This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json) Hash identifier: w89Xa+q9Z7t8y+/uW+BXbvfIzcwXAjQCI08nd5Q0My8= Subject key identifier: 29:A8:D7:7C:A7:EB:CC:FF:27:D7:22:3A:E1:84:53:A6:B7:FA:C4:AC Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Certificate serial: 019BF6F557C4F09465607C5050EEB2811FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft Manifest number: 03E3 Signing time: Sun 25 Jan 2026 21:00:32 +0000 Manifest this update: Sun 25 Jan 2026 21:00:32 +0000 Manifest next update: Mon 26 Jan 2026 21:00:32 +0000 Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=) 2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: WsUg9J+DwfxaQ8orsxNKU/j+wSX9u0uahsUtpWLmni0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:57:c4:f0:94:65:60:7c:50:50:ee:b2:81:1f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Validity Not Before: Jan 25 21:00:32 2026 GMT Not After : Jan 26 21:00:32 2026 GMT Subject: CN=29a8d77ca7ebccff27d7223ae18453a6b7fac4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:4c:90:24:51:05:90:44:8f:65:1d:20:6e: 26:c6:60:01:db:91:84:65:99:59:8b:04:6f:5e:88: 3c:6c:75:1a:73:a5:27:1b:43:66:32:55:6d:58:e0: 9b:90:d8:9a:0e:59:c3:1c:c8:2d:6c:66:ee:3b:4a: c2:69:6b:1d:06:d4:3e:d1:36:38:c1:ae:02:61:16: 96:0a:62:e3:2b:c1:55:48:7f:cd:43:f2:d5:b8:cc: da:c6:fc:66:58:4f:0a:e3:d3:24:fc:17:61:ff:13: 14:8d:27:cb:22:46:23:b2:71:c0:c8:c0:84:3e:28: 70:9f:7f:19:3b:0c:e6:47:42:7d:05:05:f2:f8:54: 10:a9:53:76:ea:a0:64:07:17:9b:c8:50:96:cb:84: af:3b:1e:45:e4:00:46:cc:34:1e:07:97:fb:a4:2f: e8:89:34:a8:57:b4:a5:15:e1:ad:9b:33:74:7a:d5: dc:ad:13:3b:8f:75:a5:b7:5c:d1:3e:08:73:2e:82: 40:9c:f5:ba:54:60:5f:ba:e9:47:32:5d:08:fe:cc: 0c:55:c9:af:be:35:4d:c9:14:f4:45:20:12:27:1f: ff:72:16:07:c4:bb:98:0b:35:3b:33:28:96:e9:f0: 83:40:97:1a:d6:b7:77:84:fd:a6:8b:b0:77:65:97: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A8:D7:7C:A7:EB:CC:FF:27:D7:22:3A:E1:84:53:A6:B7:FA:C4:AC X509v3 Authority Key Identifier: keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cb:1a:4b:ea:6e:83:9c:0d:f1:bb:70:8b:1e:f0:3f:3a:7c: 43:7a:4c:92:06:49:ff:1f:3b:ed:59:8e:f9:ea:2f:b9:90:e9: d3:c2:16:92:da:ff:3e:43:85:80:bb:00:4a:eb:0d:df:74:a4: 29:e6:c0:75:4e:f4:7b:10:4a:53:0a:45:a7:b6:4b:1a:ed:cd: 9b:c8:bd:31:54:c2:4b:ec:d7:61:e0:ff:af:80:5d:11:3b:1c: ab:07:6c:73:b6:b7:77:0a:15:b7:a6:2d:3f:77:01:ab:71:7e: 81:02:63:4e:56:a5:33:2e:08:b9:92:ca:a7:9b:a4:5c:b2:e5: 7a:1b:2d:20:8a:6e:d2:8e:22:d3:7c:90:2b:44:f7:a0:89:03: 34:bd:9e:19:c8:29:5c:0b:38:11:d7:e6:81:8f:36:6b:55:b9: ab:4c:34:6f:e7:0c:6e:b9:da:b3:f6:32:1c:5e:86:87:9b:38: f8:54:af:5a:70:55:75:51:b9:e5:c3:10:2a:9e:5e:2d:b9:fd: f8:fc:d4:b4:b7:7d:f7:f8:2f:6f:c2:1b:32:bf:49:0c:47:12: 6c:2c:12:f6:a0:9c:8c:56:92:57:5c:1c:f3:f2:d0:f9:5d:67: 23:6d:eb:ac:86:3f:c3:ed:7e:7e:2f:5f:a3:27:50:bf:68:98: d0:f6:da:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29VfE8JRlYHxQUO6ygR+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3 YWFlYzAwHhcNMjYwMTI1MjEwMDMyWhcNMjYwMTI2MjEwMDMyWjAzMTEwLwYDVQQD EygyOWE4ZDc3Y2E3ZWJjY2ZmMjdkNzIyM2FlMTg0NTNhNmI3ZmFjNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2pMkCRRBZBEj2UdIG4mxmAB25GE ZZlZiwRvXog8bHUac6UnG0NmMlVtWOCbkNiaDlnDHMgtbGbuO0rCaWsdBtQ+0TY4 wa4CYRaWCmLjK8FVSH/NQ/LVuMzaxvxmWE8K49Mk/Bdh/xMUjSfLIkYjsnHAyMCE Pihwn38ZOwzmR0J9BQXy+FQQqVN26qBkBxebyFCWy4SvOx5F5ABGzDQeB5f7pC/o iTSoV7SlFeGtmzN0etXcrRM7j3Wlt1zRPghzLoJAnPW6VGBfuulHMl0I/swMVcmv vjVNyRT0RSASJx//chYHxLuYCzU7MyiW6fCDQJca1rd3hP2mi7B3ZZcN9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmo13yn68z/J9ciOuGEU6a3+sSsMB8GA1UdIwQY MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjssaS+pu g5wN8btwix7wPzp8Q3pMkgZJ/x877VmO+eovuZDp08IWktr/PkOFgLsASusN33Sk KebAdU70exBKUwpFp7ZLGu3Nm8i9MVTCS+zXYeD/r4BdETscqwdsc7a3dwoVt6Yt P3cBq3F+gQJjTlalMy4IuZLKp5ukXLLlehstIIpu0o4i03yQK0T3oIkDNL2eGcgp XAs4EdfmgY82a1W5q0w0b+cMbrnas/YyHF6Gh5s4+FSvWnBVdVG55cMQKp5eLbn9 +PzUtLd99/gvb8IbMr9JDEcSbCwS9qCcjFaSV1wc8/LQ+V1nI23rrIY/w+1+fi9f oydQv2iY0Pbaqw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:21 2026 by rpki-client