This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft File: vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json) Hash identifier: 0ELEpqjbMIKbq4kaKofegoNi7bmF7crUv6leeHMMqdU= Subject key identifier: D0:85:A8:AB:A2:CD:D2:08:41:F2:BF:8F:F2:19:BF:7C:5D:2E:BE:1A Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 Certificate issuer: /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Certificate serial: 019C4246B9C83132A129057D155A6AF7152F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft Manifest number: 040A Signing time: Mon 09 Feb 2026 12:00:57 +0000 Manifest this update: Mon 09 Feb 2026 12:00:57 +0000 Manifest next update: Tue 10 Feb 2026 12:00:57 +0000 Files and hashes: 1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=) 2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: iP9P89dP7gi7Q1VmFrK0kZXPpDOryvWgFfqezqhkjGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b9:c8:31:32:a1:29:05:7d:15:5a:6a:f7:15:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0 Validity Not Before: Feb 9 12:00:57 2026 GMT Not After : Feb 10 12:00:57 2026 GMT Subject: CN=d085a8aba2cdd20841f2bf8ff219bf7c5d2ebe1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:f1:9a:89:59:7b:67:73:34:89:67:24:1d: bc:e4:52:15:d2:f9:05:cb:5b:c1:be:a2:76:18:00: c6:2f:55:e2:98:08:93:9e:5c:3e:0f:c0:c2:e3:ac: b1:5d:5a:7c:49:ff:c7:1a:78:0a:e8:e8:65:ec:3b: 28:b0:2d:f6:40:f3:82:1c:61:2d:ec:45:65:43:8a: 8d:34:73:10:54:de:3e:35:c2:bd:f8:63:72:d4:64: a9:00:fd:7d:54:1d:84:f4:6b:0f:55:e0:35:d6:61: be:b9:2d:05:c9:c2:ab:28:28:4d:f2:6e:b3:cb:ff: 5a:57:90:13:9c:a7:36:fb:91:08:a2:90:11:44:a6: c5:6f:c8:5b:65:fe:76:1e:35:2c:5b:b2:21:1c:2d: 40:16:66:2f:e2:33:ab:bc:18:c2:e3:b1:b6:87:59: a9:c2:ec:c4:3d:c4:72:a1:46:0f:82:8d:d1:6b:07: 42:c8:76:fb:44:30:8d:bb:13:51:b7:5a:0b:2f:c6: 5c:b5:c6:48:f9:84:40:e1:5d:27:b4:cf:fc:50:f7: 83:58:e7:3b:82:92:06:65:af:52:d7:40:f2:2d:34: 8a:37:ad:03:0c:8c:b6:30:05:3d:00:6b:dc:c3:7e: 96:25:55:8b:77:00:c7:c2:47:a2:f0:a6:2e:c0:72: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:85:A8:AB:A2:CD:D2:08:41:F2:BF:8F:F2:19:BF:7C:5D:2E:BE:1A X509v3 Authority Key Identifier: keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b1:b2:7a:16:b5:4c:d0:01:29:60:2a:0a:45:5c:92:a6:67: 4d:5a:1c:1e:03:2c:05:98:90:1a:d9:5d:6e:68:7d:17:e6:bf: 9b:72:a4:ee:76:37:34:9f:67:d0:6e:9c:f3:b5:51:0c:83:68: af:82:a9:a9:7a:5a:a0:76:a2:fa:3d:9e:a5:d1:77:c6:14:6b: 4b:bd:f1:0e:92:d3:4e:40:1c:4b:8a:32:52:e0:5a:ec:fd:b4: eb:a1:55:39:d4:04:ce:4a:5e:e1:38:8a:6d:33:1b:14:7c:52: bc:fe:50:aa:d8:d2:c4:63:e0:89:53:ce:e6:e8:7d:bb:91:89: 6c:ab:7b:36:7e:92:87:55:bb:1c:5e:00:47:d2:13:55:bf:26: 92:b8:04:18:ed:d6:01:c5:ea:d4:4a:a8:19:b5:85:9b:a6:fe: cd:97:3f:9d:fa:63:a9:4a:e9:14:5f:ce:16:06:e4:fd:00:02: 53:41:c0:1f:60:83:dc:4a:4e:22:9a:0c:a1:f2:44:b2:fd:84: 3f:47:e1:20:1a:8b:ed:52:89:12:58:60:4b:40:ab:bb:0a:18: 44:35:dd:b7:e6:5c:00:05:14:ae:94:2c:5c:bb:ca:36:02:75: de:b8:d4:41:0c:33:45:1a:dd:7e:ed:57:21:d8:9e:e5:68:c3: 73:31:d9:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrnIMTKhKQV9FVpq9xUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNTM4MGQ3NDJiZWYyNDIzZmNmZDZkMzAzZDczYTY3OTE3 YWFlYzAwHhcNMjYwMjA5MTIwMDU3WhcNMjYwMjEwMTIwMDU3WjAzMTEwLwYDVQQD EyhkMDg1YThhYmEyY2RkMjA4NDFmMmJmOGZmMjE5YmY3YzVkMmViZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QDxmolZe2dzNIlnJB285FIV0vkF y1vBvqJ2GADGL1XimAiTnlw+D8DC46yxXVp8Sf/HGngK6Ohl7DsosC32QPOCHGEt 7EVlQ4qNNHMQVN4+NcK9+GNy1GSpAP19VB2E9GsPVeA11mG+uS0FycKrKChN8m6z y/9aV5ATnKc2+5EIopARRKbFb8hbZf52HjUsW7IhHC1AFmYv4jOrvBjC47G2h1mp wuzEPcRyoUYPgo3RawdCyHb7RDCNuxNRt1oLL8ZctcZI+YRA4V0ntM/8UPeDWOc7 gpIGZa9S10DyLTSKN60DDIy2MAU9AGvcw36WJVWLdwDHwkei8KYuwHJTpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCFqKuizdIIQfK/j/IZv3xdLr4aMB8GA1UdIwQY MBaAFLxTgNdCvvJCP8/W0wPXOmeReq7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUt ZDhmZTJjMDg1ODEwLzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82ODZkZTYtYjEzYy00ZGFjLWFhYWUtZDhmZTJjMDg1ODEw LzEvdkZPQTEwSy04a0lfejliVEE5YzZaNUY2cnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLGyeha1 TNABKWAqCkVckqZnTVocHgMsBZiQGtldbmh9F+a/m3Kk7nY3NJ9n0G6c87VRDINo r4KpqXpaoHai+j2epdF3xhRrS73xDpLTTkAcS4oyUuBa7P2066FVOdQEzkpe4TiK bTMbFHxSvP5QqtjSxGPgiVPO5uh9u5GJbKt7Nn6Sh1W7HF4AR9ITVb8mkrgEGO3W AcXq1EqoGbWFm6b+zZc/nfpjqUrpFF/OFgbk/QACU0HAH2CD3EpOIpoMofJEsv2E P0fhIBqL7VKJElhgS0CruwoYRDXdt+ZcAAUUrpQsXLvKNgJ13rjUQQwzRRrdfu1X Idie5WjDczHZuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:22 2026 by rpki-client