This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: GlhnHRPREYsLL7llw6C7MPWmXHdn6irsQ4MK+ECtc3I=
Subject key identifier: EC:90:DF:B2:4E:4C:9F:48:C7:E8:B6:A9:82:58:1E:81:DA:60:3A:75
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 019C42EAEBCC7BA4232D98B7C0D58ECDD4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 07F4
Signing time: Mon 09 Feb 2026 15:00:17 +0000
Manifest this update: Mon 09 Feb 2026 15:00:17 +0000
Manifest next update: Tue 10 Feb 2026 15:00:17 +0000
Files and hashes: 1: WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa (hash: Ig8sscra5dIX6tBApNExCSn2CMXG+xOTaFttzoauVgc=)
2: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: 5wJGgAiksY4bySXIEohekVBhrnJUw0Wi2muNw/i3YBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:eb:cc:7b:a4:23:2d:98:b7:c0:d5:8e:cd:d4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Feb 9 15:00:17 2026 GMT
Not After : Feb 10 15:00:17 2026 GMT
Subject: CN=ec90dfb24e4c9f48c7e8b6a982581e81da603a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:cb:a8:9d:96:09:3a:1e:36:12:68:eb:8b:
5c:72:0f:a0:20:2a:c9:39:74:e1:72:36:2f:94:a5:
7a:03:c0:44:2f:9f:55:a2:c3:22:d5:0b:91:97:73:
9d:8b:44:48:be:21:69:8b:78:61:de:5c:30:99:6f:
ea:37:82:43:68:4a:45:42:b5:c9:c3:2d:58:c0:11:
e4:0a:bb:ab:92:64:6c:d1:ff:a3:28:2c:3d:bf:3f:
16:5d:8f:2c:52:99:cf:45:c9:4a:6c:bb:61:a8:c8:
5e:1b:57:06:b8:5f:f4:c1:0b:49:11:26:25:f2:25:
b9:9e:03:cd:5d:9f:c0:f6:36:b8:d8:c2:b5:9a:bb:
85:7d:73:be:7d:69:cd:67:a0:c4:2f:9c:ee:dc:47:
fc:17:8d:dd:5f:13:a8:9a:b7:16:48:b4:88:8a:66:
a0:b2:88:ec:14:25:2c:dd:8b:a0:f9:44:5a:15:90:
a1:21:12:d4:4d:68:5d:23:d1:1a:0d:a5:be:74:cc:
f7:ad:9c:3b:15:dd:9f:5d:90:81:24:e5:19:3b:06:
14:11:82:43:a7:2b:af:68:4f:4a:de:9c:92:3b:e9:
71:02:9f:b3:86:91:1d:cb:19:96:92:88:6e:4b:b1:
1f:d8:b7:2e:a7:5f:44:24:69:6f:a8:9b:31:76:68:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:DF:B2:4E:4C:9F:48:C7:E8:B6:A9:82:58:1E:81:DA:60:3A:75
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:77:03:26:a9:b1:77:27:73:44:a3:74:b2:15:9e:0c:86:6b:
7d:86:f5:3f:85:2b:27:af:5d:53:f8:ed:09:10:0a:2d:3b:94:
bf:d7:b4:b0:dd:94:42:f1:42:49:af:0d:e1:fb:3f:34:cc:e1:
df:6f:ea:5c:7e:6a:29:03:c4:78:a7:ea:98:52:bd:56:b9:cd:
f8:c6:50:27:84:63:4c:96:8f:6d:31:5b:ab:8f:d5:47:b2:a8:
fb:8c:be:b7:eb:3f:5b:59:a3:53:22:18:e4:e5:3d:c7:21:56:
64:74:4e:d8:fa:ce:48:f6:e1:49:1f:40:05:69:e6:dd:8a:e7:
b4:43:b2:a7:a6:4f:2e:c7:ea:1f:4c:5a:5a:c2:53:03:a9:3f:
c8:41:3d:7c:22:bf:ba:b6:8c:ee:17:b5:cc:f1:d2:41:b2:b6:
c3:01:55:c3:fe:f4:7e:a2:ff:76:57:23:b3:50:35:21:f3:d1:
2a:44:6c:3e:2c:4a:21:62:2f:da:5b:62:d1:da:06:56:eb:aa:
3f:36:f3:d3:35:41:bb:a5:d3:ef:9a:ed:ca:76:cd:9a:a8:69:
31:a0:91:0e:78:ec:34:7a:4e:ba:03:fd:b4:d7:1d:4d:a1:9a:
19:40:8f:c6:f9:e3:91:52:47:65:7c:ff:42:4e:0e:42:69:26:
39:08:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:35 2026 by rpki-client