This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json) Hash identifier: NA4Pj56jT3u8+lBfUbFBiJgp5JNU+I1wgf2yezBmn1g= Subject key identifier: 0F:50:5B:7D:EF:96:3D:95:F4:A4:33:D5:E0:33:63:8E:C4:76:F2:86 Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Certificate serial: 019B5A886B1BCC9860072AF79883B8292949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft Manifest number: 077B Signing time: Fri 26 Dec 2025 12:00:48 +0000 Manifest this update: Fri 26 Dec 2025 12:00:48 +0000 Manifest next update: Sat 27 Dec 2025 12:00:48 +0000 Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: 6/y+xrgFdcNdDptc503UH3FJHhQ/DDCqJ7+i9C6B8Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:6b:1b:cc:98:60:07:2a:f7:98:83:b8:29:29:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Validity Not Before: Dec 26 12:00:48 2025 GMT Not After : Dec 27 12:00:48 2025 GMT Subject: CN=0f505b7def963d95f4a433d5e033638ec476f286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:0c:5e:00:a8:f0:9b:96:5b:22:43:f0:3a: 3b:70:38:16:d9:ad:58:22:1e:ec:bf:d1:0d:a1:6a: e1:39:cc:ce:12:7c:3e:d4:63:5a:61:24:50:e4:96: 81:cf:d2:1b:58:31:8c:7b:00:c2:0b:57:95:52:9f: 90:83:6e:ba:d7:7f:66:af:a7:7d:73:49:2a:27:3e: a4:08:0c:ba:32:f3:9d:b2:b2:ec:e0:e9:37:02:d6: 15:9c:d2:ef:bf:ed:d1:ad:fb:4e:03:2b:7b:22:fe: 8f:c8:c7:99:31:5d:43:82:2f:d5:61:07:c4:de:ba: c1:7f:69:e3:7d:0a:61:df:ba:04:0a:8a:8b:e6:aa: cb:85:21:95:54:a1:f5:47:d0:94:5c:17:a0:9a:b7: fe:6b:75:f2:d5:b5:1d:a2:ed:5f:4a:74:ce:34:9f: 51:38:d4:40:f0:7d:c8:a2:c7:0f:8a:49:0b:b5:bb: b0:57:b5:61:aa:7c:83:ff:b7:05:27:00:f4:a7:6b: e7:c0:ed:58:a7:51:c6:c1:c3:53:b7:73:02:a6:58: 26:d9:79:9a:7f:5d:f7:29:b8:b1:c8:54:13:27:38: 11:b4:24:89:ff:66:4b:f9:fd:f3:43:76:a4:e3:84: 1b:bf:68:74:fa:e9:55:cd:8e:1b:0a:79:f0:a4:69: c0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:50:5B:7D:EF:96:3D:95:F4:A4:33:D5:E0:33:63:8E:C4:76:F2:86 X509v3 Authority Key Identifier: keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:74:8c:cc:99:4e:20:e0:d4:93:14:fa:73:8b:1b:a8:b4:3b: 2d:3c:17:cf:50:f3:c6:04:03:af:3d:26:64:0b:3f:7a:88:fd: ce:4d:28:fd:0f:42:0c:38:25:47:e2:f0:60:81:7a:b4:3f:54: d5:b0:09:e5:5c:0f:74:b5:1a:48:45:e1:53:be:26:d8:91:78: 8f:72:96:ac:e1:d2:49:6f:c2:7b:9c:f4:d7:65:0b:93:b9:d3: 19:fc:df:12:93:d2:68:99:20:8b:32:af:c3:a9:59:2b:2c:1b: 94:3c:d8:43:77:d2:9f:b0:b9:ba:0a:91:87:73:63:cb:44:d3: 2a:26:f4:57:64:76:19:17:27:4c:13:42:54:c9:9a:dd:57:c5: 03:f6:95:ff:95:24:1d:39:8f:1e:57:9c:06:98:e3:d9:50:89: f4:11:8f:6a:d4:3a:92:7d:31:f1:e9:ec:e6:56:b8:a6:77:b9: c2:6d:7f:fc:4d:95:6f:a8:7d:bc:b4:80:54:70:45:16:3f:02: ae:05:3a:ec:ce:34:79:c4:07:fb:7d:51:d5:9f:57:2b:ec:b1: a5:bc:7a:12:4b:40:0b:aa:07:e3:2f:8d:fb:9e:fc:d1:e3:f3: c7:84:76:c5:75:b9:52:d3:3e:c4:c5:74:57:c1:61:13:f1:57: d4:01:da:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGsbzJhgByr3mIO4KSlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi N2E4ZDAwHhcNMjUxMjI2MTIwMDQ4WhcNMjUxMjI3MTIwMDQ4WjAzMTEwLwYDVQQD EygwZjUwNWI3ZGVmOTYzZDk1ZjRhNDMzZDVlMDMzNjM4ZWM0NzZmMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JEMXgCo8JuWWyJD8Do7cDgW2a1Y Ih7sv9ENoWrhOczOEnw+1GNaYSRQ5JaBz9IbWDGMewDCC1eVUp+Qg266139mr6d9 c0kqJz6kCAy6MvOdsrLs4Ok3AtYVnNLvv+3RrftOAyt7Iv6PyMeZMV1Dgi/VYQfE 3rrBf2njfQph37oECoqL5qrLhSGVVKH1R9CUXBegmrf+a3Xy1bUdou1fSnTONJ9R ONRA8H3IoscPikkLtbuwV7VhqnyD/7cFJwD0p2vnwO1Yp1HGwcNTt3MCplgm2Xma f133KbixyFQTJzgRtCSJ/2ZL+f3zQ3ak44Qbv2h0+ulVzY4bCnnwpGnAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9QW33vlj2V9KQz1eAzY47EdvKGMB8GA1UdIwQY MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt YjkzMWFlNTM5ZTdkLzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHSMzJlO IODUkxT6c4sbqLQ7LTwXz1DzxgQDrz0mZAs/eoj9zk0o/Q9CDDglR+LwYIF6tD9U 1bAJ5VwPdLUaSEXhU74m2JF4j3KWrOHSSW/Ce5z012ULk7nTGfzfEpPSaJkgizKv w6lZKywblDzYQ3fSn7C5ugqRh3Njy0TTKib0V2R2GRcnTBNCVMma3VfFA/aV/5Uk HTmPHlecBpjj2VCJ9BGPatQ6kn0x8ens5la4pne5wm1//E2Vb6h9vLSAVHBFFj8C rgU67M40ecQH+31R1Z9XK+yxpbx6EktAC6oH4y+N+5780ePzx4R2xXW5UtM+xMV0 V8FhE/FX1AHaxA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client