This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft File: bsoi085FOsDAPKm2whQHcU63hCU.mft (raw, json) Hash identifier: sE777yAzuR+h85O7+klNs84hP8oczx604aDhet5eZPs= Subject key identifier: 57:B6:B7:01:25:2A:C3:AA:91:6F:DE:3D:2F:B5:CF:FC:BE:81:0E:30 Authority key identifier: 6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 Certificate issuer: /CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Certificate serial: 019B3A223795B5C61C6668AD85C4F5ADB284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft Manifest number: 3F Signing time: Sat 20 Dec 2025 05:01:19 +0000 Manifest this update: Sat 20 Dec 2025 05:01:19 +0000 Manifest next update: Sun 21 Dec 2025 05:01:19 +0000 Files and hashes: 1: Q-j_3_g0NR0emzmYR6DOVMhxXms.roa (hash: ne2pObyk47ycl3a3yBLEH+A55DHlk9VQjUbzDqVxeGM=) 2: bsoi085FOsDAPKm2whQHcU63hCU.crl (hash: AFmmvQnqMuyeLx8oy0AIl6080pr2l4jIZBGbAFB/2EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:37:95:b5:c6:1c:66:68:ad:85:c4:f5:ad:b2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eca22d3ce453ac0c03ca9b6c21407714eb78425 Validity Not Before: Dec 20 05:01:19 2025 GMT Not After : Dec 21 05:01:19 2025 GMT Subject: CN=57b6b701252ac3aa916fde3d2fb5cffcbe810e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:67:4c:bc:08:bf:f1:fa:33:d4:1e:fc:b1:da: 1d:e8:f9:12:45:14:2c:30:6b:72:65:c2:6c:8e:20: 9b:c1:2d:2e:68:cb:7f:67:2e:65:f4:43:ae:a3:47: 18:49:99:b2:a9:c6:0b:a3:9f:39:a1:d8:93:c6:63: 88:82:2a:4b:11:63:bd:e7:9b:d7:24:b5:a5:8d:7a: 7a:dc:1f:64:c8:92:f2:b6:9b:59:e3:3d:4c:e9:21: 32:de:59:d9:e4:9a:3a:27:95:27:95:5b:a8:ed:13: ab:5d:e4:55:62:9b:62:0e:d0:7e:78:ac:ff:87:5e: ff:1f:9a:8c:90:24:b2:37:07:1d:72:9b:4e:4d:3b: 01:24:aa:0c:ae:a6:49:b7:04:f2:61:38:1e:d8:59: 31:29:e6:d0:91:ac:b0:0d:86:49:d9:3e:46:69:1e: 2f:6e:27:46:b5:72:ff:fa:c6:bc:4e:aa:59:06:d9: 2a:5a:2c:b5:ce:22:6e:5f:47:0c:f8:18:67:fa:5a: b0:ea:af:91:a9:90:ad:94:01:f4:92:cf:e6:6b:24: 64:ec:33:2b:3a:25:d8:92:0e:b7:c1:37:7b:83:13: 61:c0:57:75:c4:91:4d:f0:b3:ba:f8:7b:65:69:3e: 23:1a:b3:22:5c:e8:de:42:17:86:3c:75:05:83:f3: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:B7:01:25:2A:C3:AA:91:6F:DE:3D:2F:B5:CF:FC:BE:81:0E:30 X509v3 Authority Key Identifier: keyid:6E:CA:22:D3:CE:45:3A:C0:C0:3C:A9:B6:C2:14:07:71:4E:B7:84:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsoi085FOsDAPKm2whQHcU63hCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4dff1a-5a48-48c3-9e91-809ca534fa58/1/bsoi085FOsDAPKm2whQHcU63hCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:63:67:c4:0b:26:1b:07:a7:b7:89:71:bb:df:23:48:d6:ee: 