This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json) Hash identifier: AkSRwbH2g40Z2u3qdNy3bJPmChRsVM0YJEjE508Uhtw= Subject key identifier: 38:D8:FB:ED:59:9A:38:EB:99:1C:65:33:F9:B1:29:B4:8A:8E:A0:12 Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Certificate serial: 019BF87693EF838D42095B0193BF1CBF0A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft Manifest number: 0D3E Signing time: Mon 26 Jan 2026 04:01:19 +0000 Manifest this update: Mon 26 Jan 2026 04:01:19 +0000 Manifest next update: Tue 27 Jan 2026 04:01:19 +0000 Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=) 2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=) 3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: aTOgXKqEPaZMIqbHVJ7dtkkTwbzA7BJ0a0j5S2JdVcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:93:ef:83:8d:42:09:5b:01:93:bf:1c:bf:0a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Validity Not Before: Jan 26 04:01:19 2026 GMT Not After : Jan 27 04:01:19 2026 GMT Subject: CN=38d8fbed599a38eb991c6533f9b129b48a8ea012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:6e:12:02:8b:0d:c7:fd:c5:94:e5:a4:a8: 44:d3:7b:e4:19:25:be:c8:15:f6:d5:71:25:b0:ea: d8:28:d0:fd:40:2c:16:ff:b9:b9:9c:73:2e:a8:79: 39:af:56:57:49:28:ec:74:d3:e5:0b:93:a9:c2:2d: a0:f9:e8:20:46:7c:bc:29:00:a1:05:a9:23:e5:38: 0a:b4:d7:7d:a1:d3:de:45:9b:d9:cf:06:13:a6:96: 90:e6:25:7a:02:55:28:6c:e4:d7:fb:16:a8:17:eb: 96:1a:41:df:70:a3:5e:84:fd:b9:a4:32:35:a4:71: 1e:ac:65:93:42:44:5f:d0:90:d7:8b:ca:4e:8f:33: b9:2d:cb:c3:08:6e:93:0a:42:34:44:cb:84:24:6d: cb:16:18:1f:f4:3d:76:a8:3c:52:e4:75:e5:af:f6: f2:ea:b1:71:a4:e3:05:a2:d8:6d:f3:6b:09:7e:ab: 4c:b6:6c:c4:53:ad:bb:ed:30:fc:c7:15:ec:f7:bc: 86:93:9d:b3:3f:d8:c5:71:9e:91:c0:b9:a5:b3:3b: a3:fa:3d:0d:0b:3b:10:e5:0a:01:11:c1:65:31:a5: e8:b8:f6:2b:2e:fe:a7:68:f0:11:29:05:77:45:c8: 9b:c6:fa:a6:ff:4a:66:7c:ab:8e:6b:a2:31:ca:68: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:FB:ED:59:9A:38:EB:99:1C:65:33:F9:B1:29:B4:8A:8E:A0:12 X509v3 Authority Key Identifier: keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:25:95:99:13:8d:98:c7:97:0b:00:ee:39:6f:de:cc:23:04: b5:b1:02:27:56:d8:da:58:99:19:e6:e4:e7:36:b1:06:98:63: 8b:20:2a:80:03:92:43:96:51:12:51:a6:2c:6f:a4:0e:8d:ca: 08:b8:34:84:32:99:90:62:bd:82:b0:ec:71:da:f8:87:66:97: d0:14:e7:75:f0:94:57:e4:d4:43:da:3c:26:99:87:0b:f4:37: dd:fc:4e:be:5a:96:8e:d2:2f:cd:42:5e:ad:20:75:ef:5d:85: 9d:42:54:c1:a3:62:0f:14:56:26:1b:8a:db:ea:55:eb:62:d8: e9:78:0b:6a:b2:b9:23:82:21:47:89:b8:a1:60:de:e6:16:b9: a7:04:45:b4:13:d4:15:65:ec:73:60:fa:84:14:19:36:b0:05: 7a:9d:b3:c6:ac:9c:5a:c3:1f:08:61:be:4b:f4:87:b1:46:03: a1:4f:bd:08:1e:7e:38:23:30:4c:bb:38:86:c5:cc:96:15:6b: cc:34:5d:a6:6d:4a:6f:20:8e:0c:de:ff:fc:d5:09:a0:29:b3: 26:cc:08:66:7c:d3:d6:47:45:64:72:7b:9e:93:40:0c:6a:fb: 92:6f:13:22:53:dd:2a:44:ec:ad:90:fb:70:1b:cb:17:1d:01: ee:17:4d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpPvg41CCVsBk78cvwoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMWExZjk3NzBiYWIwNzc1MTViNzcxMmNiOGQ0OTU1MGIz MTM4YTEwHhcNMjYwMTI2MDQwMTE5WhcNMjYwMTI3MDQwMTE5WjAzMTEwLwYDVQQD EygzOGQ4ZmJlZDU5OWEzOGViOTkxYzY1MzNmOWIxMjliNDhhOGVhMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpNuEgKLDcf9xZTlpKhE03vkGSW+ yBX21XElsOrYKND9QCwW/7m5nHMuqHk5r1ZXSSjsdNPlC5Opwi2g+eggRny8KQCh Bakj5TgKtNd9odPeRZvZzwYTppaQ5iV6AlUobOTX+xaoF+uWGkHfcKNehP25pDI1 pHEerGWTQkRf0JDXi8pOjzO5LcvDCG6TCkI0RMuEJG3LFhgf9D12qDxS5HXlr/by 6rFxpOMFotht82sJfqtMtmzEU6277TD8xxXs97yGk52zP9jFcZ6RwLmlszuj+j0N CzsQ5QoBEcFlMaXouPYrLv6naPARKQV3Rcibxvqm/0pmfKuOa6IxymhtOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjY++1ZmjjrmRxlM/mxKbSKjqASMB8GA1UdIwQY MBaAFLEaH5dwurB3UVt3EsuNSVULMTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDkt ODIxN2E5MjlmZDhkLzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDktODIxN2E5MjlmZDhk LzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniWVmRON mMeXCwDuOW/ezCMEtbECJ1bY2liZGebk5zaxBphjiyAqgAOSQ5ZRElGmLG+kDo3K CLg0hDKZkGK9grDscdr4h2aX0BTndfCUV+TUQ9o8JpmHC/Q33fxOvlqWjtIvzUJe rSB1712FnUJUwaNiDxRWJhuK2+pV62LY6XgLarK5I4IhR4m4oWDe5ha5pwRFtBPU FWXsc2D6hBQZNrAFep2zxqycWsMfCGG+S/SHsUYDoU+9CB5+OCMwTLs4hsXMlhVr zDRdpm1KbyCODN7//NUJoCmzJswIZnzT1kdFZHJ7npNADGr7km8TIlPdKkTsrZD7 cBvLFx0B7hdN7g== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:18 2026 by rpki-client