This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json) Hash identifier: 68nesWXafTgP0/ktpeJx6qRKNEka1nd4Jzg6YTVsMNg= Subject key identifier: 7F:10:4B:94:00:50:BA:CD:BF:CE:F1:E1:16:5E:46:3E:CB:1B:1A:14 Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Certificate serial: 019BF1CF6DA8249FCDD36EAD01055A22F912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft Manifest number: 07CA Signing time: Sat 24 Jan 2026 21:01:01 +0000 Manifest this update: Sat 24 Jan 2026 21:01:01 +0000 Manifest next update: Sun 25 Jan 2026 21:01:01 +0000 Files and hashes: 1: WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa (hash: Ig8sscra5dIX6tBApNExCSn2CMXG+xOTaFttzoauVgc=) 2: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: wAyKTfGvcMyNwHGQ5tTILwG8rlXMN6FTXu1oc2qlR74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:6d:a8:24:9f:cd:d3:6e:ad:01:05:5a:22:f9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0 Validity Not Before: Jan 24 21:01:01 2026 GMT Not After : Jan 25 21:01:01 2026 GMT Subject: CN=7f104b940050bacdbfcef1e1165e463ecb1b1a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:cb:1b:02:b5:08:12:1b:73:43:c0:7b:14: 85:c9:71:c9:46:24:d2:b7:1b:bd:38:a2:42:61:ce: cc:d6:c5:1a:2a:b2:7b:c9:ec:52:f3:43:c0:03:4b: f8:48:43:03:e7:74:74:7d:c1:7f:27:ff:58:c9:4e: 73:82:5e:02:1f:ea:bf:da:49:75:df:db:d2:46:73: 3f:46:d6:e4:95:24:5f:43:33:58:05:eb:80:16:08: 93:56:14:de:50:65:b5:fb:85:e6:bd:b7:fb:4c:df: 49:0e:3e:0f:ed:6c:57:fb:80:50:31:84:11:78:34: b8:78:15:99:51:14:8a:bf:20:f0:6b:9f:83:24:0e: 36:5f:4b:7f:b9:64:19:77:9d:d8:a8:cb:c7:b8:50: f4:ad:6d:d4:5a:e7:9f:d0:7d:06:77:98:7c:f0:4a: c6:ea:82:13:15:5f:06:a5:16:13:9d:c4:24:53:69: 96:b1:54:0e:22:50:b5:78:59:cb:ba:02:47:85:5b: 97:38:af:10:20:0b:b5:e3:07:dd:5b:c6:03:53:ca: 77:58:d2:8b:1b:ce:8c:8f:76:b3:ca:5f:78:15:cc: 3e:d6:09:c1:42:4e:7a:4a:c3:d6:a6:c2:a6:93:eb: b8:7d:97:9a:f0:ac:67:3b:15:4f:97:0e:fe:7d:05: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:10:4B:94:00:50:BA:CD:BF:CE:F1:E1:16:5E:46:3E:CB:1B:1A:14 X509v3 Authority Key Identifier: keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:cc:0e:de:81:b5:bd:a7:70:cc:7e:e5:5b:c8:5c:42:77:c3: 77:a1:df:2c:fd:b4:0f:ca:5b:3d:c9:ee:3b:4d:c7:c5:18:ca: d4:71:c3:c8:b5:2a:84:ae:21:a6:0d:9f:58:89:75:ab:ac:81: d3:60:fe:f6:f9:32:9a:bb:39:90:2b:43:b7:04:c7:10:ad:9a: 02:d8:23:66:ad:bc:b0:c4:de:ef:dd:f3:8b:f6:bb:f8:ea:db: e8:b8:41:3b:83:0b:e1:45:35:3d:ed:bd:09:d3:d1:44:07:df: e1:c1:3d:80:ce:56:c8:3b:e6:09:4b:14:18:6d:5e:e7:30:9a: 3e:21:0b:bf:32:1c:ed:5e:58:59:5b:72:a3:2c:3f:42:d7:5b: d1:05:d5:27:a7:2c:2d:60:4e:2b:7e:a1:15:0e:6b:0a:78:1e: 4f:98:25:bf:c7:bb:50:33:16:b2:db:25:e1:74:5e:e1:3e:6c: f6:dc:54:58:ae:24:81:64:bd:d4:c3:07:5d:f3:ad:d1:a3:51: 35:4c:cd:a8:57:49:b3:02:a9:ae:63:f4:7a:14:d5:57:d6:05: 62:ec:8e:93:f6:da:a4:95:c0:6d:a2:bc:e5:d2:81:3c:1d:11: a4:3c:86:4e:95:64:e1:b5:21:5a:b7:09:3f:66:18:8c:a4:4f: 0e:a6:6a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxz22oJJ/N026tAQVaIvkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi N2E4ZDAwHhcNMjYwMTI0MjEwMTAxWhcNMjYwMTI1MjEwMTAxWjAzMTEwLwYDVQQD Eyg3ZjEwNGI5NDAwNTBiYWNkYmZjZWYxZTExNjVlNDYzZWNiMWIxYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf7LGwK1CBIbc0PAexSFyXHJRiTS txu9OKJCYc7M1sUaKrJ7yexS80PAA0v4SEMD53R0fcF/J/9YyU5zgl4CH+q/2kl1 39vSRnM/RtbklSRfQzNYBeuAFgiTVhTeUGW1+4Xmvbf7TN9JDj4P7WxX+4BQMYQR eDS4eBWZURSKvyDwa5+DJA42X0t/uWQZd53YqMvHuFD0rW3UWuef0H0Gd5h88ErG 6oITFV8GpRYTncQkU2mWsVQOIlC1eFnLugJHhVuXOK8QIAu14wfdW8YDU8p3WNKL G86Mj3azyl94Fcw+1gnBQk56SsPWpsKmk+u4fZea8KxnOxVPlw7+fQW3JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8QS5QAULrNv87x4RZeRj7LGxoUMB8GA1UdIwQY MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt YjkzMWFlNTM5ZTdkLzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2cwO3oG1 vadwzH7lW8hcQnfDd6HfLP20D8pbPcnuO03HxRjK1HHDyLUqhK4hpg2fWIl1q6yB 02D+9vkymrs5kCtDtwTHEK2aAtgjZq28sMTe793zi/a7+Orb6LhBO4ML4UU1Pe29 CdPRRAff4cE9gM5WyDvmCUsUGG1e5zCaPiELvzIc7V5YWVtyoyw/Qtdb0QXVJ6cs LWBOK36hFQ5rCngeT5glv8e7UDMWstsl4XRe4T5s9txUWK4kgWS91MMHXfOt0aNR NUzNqFdJswKprmP0ehTVV9YFYuyOk/bapJXAbaK85dKBPB0RpDyGTpVk4bUhWrcJ P2YYjKRPDqZqeg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:43 2026 by rpki-client