This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft File: bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json) Hash identifier: X1h1JRtelq9P2tmGUBGJluW2ZoNw28k5gRStPxpzt3k= Subject key identifier: 5B:38:80:04:7F:3E:BC:75:1C:38:EC:9C:A1:91:45:25:6B:34:96:EA Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Certificate serial: 019BABA4BC341E97580CC57C087EA9B6BDCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 06:00:58 +0000 Manifest this update: Sun 11 Jan 2026 06:00:58 +0000 Manifest next update: Mon 12 Jan 2026 06:00:58 +0000 Files and hashes: 1: FkBYBYI1w_8sdm78v5aJB0nOcFI.roa (hash: Fw6MQHjHYJDNyao+2q2Z1XBGBba4KG6qJIVCOw9sOiM=) 2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: 5OaaZw1FLRJqygPCqVbPdRmHNixK0Zy6YocoIEhKefk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:a4:bc:34:1e:97:58:0c:c5:7c:08:7e:a9:b6:bd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Validity Not Before: Jan 11 06:00:58 2026 GMT Not After : Jan 12 06:00:58 2026 GMT Subject: CN=5b3880047f3ebc751c38ec9ca19145256b3496ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d7:0b:ce:ed:99:5b:d6:d8:37:03:d5:2d:86: 30:e8:91:7e:c7:8f:3f:13:a4:eb:85:09:9b:0c:65: 42:81:bc:b0:80:6d:10:79:b6:f4:d9:f3:53:80:c4: 95:cf:18:19:14:68:a0:40:48:69:fd:84:95:3a:cc: 01:c5:d6:71:ed:d0:67:8a:fd:8b:cb:31:a9:50:0a: 40:af:9b:a5:b9:b5:37:39:d1:03:51:a0:33:fc:ee: 8d:ac:de:4d:3d:d3:f0:f0:4e:f1:eb:94:c5:18:a6: 3f:7e:62:0f:03:f3:c6:57:a9:d3:03:58:aa:43:01: ff:a9:f3:36:58:50:e0:04:28:bd:92:45:b0:2d:3b: 9e:28:3d:b0:79:a4:bf:75:12:0b:2a:7a:63:09:45: 25:e8:b7:04:72:9b:a6:70:a4:f2:b7:f2:82:be:4f: 21:2b:f3:f8:aa:65:5e:ca:18:72:86:91:8b:6e:5b: 5d:b0:72:6e:b7:55:e9:23:2d:0f:a2:b7:b1:22:d4: f6:9d:d1:9d:ef:61:8a:29:89:b6:ef:df:1e:05:54: aa:fe:31:10:6c:33:ef:0a:ff:6e:fd:e3:03:2e:bd: 28:a0:3a:ea:34:35:11:f4:53:9c:e1:5d:aa:4d:0a: 62:81:54:48:71:a1:ae:c2:d9:93:e7:90:e1:bb:64: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:80:04:7F:3E:BC:75:1C:38:EC:9C:A1:91:45:25:6B:34:96:EA X509v3 Authority Key Identifier: keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e2:4a:d3:bf:a2:a9:a1:11:11:8e:7e:d5:6a:c1:20:84:91: e1:ca:7a:cc:8c:9d:71:ba:3b:55:73:5b:03:b4:7d:98:9c:34: d7:7b:e6:75:2f:52:f2:04:70:cb:8d:56:48:cc:d1:2f:74:cb: d6:d8:7e:87:05:bc:3f:62:3f:de:f3:bd:31:37:e8:5f:d8:42: 94:8a:c8:c4:c4:cc:e0:77:a9:ca:12:f9:44:4e:07:75:dd:ea: 49:d8:79:79:64:8e:7a:2a:36:89:89:53:3b:69:43:45:d6:2d: 02:d3:bf:86:cf:e0:e9:bc:ec:a3:c7:27:01:6c:a4:32:f8:96: a7:e6:c9:45:53:d2:47:a5:50:b7:50:16:91:8a:aa:5a:a7:48: 2d:94:89:00:53:c9:5a:52:7e:f8:b9:0b:8b:85:bb:d0:1f:b1: b1:71:af:fb:d2:3f:79:57:b3:ba:b9:ed:9b:55:c8:ff:76:09: 02:db:b1:05:24:b0:fd:c7:7e:8d:5b:20:78:30:74:d3:56:3e: 8d:89:d4:b4:4c:52:38:9a:f3:d9:75:ab:31:30:e5:77:43:f2: 7e:e5:db:89:3f:ff:a3:4f:7c:f9:72:e7:cb:73:01:1f:e4:88: c6:1e:49:09:66:39:7f:3f:1e:e4:ef:b3:74:94:7a:81:df:9f: 92:8a:09:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurpLw0HpdYDMV8CH6ptr3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1 NGY0ODEwHhcNMjYwMTExMDYwMDU4WhcNMjYwMTEyMDYwMDU4WjAzMTEwLwYDVQQD Eyg1YjM4ODAwNDdmM2ViYzc1MWMzOGVjOWNhMTkxNDUyNTZiMzQ5NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tcLzu2ZW9bYNwPVLYYw6JF+x48/ E6TrhQmbDGVCgbywgG0Qebb02fNTgMSVzxgZFGigQEhp/YSVOswBxdZx7dBniv2L yzGpUApAr5ulubU3OdEDUaAz/O6NrN5NPdPw8E7x65TFGKY/fmIPA/PGV6nTA1iq QwH/qfM2WFDgBCi9kkWwLTueKD2weaS/dRILKnpjCUUl6LcEcpumcKTyt/KCvk8h K/P4qmVeyhhyhpGLbltdsHJut1XpIy0PorexItT2ndGd72GKKYm2798eBVSq/jEQ bDPvCv9u/eMDLr0ooDrqNDUR9FOc4V2qTQpigVRIcaGuwtmT55Dhu2RY9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs4gAR/Prx1HDjsnKGRRSVrNJbqMB8GA1UdIwQY MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt YzJjNjE1MTg1ODlmLzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+JK07+i qaEREY5+1WrBIISR4cp6zIydcbo7VXNbA7R9mJw013vmdS9S8gRwy41WSMzRL3TL 1th+hwW8P2I/3vO9MTfoX9hClIrIxMTM4HepyhL5RE4Hdd3qSdh5eWSOeio2iYlT O2lDRdYtAtO/hs/g6bzso8cnAWykMviWp+bJRVPSR6VQt1AWkYqqWqdILZSJAFPJ WlJ++LkLi4W70B+xsXGv+9I/eVezurntm1XI/3YJAtuxBSSw/cd+jVsgeDB001Y+ jYnUtExSOJrz2XWrMTDld0PyfuXbiT//o098+XLny3MBH+SIxh5JCWY5fz8e5O+z dJR6gd+fkooJZA== -----END CERTIFICATE-----Generated at Sun Jan 11 14:43:40 2026 by rpki-client