This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft File: bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json) Hash identifier: HAxF9H5fc0ZEossS/nBz/Gak77LHxS1Z9IYwJwnveBY= Subject key identifier: DD:C2:71:B3:06:25:98:B8:E8:C6:A5:C8:15:8D:36:FA:B3:80:9C:2D Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Certificate serial: 019B416D30D2D4EA37DA693BD24D3D284268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 15:00:33 +0000 Manifest this update: Sun 21 Dec 2025 15:00:33 +0000 Manifest next update: Mon 22 Dec 2025 15:00:33 +0000 Files and hashes: 1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=) 2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: Cs9q9zohHbKMkP/wtiOOEsvPy+qG5fBma9wdCh8wd/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:30:d2:d4:ea:37:da:69:3b:d2:4d:3d:28:42:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Validity Not Before: Dec 21 15:00:33 2025 GMT Not After : Dec 22 15:00:33 2025 GMT Subject: CN=ddc271b3062598b8e8c6a5c8158d36fab3809c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:bf:5e:5e:34:e2:ec:2a:4d:b2:a3:e8:f3: c6:4b:0f:58:81:4b:95:56:ef:cf:f9:3c:e4:e6:0b: c5:8a:0a:bf:c7:45:d5:d1:69:d1:f9:cd:a9:f9:d6: 64:31:bc:56:3c:95:9a:e3:a6:04:69:38:af:cf:f3: 6b:63:bf:e6:00:0f:f4:e0:42:47:e5:fc:ff:1c:4b: 19:9c:e3:8b:d9:a4:a5:08:6d:5a:e4:4b:a7:e5:05: 8a:f5:09:f2:3e:fa:09:9c:f1:3d:09:1a:1c:7d:46: 30:83:47:b2:e1:44:01:cf:e4:82:32:3b:c2:ff:ef: ce:40:cd:99:7f:a3:14:05:0e:0d:bd:71:8d:73:56: 8d:b7:8c:51:ec:62:2a:b6:19:e0:49:ba:3a:bc:59: 99:7a:a5:f5:a4:c4:0e:9f:04:d2:51:9f:7c:0a:de: d6:e4:ec:36:6d:4b:88:f0:88:57:ca:7d:b5:98:2c: 3e:b0:45:ab:77:d1:74:ef:e5:fc:fe:c1:34:f9:66: c0:39:6d:de:45:2a:f6:32:49:ce:75:22:40:17:64: 0a:ba:c5:5d:69:8f:39:34:e7:cd:2a:e1:a5:d4:1d: 96:14:cb:19:a4:67:c7:7e:c5:a8:6d:2d:46:1f:7a: 59:bd:d3:14:42:9e:15:41:0b:93:8c:ef:f7:7e:50: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:71:B3:06:25:98:B8:E8:C6:A5:C8:15:8D:36:FA:B3:80:9C:2D X509v3 Authority Key Identifier: keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:11:f7:db:50:b7:96:b9:20:b1:05:75:b0:57:8c:69:64:6a: 7c:f6:77:4a:f1:83:02:01:44:86:e1:da:47:8f:95:13:8d:c4: 2c:85:8c:8f:4e:f3:05:18:55:85:1b:92:25:f3:23:8c:03:1b: 55:31:31:0d:ca:b5:40:28:6f:6b:d4:ce:e2:79:09:08:58:fb: 00:2b:c6:41:65:13:7d:03:f3:92:57:4f:47:90:6d:89:09:d0: 56:d9:63:47:8d:c4:50:0d:88:52:3b:56:33:df:36:b6:4d:21: 36:1a:71:9d:a6:e4:c2:83:87:4e:f2:66:d9:51:a1:5f:b9:68: 80:17:a0:01:bf:12:31:29:82:bb:db:3c:68:62:99:45:a6:b7: c4:00:a0:78:5b:fa:7d:ea:64:e5:7a:54:ef:ee:9e:1f:c7:41: 9a:57:ac:67:60:3e:df:53:ba:9d:bb:74:05:07:4a:c3:d9:90: 23:97:86:4e:b6:7d:3a:f8:14:29:bb:87:d0:10:43:13:e1:fe: 89:94:1e:21:55:d1:76:96:c7:9d:97:4b:8e:a6:f2:12:4d:18: 36:ad:a5:da:b9:b3:55:2f:4d:c2:17:84:30:30:50:0c:66:d3: 0d:6b:2f:be:21:d0:73:78:89:33:b2:cf:89:ae:db:71:91:06: 91:18:c2:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbTDS1Oo32mk70k09KEJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1 NGY0ODEwHhcNMjUxMjIxMTUwMDMzWhcNMjUxMjIyMTUwMDMzWjAzMTEwLwYDVQQD EyhkZGMyNzFiMzA2MjU5OGI4ZThjNmE1YzgxNThkMzZmYWIzODA5YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowm/Xl404uwqTbKj6PPGSw9YgUuV Vu/P+Tzk5gvFigq/x0XV0WnR+c2p+dZkMbxWPJWa46YEaTivz/NrY7/mAA/04EJH 5fz/HEsZnOOL2aSlCG1a5Eun5QWK9QnyPvoJnPE9CRocfUYwg0ey4UQBz+SCMjvC /+/OQM2Zf6MUBQ4NvXGNc1aNt4xR7GIqthngSbo6vFmZeqX1pMQOnwTSUZ98Ct7W 5Ow2bUuI8IhXyn21mCw+sEWrd9F07+X8/sE0+WbAOW3eRSr2MknOdSJAF2QKusVd aY85NOfNKuGl1B2WFMsZpGfHfsWobS1GH3pZvdMUQp4VQQuTjO/3flAb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3CcbMGJZi46MalyBWNNvqzgJwtMB8GA1UdIwQY MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt YzJjNjE1MTg1ODlmLzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBH321C3 lrkgsQV1sFeMaWRqfPZ3SvGDAgFEhuHaR4+VE43ELIWMj07zBRhVhRuSJfMjjAMb VTExDcq1QChva9TO4nkJCFj7ACvGQWUTfQPzkldPR5BtiQnQVtljR43EUA2IUjtW M982tk0hNhpxnabkwoOHTvJm2VGhX7logBegAb8SMSmCu9s8aGKZRaa3xACgeFv6 fepk5XpU7+6eH8dBmlesZ2A+31O6nbt0BQdKw9mQI5eGTrZ9OvgUKbuH0BBDE+H+ iZQeIVXRdpbHnZdLjqbyEk0YNq2l2rmzVS9NwheEMDBQDGbTDWsvviHQc3iJM7LP ia7bcZEGkRjCmA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:23:23 2025 by rpki-client