This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft File: bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json) Hash identifier: 9eMY6yTVWJaMCuufJT2QagvWPywRIy5AqIrjTW7SGfU= Subject key identifier: B2:A8:95:0C:F6:56:B7:E0:3E:8F:C1:93:B5:6B:98:10:5B:8A:D2:F0 Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Certificate serial: 019B52CF0849C368A68288C8970B384608FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 00:00:58 +0000 Manifest this update: Thu 25 Dec 2025 00:00:58 +0000 Manifest next update: Fri 26 Dec 2025 00:00:58 +0000 Files and hashes: 1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=) 2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: nqS9r7ozRME18i/mOw3nHIdx0nHiZaF1pFAF3hiwA+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:08:49:c3:68:a6:82:88:c8:97:0b:38:46:08:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Validity Not Before: Dec 25 00:00:58 2025 GMT Not After : Dec 26 00:00:58 2025 GMT Subject: CN=b2a8950cf656b7e03e8fc193b56b98105b8ad2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:1e:a5:fe:cb:66:d0:23:0a:a9:62:5b:21: 85:83:07:c4:71:1f:90:ce:9f:28:13:48:65:f6:e3: 36:06:7b:02:42:a4:2b:bc:5b:0d:11:71:77:93:fd: 27:c4:bf:51:34:41:08:ee:ab:2d:a8:8a:56:a7:78: f9:62:42:83:b6:a2:5f:c4:42:10:d3:82:6f:06:c2: a1:2c:e8:4a:71:d7:37:14:2d:dd:28:a8:a1:db:e0: 25:19:4b:c5:cf:d8:70:3d:d6:39:03:e9:7c:a0:53: 94:e0:b3:81:e6:ce:c7:b5:68:3d:1a:2d:fa:2d:a7: 61:87:9c:c3:18:66:4c:00:8b:bc:e3:f0:15:ee:2c: 69:d3:d8:3c:78:fb:65:90:22:dc:d6:d4:67:6a:dc: 63:7c:c4:7c:17:a2:f9:82:68:7b:57:74:d3:17:36: dd:c3:e9:b4:b0:17:38:f8:e4:ce:4b:df:33:72:42: ea:1b:17:a8:bf:d9:00:69:b4:c1:a4:b7:48:bb:32: cd:51:1d:bd:7a:4d:5b:22:68:ab:f9:41:73:f7:5c: d0:72:4b:fe:cb:03:9a:19:9a:7d:9d:3a:0e:06:28: c7:b0:2a:99:fa:95:8e:33:ba:b1:3f:b9:64:03:00: 8f:da:77:d1:0c:c7:b4:79:e4:10:38:ae:5a:5a:6f: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A8:95:0C:F6:56:B7:E0:3E:8F:C1:93:B5:6B:98:10:5B:8A:D2:F0 X509v3 Authority Key Identifier: keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0f:54:96:c3:f2:58:ba:96:e3:cb:91:05:68:84:dc:47:b8: 00:68:65:98:4f:a0:be:a8:dd:d4:bd:d6:ac:b1:dd:e4:39:d2: a3:2f:7d:20:43:4a:c3:4f:b8:32:7d:5a:62:0f:51:e3:fe:3f: 75:0f:4b:4d:53:29:08:aa:c7:00:20:24:5f:9f:32:be:3a:89: 3e:ad:d6:98:48:c0:dd:92:9a:38:f5:a3:0d:ab:62:1d:60:d8: ca:3a:45:cc:84:a9:c0:5f:c0:c9:35:9f:b8:7b:f0:97:3a:77: 12:08:14:43:9b:8a:97:a9:12:b9:ac:f0:fc:be:46:0b:b3:d8: 6a:5a:8d:44:b5:ac:d8:9e:28:b0:62:44:43:36:75:62:2b:46: 3b:51:ed:a9:8f:38:3a:2b:14:a8:60:0f:02:7e:d9:4b:69:54: 66:13:b5:d2:42:b2:4f:88:f5:a7:46:4c:9d:8d:40:0c:94:71: e5:4d:58:33:54:f3:66:77:cc:15:64:7d:9c:a8:b3:5e:a9:e0: 8c:fa:95:f4:8e:3b:46:bc:17:e7:ff:29:64:82:57:e0:77:e2: 26:49:97:2b:2d:b1:b5:27:28:e3:b6:73:94:8b:a0:a1:77:ac: c7:ff:ec:e9:e0:49:98:d6:62:27:0b:e1:6e:16:33:3f:26:d5: 48:86:04:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzwhJw2imgojIlws4Rgj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1 NGY0ODEwHhcNMjUxMjI1MDAwMDU4WhcNMjUxMjI2MDAwMDU4WjAzMTEwLwYDVQQD EyhiMmE4OTUwY2Y2NTZiN2UwM2U4ZmMxOTNiNTZiOTgxMDViOGFkMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj4epf7LZtAjCqliWyGFgwfEcR+Q zp8oE0hl9uM2BnsCQqQrvFsNEXF3k/0nxL9RNEEI7qstqIpWp3j5YkKDtqJfxEIQ 04JvBsKhLOhKcdc3FC3dKKih2+AlGUvFz9hwPdY5A+l8oFOU4LOB5s7HtWg9Gi36 Ladhh5zDGGZMAIu84/AV7ixp09g8ePtlkCLc1tRnatxjfMR8F6L5gmh7V3TTFzbd w+m0sBc4+OTOS98zckLqGxeov9kAabTBpLdIuzLNUR29ek1bImir+UFz91zQckv+ ywOaGZp9nToOBijHsCqZ+pWOM7qxP7lkAwCP2nfRDMe0eeQQOK5aWm9NJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKolQz2VrfgPo/Bk7VrmBBbitLwMB8GA1UdIwQY MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt YzJjNjE1MTg1ODlmLzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ9UlsPy WLqW48uRBWiE3Ee4AGhlmE+gvqjd1L3WrLHd5DnSoy99IENKw0+4Mn1aYg9R4/4/ dQ9LTVMpCKrHACAkX58yvjqJPq3WmEjA3ZKaOPWjDatiHWDYyjpFzISpwF/AyTWf uHvwlzp3EggUQ5uKl6kSuazw/L5GC7PYalqNRLWs2J4osGJEQzZ1YitGO1HtqY84 OisUqGAPAn7ZS2lUZhO10kKyT4j1p0ZMnY1ADJRx5U1YM1TzZnfMFWR9nKizXqng jPqV9I47RrwX5/8pZIJX4HfiJkmXKy2xtSco47ZzlIugoXesx//s6eBJmNZiJwvh bhYzPybVSIYEEg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:28 2025 by rpki-client