57:47:14:15:f5:c7:88:fc:b1:a0:e4:ad:87:63:34:f8:e2:76: 0b:09:de:c6:ca:72:fe:1d:e1:7b:77:db:10:ba:84:c9:a5:e0: a7:d1:df:dd:14:5d:f1:27:75:51:6c:e7:de:a8:60:72:0e:ce: 3c:58:4b:2b:7b:c9:1c:f7:0d:f6:15:a4:65:94:ce:b0:cf:cb: aa:00:27:da:af:86:3b:0c:97:c4:44:fd:93:ca:11:54:c6:16: 8b:e5:40:ee:96:65:f0:ef:e5:02:d5:f1:4b:55:43:3c:e3:0d: 8a:81:29:be:62:4b:20:4e:10:cf:95:07:42:65:60:c9:e6:c7: 73:12:79:51:05:64:87:59:f7:76:a2:d8:5c:64:4b:b3:7d:92: 83:3f:36:38:90:9e:4a:e4:f5:36:8f:14:a6:dd:24:72:6a:17: d7:bb:ec:b0:37:ce:b4:a3:3f:4c:2e:92:25:57:db:ee:3d:f4: 8c:89:f9:22:9c:64:1c:26:6a:4c:1b:4c:e5:56:ce:a6:8d:e1: fb:e4:96:4c:cb:02:d5:81:a6:72:d7:48:c4:d8:44:3d:5e:96: b7:94:f5:49:89:68:a5:b4:ec:00:d8:2b:ee:b0:47:45:38:a7: 10:85:91:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IjeVtcYcZmithcT1rbKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2EyMmQzY2U0NTNhYzBjMDNjYTliNmMyMTQwNzcxNGVi Nzg0MjUwHhcNMjUxMjIwMDUwMTE5WhcNMjUxMjIxMDUwMTE5WjAzMTEwLwYDVQQD Eyg1N2I2YjcwMTI1MmFjM2FhOTE2ZmRlM2QyZmI1Y2ZmY2JlODEwZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WdMvAi/8foz1B78sdod6PkSRRQs MGtyZcJsjiCbwS0uaMt/Zy5l9EOuo0cYSZmyqcYLo585odiTxmOIgipLEWO955vX JLWljXp63B9kyJLytptZ4z1M6SEy3lnZ5Jo6J5UnlVuo7ROrXeRVYptiDtB+eKz/ h17/H5qMkCSyNwcdcptOTTsBJKoMrqZJtwTyYTge2FkxKebQkaywDYZJ2T5GaR4v bidGtXL/+sa8TqpZBtkqWiy1ziJuX0cM+Bhn+lqw6q+RqZCtlAH0ks/mayRk7DMr OiXYkg63wTd7gxNhwFd1xJFN8LO6+HtlaT4jGrMiXOjeQheGPHUFg/OFUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe2twElKsOqkW/ePS+1z/y+gQ4wMB8GA1UdIwQY MBaAFG7KItPORTrAwDyptsIUB3FOt4QlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEt ODA5Y2E1MzRmYTU4LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS80ZGZmMWEtNWE0OC00OGMzLTllOTEtODA5Y2E1MzRmYTU4 LzEvYnNvaTA4NUZPc0RBUEttMndoUUhjVTYzaENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGNnxAsm Gwent4lxu98jSNbuV0cUFfXHiPyxoOSth2M0+OJ2Cwnexspy/h3he3fbELqEyaXg p9Hf3RRd8Sd1UWzn3qhgcg7OPFhLK3vJHPcN9hWkZZTOsM/LqgAn2q+GOwyXxET9 k8oRVMYWi+VA7pZl8O/lAtXxS1VDPOMNioEpvmJLIE4Qz5UHQmVgyebHcxJ5UQVk h1n3dqLYXGRLs32Sgz82OJCeSuT1No8Upt0kcmoX17vssDfOtKM/TC6SJVfb7j30 jIn5IpxkHCZqTBtM5VbOpo3h++SWTMsC1YGmctdIxNhEPV6Wt5T1SYlopbTsANgr 7rBHRTinEIWRvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:08 2025 by rpki-client