This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json) Hash identifier: pOIOkbaQiJVLXExiQpfn/E3jRkFKw9LaGpDZRXBfmfw= Subject key identifier: FA:A4:D8:3D:BB:EF:F8:15:9E:27:42:5F:56:67:45:D3:C0:D6:E1:30 Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Certificate serial: 019AF23FA70BF02D70BF2A4C7462B0666F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft Manifest number: 0745 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: o13WPXCx8RkD86vYgEVh1WESG0y7nekMrTqLPmeUtks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a7:0b:f0:2d:70:bf:2a:4c:74:62:b0:66:6f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=faa4d83dbbeff8159e27425f566745d3c0d6e130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:51:1f:5b:3a:a1:f4:af:dd:50:8c:0e:b2:a0: bf:1d:86:94:58:69:c7:d1:06:53:47:d5:28:ad:bf: 7b:9c:61:60:f2:ff:86:12:64:24:9d:36:5f:53:77: 83:83:9a:17:77:a1:a5:e7:54:31:e9:11:b7:4f:45: a1:43:2a:20:13:86:66:2a:36:d3:20:39:35:bb:87: c0:9e:0d:29:d4:46:e8:83:13:b2:c6:9b:60:57:5a: c0:2b:e2:49:9d:7e:b8:d7:34:e6:9a:2f:c7:68:85: 1d:49:36:a0:bd:ab:7a:96:44:fc:39:ed:d2:58:5b: ad:e5:92:ac:20:c8:ac:9a:e0:2f:ee:13:59:35:d7: b7:d5:bb:30:a3:a5:f3:5e:95:14:60:71:42:e3:a7: a4:da:e6:f3:f4:a4:2d:37:12:f1:fe:6b:de:be:b1: 07:f4:54:89:15:08:7b:e7:bf:5e:44:f3:18:94:bf: 96:8b:11:42:7a:8a:e7:4d:bf:be:2d:8f:69:a7:a3: c1:2f:5d:60:c4:a3:6a:4e:a2:50:0e:6e:86:b2:9e: 2e:5d:77:1b:7d:a2:f6:7f:e9:74:85:d6:77:3b:3e: 19:fc:9c:ae:01:c5:be:d0:12:4f:a1:3c:bd:a0:e7: 59:49:de:2d:17:bb:dd:bd:d4:8c:b3:62:18:5e:43: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A4:D8:3D:BB:EF:F8:15:9E:27:42:5F:56:67:45:D3:C0:D6:E1:30 X509v3 Authority Key Identifier: keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:8a:e3:92:8c:a8:57:55:46:d6:78:43:e3:72:98:86:46:b1: 7b:be:a9:62:42:89:80:f5:04:ce:34:ad:7a:5f:35:3d:46:ac: ca:85:96:8c:74:94:21:1b:6d:b5:d1:2d:6c:ca:eb:b0:27:67: 1a:65:b1:0f:6a:ba:f0:ad:66:f9:55:a2:d8:67:eb:65:d4:c4: 8c:86:26:d7:e8:0f:10:1d:c3:41:4f:04:44:b6:34:a6:4f:ac: 8f:fd:a5:7f:fa:ce:12:62:fd:14:18:1f:99:28:57:5f:47:bc: 76:8f:67:86:68:73:62:ac:47:69:72:6d:bf:c2:a8:3c:a2:76: 06:15:b6:dc:89:51:05:83:62:07:87:97:28:f5:24:24:17:af: 3b:a8:cd:33:fd:4a:d3:21:8b:59:63:7c:c8:b0:c6:2d:11:a8: 77:e5:2f:07:d3:41:90:10:a9:04:89:cb:89:8f:38:8e:7d:e5: 20:d0:02:72:bf:02:65:3d:f2:63:64:60:e8:12:43:29:a1:1a: a2:dc:a7:a9:55:ec:22:d1:e9:9a:63:71:a9:1f:bb:46:c5:4d: 8e:f9:88:da:82:0d:52:08:0e:f4:44:70:33:83:7d:c3:88:4c: 4b:ad:19:2d:a2:54:e4:04:2e:3c:be:71:eb:bb:39:cc:45:4c: 3c:7b:e4:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6cL8C1wvypMdGKwZm9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi N2E4ZDAwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhmYWE0ZDgzZGJiZWZmODE1OWUyNzQyNWY1NjY3NDVkM2MwZDZlMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FEfWzqh9K/dUIwOsqC/HYaUWGnH 0QZTR9Uorb97nGFg8v+GEmQknTZfU3eDg5oXd6Gl51Qx6RG3T0WhQyogE4ZmKjbT IDk1u4fAng0p1EbogxOyxptgV1rAK+JJnX641zTmmi/HaIUdSTagvat6lkT8Oe3S WFut5ZKsIMismuAv7hNZNde31bswo6XzXpUUYHFC46ek2ubz9KQtNxLx/mvevrEH 9FSJFQh7579eRPMYlL+WixFCeornTb++LY9pp6PBL11gxKNqTqJQDm6Gsp4uXXcb faL2f+l0hdZ3Oz4Z/JyuAcW+0BJPoTy9oOdZSd4tF7vdvdSMs2IYXkPo1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqk2D277/gVnidCX1ZnRdPA1uEwMB8GA1UdIwQY MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt YjkzMWFlNTM5ZTdkLzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4rjkoyo V1VG1nhD43KYhkaxe76pYkKJgPUEzjStel81PUasyoWWjHSUIRtttdEtbMrrsCdn GmWxD2q68K1m+VWi2GfrZdTEjIYm1+gPEB3DQU8ERLY0pk+sj/2lf/rOEmL9FBgf mShXX0e8do9nhmhzYqxHaXJtv8KoPKJ2BhW23IlRBYNiB4eXKPUkJBevO6jNM/1K 0yGLWWN8yLDGLRGod+UvB9NBkBCpBInLiY84jn3lINACcr8CZT3yY2Rg6BJDKaEa otynqVXsItHpmmNxqR+7RsVNjvmI2oINUggO9ERwM4N9w4hMS60ZLaJU5AQuPL5x 67s5zEVMPHvkPg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:40:00 2025 by rpki-client