This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json) Hash identifier: bbhjlQ1WdVXDihT0JdkzOFMtKxglg3w+ClZp7nHQS1Q= Subject key identifier: A1:61:AF:CD:F0:F1:C0:8B:10:1B:CC:2B:44:04:70:34:51:F1:1B:EA Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Certificate serial: 019AF31BCA7EAC9894AC9DF71E015C7C3E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft Manifest number: 0CB6 Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=) 2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=) 3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: sGAHQ6IihzKO+q24M8OHEsoyl+TtDENSmwYeSadIRpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ca:7e:ac:98:94:ac:9d:f7:1e:01:5c:7c:3e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=a161afcdf0f1c08b101bcc2b4404703451f11bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:d2:b5:23:90:e3:50:d9:22:b2:95:7e:00: 64:68:c2:cc:13:e6:e0:85:38:11:46:db:c5:77:4f: 94:b1:8b:a9:1a:d8:91:ad:ff:de:25:ba:03:08:d0: 2c:5d:38:c4:b5:64:ba:17:cd:28:0f:1b:7e:9c:09: 91:86:8b:e3:5b:9b:70:ae:c7:a2:5b:b7:2f:3e:e0: 76:54:6a:96:03:01:b9:00:78:7b:57:1f:e7:7a:13: 19:8b:87:16:f7:a9:0d:51:a5:4d:d5:51:f9:63:cd: 9d:f6:db:54:28:22:ca:25:9c:c5:a8:90:16:53:88: 17:0c:4d:56:29:bc:c1:c5:f9:34:af:62:7b:7e:2a: 12:32:2a:9b:00:d9:1c:ae:ad:74:bf:f3:b5:59:10: 1b:1b:7e:d0:ed:cc:7e:f4:45:e9:f3:ef:ff:8b:cf: 73:06:82:1a:24:01:9d:7c:74:ff:b6:51:92:d1:5e: 4d:59:b2:b3:26:e4:8e:aa:32:3d:26:52:77:2e:b7: 4b:6b:b9:89:d9:0b:9f:8c:44:46:5e:a8:f4:3f:13: 25:89:90:37:7c:99:84:97:d0:22:37:c1:5e:e0:86: 07:41:c8:fa:e1:df:0e:19:95:d8:a9:08:fc:db:ff: 87:45:07:3b:9d:7d:a8:8f:18:b5:91:35:47:1f:33: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:61:AF:CD:F0:F1:C0:8B:10:1B:CC:2B:44:04:70:34:51:F1:1B:EA X509v3 Authority Key Identifier: keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:98:90:e9:2a:b5:a5:c9:51:26:b5:52:c9:f4:bb:a8:d9:4b: 0d:3f:b9:2f:3a:ce:1b:39:06:e3:3a:2d:54:f4:31:c6:ab:02: e1:42:34:b0:ba:e2:f1:fa:1b:f8:2d:03:0b:11:97:bd:1a:65: 8c:6f:57:0e:4e:42:01:62:52:72:23:9e:19:78:ed:0e:51:68: 00:bb:08:d9:f0:7e:c5:a6:ed:08:8d:81:5f:61:95:0c:44:76: 73:7a:64:d4:89:6a:07:41:27:a7:df:04:a0:d6:80:8e:72:05: 39:7b:c1:f7:d9:5a:1c:14:84:81:4a:ab:e6:db:08:c6:63:1a: 45:19:91:62:63:8c:3f:45:7a:51:fe:53:9f:de:65:c7:4a:e4: f4:8d:ab:b2:93:92:65:7b:81:f6:e3:ca:a5:57:a4:b0:b8:25: 3c:2b:8c:04:38:24:cf:76:69:d0:57:cf:b1:fc:1f:c0:fd:a5: 88:cf:dc:95:c1:e1:ec:0e:1b:95:77:ad:0c:bc:de:df:7c:36: 98:f9:33:82:ee:96:93:0b:65:48:f7:0e:85:9d:a1:50:59:68: 49:1a:5c:f2:60:94:b4:06:02:65:f1:32:7a:8a:8f:9b:fe:fc: 28:6e:c7:32:5a:15:e2:48:80:0c:70:73:9d:c8:af:70:25:32: 14:9a:25:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8p+rJiUrJ33HgFcfD6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMWExZjk3NzBiYWIwNzc1MTViNzcxMmNiOGQ0OTU1MGIz MTM4YTEwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD EyhhMTYxYWZjZGYwZjFjMDhiMTAxYmNjMmI0NDA0NzAzNDUxZjExYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWbStSOQ41DZIrKVfgBkaMLME+bg hTgRRtvFd0+UsYupGtiRrf/eJboDCNAsXTjEtWS6F80oDxt+nAmRhovjW5twrsei W7cvPuB2VGqWAwG5AHh7Vx/nehMZi4cW96kNUaVN1VH5Y82d9ttUKCLKJZzFqJAW U4gXDE1WKbzBxfk0r2J7fioSMiqbANkcrq10v/O1WRAbG37Q7cx+9EXp8+//i89z BoIaJAGdfHT/tlGS0V5NWbKzJuSOqjI9JlJ3LrdLa7mJ2QufjERGXqj0PxMliZA3 fJmEl9AiN8Fe4IYHQcj64d8OGZXYqQj82/+HRQc7nX2ojxi1kTVHHzOqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFhr83w8cCLEBvMK0QEcDRR8RvqMB8GA1UdIwQY MBaAFLEaH5dwurB3UVt3EsuNSVULMTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDkt ODIxN2E5MjlmZDhkLzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDktODIxN2E5MjlmZDhk LzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5iQ6Sq1 pclRJrVSyfS7qNlLDT+5LzrOGzkG4zotVPQxxqsC4UI0sLri8fob+C0DCxGXvRpl jG9XDk5CAWJSciOeGXjtDlFoALsI2fB+xabtCI2BX2GVDER2c3pk1IlqB0Enp98E oNaAjnIFOXvB99laHBSEgUqr5tsIxmMaRRmRYmOMP0V6Uf5Tn95lx0rk9I2rspOS ZXuB9uPKpVeksLglPCuMBDgkz3Zp0FfPsfwfwP2liM/clcHh7A4blXetDLze33w2 mPkzgu6WkwtlSPcOhZ2hUFloSRpc8mCUtAYCZfEyeoqPm/78KG7HMloV4kiADHBz ncivcCUyFJol9w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:29 2025 by rpki-client