This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json) Hash identifier: B3n5CR0U4qIgD+57pm9jjW55rHR+rPnJSkp4Zj2LhN8= Subject key identifier: 83:E1:D3:DD:BE:0B:4F:64:7B:7E:00:47:CF:57:7F:65:A5:AF:25:48 Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Certificate serial: 019B4926E6321A1F71412C96BF5353DF5E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft Manifest number: 0772 Signing time: Tue 23 Dec 2025 03:00:44 +0000 Manifest this update: Tue 23 Dec 2025 03:00:44 +0000 Manifest next update: Wed 24 Dec 2025 03:00:44 +0000 Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: GaEkitnJ7kMhIcAIDVBInC+GXVOXE3D/PAScy4DCvmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:e6:32:1a:1f:71:41:2c:96:bf:53:53:df:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Validity Not Before: Dec 23 03:00:44 2025 GMT Not After : Dec 24 03:00:44 2025 GMT Subject: CN=83e1d3ddbe0b4f647b7e0047cf577f65a5af2548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:42:8b:cf:a7:83:4b:61:a9:ca:90:77:69: 16:d7:99:56:75:3b:f7:42:75:13:9e:12:2a:62:d0: db:26:02:03:8d:da:b8:57:4a:34:0e:48:e4:01:f3: 4e:5f:c5:96:6a:a2:19:38:37:0b:70:52:5b:9e:a9: dc:97:86:73:78:40:84:44:6d:f1:b4:75:5b:6c:4a: e8:e6:ed:95:7b:2c:ea:cd:3a:c9:b6:45:59:2f:d8: 92:13:15:6a:77:36:ff:60:88:28:89:b8:d5:9f:dc: b4:30:02:a8:40:2e:2c:66:f0:ee:47:fd:fc:4f:14: 18:94:dc:26:be:39:9d:be:33:53:7c:d6:86:3d:80: 5b:a4:e7:32:5f:54:3b:25:5d:44:01:a2:d6:de:04: 6f:40:50:c2:e8:75:13:8b:2a:85:cb:e9:f6:49:98: be:f7:df:ba:15:55:96:2e:24:de:89:ed:25:f5:a3: 0e:94:91:26:c8:0b:15:2d:69:51:57:83:46:9d:99: 0f:60:ab:44:46:02:ef:e4:e9:78:aa:da:ec:6f:73: 62:95:af:41:7e:44:ab:6c:d2:0e:3d:7f:fc:a3:c0: 8d:b8:5f:44:43:70:55:74:a3:d8:1b:f4:a5:12:30: 99:50:90:97:27:b4:a5:d4:db:5d:8d:48:3e:e5:dc: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:D3:DD:BE:0B:4F:64:7B:7E:00:47:CF:57:7F:65:A5:AF:25:48 X509v3 Authority Key Identifier: keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:23:6d:a8:4c:aa:2b:35:6c:a1:8c:95:05:fa:43:22:40:b1: 79:3a:49:27:c6:08:04:75:d9:4a:85:5a:72:f2:73:45:d2:c4: 7d:60:e2:b3:5b:cc:d7:06:15:99:13:4e:b6:28:15:ca:fd:a0: dd:ef:50:c7:51:3e:7a:9d:5f:01:04:54:b4:7b:d5:93:2c:12: dc:ce:a8:db:40:40:b5:2a:21:00:99:4a:2f:39:8f:10:82:3d: 56:93:ef:49:c3:59:7f:97:b9:26:69:7e:db:31:2b:7d:56:68: 07:37:02:3b:41:fd:23:a8:f6:46:6d:d0:ac:13:74:b0:d3:da: 05:31:63:7c:74:5b:96:15:e5:e9:70:c5:6a:0c:f6:ef:27:c4: ed:f0:78:6c:dd:ee:4c:0e:5c:9d:ca:17:ea:4e:f4:98:1b:2e: b7:ae:ad:55:3f:55:f8:c9:5d:63:68:b8:04:21:d5:b8:54:f3: be:14:aa:da:b2:b2:f9:be:a4:c0:e8:d5:fa:d2:d4:2a:fc:91: 29:60:a5:b5:37:fa:1f:dd:be:8a:f4:5d:96:23:b8:56:12:b2: a9:7c:69:6d:09:83:88:c0:6e:2c:a1:73:96:7c:a8:e7:5c:9b: 18:44:09:cf:81:d7:a1:4b:73:f8:64:c4:4a:73:e0:f6:8c:d0: 30:c5:7a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJuYyGh9xQSyWv1NT315bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi N2E4ZDAwHhcNMjUxMjIzMDMwMDQ0WhcNMjUxMjI0MDMwMDQ0WjAzMTEwLwYDVQQD Eyg4M2UxZDNkZGJlMGI0ZjY0N2I3ZTAwNDdjZjU3N2Y2NWE1YWYyNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV1Ci8+ng0thqcqQd2kW15lWdTv3 QnUTnhIqYtDbJgIDjdq4V0o0DkjkAfNOX8WWaqIZODcLcFJbnqncl4ZzeECERG3x tHVbbEro5u2VeyzqzTrJtkVZL9iSExVqdzb/YIgoibjVn9y0MAKoQC4sZvDuR/38 TxQYlNwmvjmdvjNTfNaGPYBbpOcyX1Q7JV1EAaLW3gRvQFDC6HUTiyqFy+n2SZi+ 99+6FVWWLiTeie0l9aMOlJEmyAsVLWlRV4NGnZkPYKtERgLv5Ol4qtrsb3Nila9B fkSrbNIOPX/8o8CNuF9EQ3BVdKPYG/SlEjCZUJCXJ7Sl1NtdjUg+5dxCDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPh092+C09ke34AR89Xf2WlryVIMB8GA1UdIwQY MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt YjkzMWFlNTM5ZTdkLzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSNtqEyq KzVsoYyVBfpDIkCxeTpJJ8YIBHXZSoVacvJzRdLEfWDis1vM1wYVmRNOtigVyv2g 3e9Qx1E+ep1fAQRUtHvVkywS3M6o20BAtSohAJlKLzmPEII9VpPvScNZf5e5Jml+ 2zErfVZoBzcCO0H9I6j2Rm3QrBN0sNPaBTFjfHRblhXl6XDFagz27yfE7fB4bN3u TA5cncoX6k70mBsut66tVT9V+MldY2i4BCHVuFTzvhSq2rKy+b6kwOjV+tLUKvyR KWCltTf6H92+ivRdliO4VhKyqXxpbQmDiMBuLKFzlnyo51ybGEQJz4HXoUtz+GTE SnPg9ozQMMV6fg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:26:25 2025 by rpki-client