This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json) Hash identifier: vv3UGpOtq1OQwsKwDYgWOx2KHQpshpWEPo9mOjj+TDA= Subject key identifier: BB:71:89:09:37:41:1E:8D:79:40:DA:9C:E8:CC:3C:73:19:50:8E:9F Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784 Certificate serial: 019AF276A57D41F3626A99A53B4F561B1824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=) 2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: pmhx5UX7eKvPdWia4OJOwAp+TpOqv2UQtdSa8HIFeVQ=) 3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a5:7d:41:f3:62:6a:99:a5:3b:4f:56:1b:18:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=bb71890937411e8d7940da9ce8cc3c7319508e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:ce:de:f9:46:82:5b:11:03:a9:4f:fd:fa: 16:38:80:46:be:6d:3a:ad:18:4b:d4:f2:eb:e6:a3: 35:aa:52:89:67:cb:c8:98:b9:ee:79:d4:fd:fd:fc: a7:12:9a:26:89:99:ff:b9:51:46:d0:23:46:30:70: ce:59:e9:c5:e1:fa:da:0f:37:b3:dd:6c:2f:28:44: 84:7c:fb:cb:85:4f:89:2f:ca:1d:9e:76:35:2b:b4: d3:13:10:4b:bb:20:8d:f6:00:5f:0a:8d:ea:1c:f9: 1e:dd:38:a9:1b:f8:b9:16:1c:49:f1:f1:f7:3e:ef: 79:fb:f5:3f:79:26:b1:fb:69:30:bd:a2:4b:c9:6d: d4:ce:d4:96:d8:ee:21:0b:f3:05:30:ad:e8:fa:14: 5a:f8:01:6e:5e:71:d5:61:87:23:18:53:72:6c:72: 06:f5:f0:86:af:ba:36:b8:a8:dd:a9:14:3a:5b:38: e1:52:92:0b:26:a5:a7:52:41:91:32:e1:68:83:bf: 9d:b5:b3:08:5c:44:c5:dd:08:e0:a1:97:02:47:ea: 9b:b2:62:f1:f6:1e:8a:23:ea:a5:5b:7e:ff:3f:b2: a1:c5:f7:18:f4:f3:f9:00:98:9a:25:aa:30:c3:7a: bb:9b:a5:b7:01:b9:ee:c9:64:dd:ce:a3:8e:f9:dc: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:71:89:09:37:41:1E:8D:79:40:DA:9C:E8:CC:3C:73:19:50:8E:9F X509v3 Authority Key Identifier: keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:43:9c:af:3a:5b:db:d8:50:4b:3f:78:69:f3:ae:10:54:9e: c2:9b:ab:62:ac:73:0d:d4:17:3e:a8:45:3e:b2:86:84:1e:2f: 34:14:2b:cd:5f:6a:67:45:54:69:cb:5b:2e:6e:b4:f8:cf:0d: a5:ba:08:b6:c4:d7:e5:07:c9:e4:29:8b:cf:49:d9:fe:26:10: 13:4d:71:db:70:1e:6f:53:c6:b3:a4:6a:39:45:82:0d:29:c4: 4d:78:ec:ac:3b:e2:fa:66:c3:fe:43:54:5c:71:17:a9:b9:56: 04:ac:7f:0a:8c:c8:d1:3b:97:81:f3:dd:39:06:99:dc:68:5b: f6:f7:34:31:25:41:bb:c8:7f:76:2d:b6:7f:4a:8f:98:83:c4: 09:1a:e1:01:b4:d5:84:44:66:5c:ee:10:e6:c4:0f:a0:c9:b3: 01:87:b6:15:bf:08:f3:c3:98:7e:c8:c4:1c:32:8f:dc:ce:61: c1:47:80:c8:12:0a:7c:1c:48:d6:07:d2:b2:ab:65:da:05:37: f2:2c:9e:f2:94:ce:03:73:76:fb:79:54:b6:42:25:34:71:1c: 2d:aa:09:c8:f9:f7:cd:7f:48:68:5e:85:e8:3f:f0:ff:ca:71: 20:69:d6:5d:e6:68:c0:de:24:75:03:20:bd:c0:3e:51:98:70: 12:37:ce:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqV9QfNiapmlO09WGxgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj NjA3ODQwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EyhiYjcxODkwOTM3NDExZThkNzk0MGRhOWNlOGNjM2M3MzE5NTA4ZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdzO3vlGglsRA6lP/foWOIBGvm06 rRhL1PLr5qM1qlKJZ8vImLnuedT9/fynEpomiZn/uVFG0CNGMHDOWenF4fraDzez 3WwvKESEfPvLhU+JL8odnnY1K7TTExBLuyCN9gBfCo3qHPke3TipG/i5FhxJ8fH3 Pu95+/U/eSax+2kwvaJLyW3UztSW2O4hC/MFMK3o+hRa+AFuXnHVYYcjGFNybHIG 9fCGr7o2uKjdqRQ6WzjhUpILJqWnUkGRMuFog7+dtbMIXETF3QjgoZcCR+qbsmLx 9h6KI+qlW37/P7KhxfcY9PP5AJiaJaoww3q7m6W3AbnuyWTdzqOO+dx/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtxiQk3QR6NeUDanOjMPHMZUI6fMB8GA1UdIwQY MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt NzA4OWJjNTk4ZDgzLzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkOcrzpb 29hQSz94afOuEFSewpurYqxzDdQXPqhFPrKGhB4vNBQrzV9qZ0VUactbLm60+M8N pboItsTX5QfJ5CmLz0nZ/iYQE01x23Aeb1PGs6RqOUWCDSnETXjsrDvi+mbD/kNU XHEXqblWBKx/CozI0TuXgfPdOQaZ3Ghb9vc0MSVBu8h/di22f0qPmIPECRrhAbTV hERmXO4Q5sQPoMmzAYe2Fb8I88OYfsjEHDKP3M5hwUeAyBIKfBxI1gfSsqtl2gU3 8iye8pTOA3N2+3lUtkIlNHEcLaoJyPn3zX9IaF6F6D/w/8pxIGnWXeZowN4kdQMg vcA+UZhwEjfO3A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:48 2025 by rpki-client