FMxMqCwAFKXfuVz7j7nAIuTAXdaZRZ7vHjBPEOaKY10+F pXBJF/SGUe4IYL1pJBX6WcJypsPWtyyzUz6wIqniu6ZpF41jWPiuDlDUbNbhFaLw Lak2a6fYKHM9PxA1qxSF8J5S5cRfuZx4smC6GH6/yE1LaLdfOBIKhDjrvE87l6Rb /EvG8thDJqcKYZ/VkkaG34YmvaLbcJcFK3gH8IXQaZv+6+d/meXLTzmhULZ0KsVK BenFpVuWwNSM8h/7/mOda/USsHtAzXUV4Xv0HeJjtuODd1JoXEoN0bUFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBakydAIKhwO9xkZB73X+SPy+GANMB8GA1UdIwQY MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt OGQxNTU2OWI1YmZlLzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaswP8cD6 DgBFrvdB164K5SWuIIcsijMAgVGK20GCz/6xKRL6IhdLx9U+75tMGbT8iO/nyQZ5 vxufdZM/GFcgVHUC1LggczWz2bubnDbapLZFMFsCk5JSL0niKHeHiNwCIh85s7C/ nyOqEg6QcjZlt9yM1e7GmXbdAbQ9mMezqvOluvxsMQNPBAW3pBXbzC6zoknGVlgS 7upl2kiV8f9y4I2BeAx+cUzOftHY8seKorV6pwp6G1ey9BMnkodMUBbtrkr5YuNH FYPKnGHU24zHaoeCGJmuiUo/etCyzr5trI0WxLCmidxgmSybvUn1bYB88/ndAtvn 44xG11ZTG+q+vg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:26:03 2025 by rpki-client