This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json) Hash identifier: 1G2PMH72RzT6a7pmOB8D7t57TFWBl3sxmCkufXOSEio= Subject key identifier: A9:0E:04:60:9A:64:62:07:50:1A:EE:30:0F:C7:8B:09:66:CA:AF:B0 Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784 Certificate serial: 019B3DC830C88C0F38754E348E2F398E8F3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 22:01:28 +0000 Manifest this update: Sat 20 Dec 2025 22:01:28 +0000 Manifest next update: Sun 21 Dec 2025 22:01:28 +0000 Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=) 2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: UCUIaayvg2FL0WOIvsgst9qp0ibuvW2ZagcczmfX81w=) 3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:30:c8:8c:0f:38:75:4e:34:8e:2f:39:8e:8f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784 Validity Not Before: Dec 20 22:01:28 2025 GMT Not After : Dec 21 22:01:28 2025 GMT Subject: CN=a90e04609a646207501aee300fc78b0966caafb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:f8:ee:c1:22:e8:a5:0d:b4:89:b2:69:a1: 28:bf:28:65:97:78:4d:d6:3c:1f:e6:d2:32:70:2c: 73:98:8e:06:5f:ba:df:e5:16:45:8f:fa:1a:51:4a: 14:e9:90:f2:d9:c0:5a:fb:9d:00:4e:7d:0a:45:9a: 9a:a7:45:4d:09:72:3b:7c:c3:26:56:a4:37:c5:d5: 9f:8e:df:0b:1c:78:14:08:53:88:bb:14:0a:6c:87: df:ff:24:64:2a:14:2a:ae:bf:8f:15:04:3d:e0:41: c8:65:ea:55:ff:56:83:79:06:aa:9a:db:b6:66:b3: 34:c6:87:bd:ce:00:ba:af:b2:fa:21:47:4d:40:97: 7f:43:87:41:f5:48:68:55:63:77:f2:4b:45:86:f0: 0c:6c:19:6a:9c:98:53:b7:14:6a:53:7c:5f:00:fd: ae:90:01:c5:5b:42:f1:84:8a:15:a7:fe:b6:00:49: 3f:a3:33:b3:f1:0b:17:c6:0d:5f:09:36:8f:75:91: ed:f5:42:0a:bf:48:3b:8f:47:04:e5:5c:dd:c8:ce: 41:a1:f2:a5:f8:16:65:19:da:ac:5d:b2:a9:b4:e0: 16:e1:fb:91:75:61:83:19:9e:f4:5e:89:ed:13:66: 4b:dd:66:a6:fe:e9:00:41:c3:56:f2:24:fe:ec:f2: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:04:60:9A:64:62:07:50:1A:EE:30:0F:C7:8B:09:66:CA:AF:B0 X509v3 Authority Key Identifier: keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7a:37:9f:3a:95:7b:3c:89:40:1c:d7:6f:f2:65:f9:fe:c1: fe:d6:2a:f2:1d:12:6b:11:19:84:ba:49:83:08:86:35:06:04: 3f:36:53:e2:75:52:8f:b3:c5:03:c2:bf:4f:7c:02:3e:c5:0b: 43:6a:fc:22:16:03:0e:8c:73:e2:9e:18:63:8c:f5:8d:29:15: 9c:90:79:e4:35:0f:83:4b:84:d9:e9:f7:05:16:c9:48:b8:45: 2b:98:28:e8:02:97:2b:2f:df:78:c6:cc:b8:d7:31:78:d0:58: bf:b2:4a:f2:8c:54:df:f3:21:a3:f4:c9:45:73:5f:d0:8b:4d: 50:3b:75:f6:54:aa:40:4e:a7:88:38:d3:cc:d7:db:23:30:ec: 38:cf:40:43:73:c2:95:29:4a:0e:f4:c2:27:94:e5:d4:39:c2: 36:88:a2:a9:37:f1:73:33:8c:cf:13:24:ad:44:25:cf:74:a4: e3:6f:bd:76:1e:0c:3c:a9:09:2c:ee:ac:6f:16:8b:7c:b7:a3: b2:d8:31:e4:c4:f0:e0:f0:00:12:66:47:aa:de:8f:19:45:10: 7d:41:9d:eb:2a:a6:cb:44:dd:27:25:e9:07:7f:03:16:54:81: 35:0d:77:1f:fe:57:63:9a:2e:21:08:7e:a4:d7:fa:80:80:2e: 3b:fa:e3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yDDIjA84dU40ji85jo87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj NjA3ODQwHhcNMjUxMjIwMjIwMTI4WhcNMjUxMjIxMjIwMTI4WjAzMTEwLwYDVQQD EyhhOTBlMDQ2MDlhNjQ2MjA3NTAxYWVlMzAwZmM3OGIwOTY2Y2FhZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7347sEi6KUNtImyaaEovyhll3hN 1jwf5tIycCxzmI4GX7rf5RZFj/oaUUoU6ZDy2cBa+50ATn0KRZqap0VNCXI7fMMm VqQ3xdWfjt8LHHgUCFOIuxQKbIff/yRkKhQqrr+PFQQ94EHIZepV/1aDeQaqmtu2 ZrM0xoe9zgC6r7L6IUdNQJd/Q4dB9UhoVWN38ktFhvAMbBlqnJhTtxRqU3xfAP2u kAHFW0LxhIoVp/62AEk/ozOz8QsXxg1fCTaPdZHt9UIKv0g7j0cE5VzdyM5BofKl +BZlGdqsXbKptOAW4fuRdWGDGZ70XontE2ZL3Wam/ukAQcNW8iT+7PKOKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkOBGCaZGIHUBruMA/Hiwlmyq+wMB8GA1UdIwQY MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt NzA4OWJjNTk4ZDgzLzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3o3nzqV ezyJQBzXb/Jl+f7B/tYq8h0SaxEZhLpJgwiGNQYEPzZT4nVSj7PFA8K/T3wCPsUL Q2r8IhYDDoxz4p4YY4z1jSkVnJB55DUPg0uE2en3BRbJSLhFK5go6AKXKy/feMbM uNcxeNBYv7JK8oxU3/Mho/TJRXNf0ItNUDt19lSqQE6niDjTzNfbIzDsOM9AQ3PC lSlKDvTCJ5Tl1DnCNoiiqTfxczOMzxMkrUQlz3Sk42+9dh4MPKkJLO6sbxaLfLej stgx5MTw4PAAEmZHqt6PGUUQfUGd6yqmy0TdJyXpB38DFlSBNQ13H/5XY5ouIQh+ pNf6gIAuO/rjfw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:14:39 2025 by rpki-client