This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json) Hash identifier: uA7E+uoJCAj06MKGFYweZ7DornEh8FFWZnJPtfEqTlw= Subject key identifier: 6C:5E:26:42:B9:0B:52:42:91:6B:0D:30:07:96:02:49:32:C8:C8:0A Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784 Certificate serial: 019B6FFDAB08498DA2E372744D7FC8BF9BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft Manifest number: 1736 Signing time: Tue 30 Dec 2025 16:00:53 +0000 Manifest this update: Tue 30 Dec 2025 16:00:53 +0000 Manifest next update: Wed 31 Dec 2025 16:00:53 +0000 Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=) 2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: 4GXj5q/G8f5tPp66AcdwWsAZY2vBZ9bruBvFzUPtsx0=) 3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:ab:08:49:8d:a2:e3:72:74:4d:7f:c8:bf:9b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784 Validity Not Before: Dec 30 16:00:53 2025 GMT Not After : Dec 31 16:00:53 2025 GMT Subject: CN=6c5e2642b90b5242916b0d300796024932c8c80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:7d:3c:a1:44:4f:6c:0d:da:54:78:ac:59: bd:10:dc:16:8c:37:3e:52:99:ba:de:7f:1f:5a:41: 67:2a:32:49:06:cb:c2:20:aa:dc:64:ab:3e:cc:eb: 5c:12:67:89:fd:e1:d6:5e:ba:23:fc:5a:3b:3a:fa: ca:ae:ba:3f:95:41:a5:b5:51:82:78:d4:b4:fd:2a: 4e:11:23:9b:57:85:cf:d5:c1:67:3f:d8:07:8d:f2: c9:68:38:9f:88:ca:f6:10:03:c6:6d:9e:e4:99:91: a7:d9:71:31:40:38:38:da:92:b1:d9:2f:b5:f5:ca: e4:52:8b:09:0e:53:d6:10:33:31:ee:57:fa:92:ea: e4:53:6e:37:28:9f:32:3b:ca:0f:d7:8d:34:60:1e: ab:41:69:04:1e:59:3a:b3:4d:d6:13:2c:d3:b5:8c: a5:ae:52:bc:5a:fe:2c:e6:bb:8a:84:88:6e:7d:e1: 15:69:58:e1:ed:d7:22:16:d6:13:5c:8b:fc:93:97: ed:cb:e7:50:76:fc:bd:a0:55:e3:f9:94:54:b1:7b: 85:cf:92:9c:be:79:f1:0a:a7:0a:1b:cd:fd:19:03: d9:f3:ad:30:cd:ec:8c:2c:b2:87:a7:8f:98:2d:6d: b0:9e:7d:09:92:ea:ea:5a:bb:fe:4f:af:f4:46:9c: ce:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:26:42:B9:0B:52:42:91:6B:0D:30:07:96:02:49:32:C8:C8:0A X509v3 Authority Key Identifier: keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f3:fd:db:e8:70:67:78:c4:20:fb:a7:8e:a8:53:b2:6e:7c: 15:63:a1:9b:72:9b:ca:61:9e:62:c8:26:f7:e8:ff:69:fc:b6: ae:a6:db:57:31:0f:5f:a8:b2:5e:b3:f7:bf:3b:2f:bc:cb:c4: e0:82:b1:5f:8d:a4:f1:a8:6e:19:ba:31:d6:53:ed:aa:cb:8f: 29:62:02:f0:0c:a6:86:f2:97:09:c1:c2:9c:1a:ea:ba:b2:b1: 28:8e:4a:90:3d:53:d3:04:1d:54:75:8b:92:12:86:b3:e7:44: fd:d2:67:6f:e2:2a:3c:43:cb:54:fb:27:92:6f:24:29:98:ea: 88:f1:04:dd:2e:1a:f9:70:0b:5e:2c:46:c9:4d:d9:b3:38:45: 35:7c:dd:db:ec:99:75:09:3c:79:2c:10:c2:b6:60:9b:4e:2c: d0:07:b7:10:8e:65:46:af:58:b3:5b:69:f2:f8:89:13:51:9f: 45:11:1e:f1:4a:79:71:b1:74:d6:88:71:c5:0f:a2:2a:bb:0b: fd:fd:2e:5d:c6:54:95:a0:25:e4:24:25:32:b0:d1:85:74:43: 2a:7f:05:37:ff:cc:bd:7a:35:55:82:ec:e8:ac:6e:9d:83:21: 2f:26:91:2d:bd:d7:b1:db:56:b3:45:c1:67:ba:fc:95:04:e6: db:6f:07:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/asISY2i43J0TX/Iv5ulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj NjA3ODQwHhcNMjUxMjMwMTYwMDUzWhcNMjUxMjMxMTYwMDUzWjAzMTEwLwYDVQQD Eyg2YzVlMjY0MmI5MGI1MjQyOTE2YjBkMzAwNzk2MDI0OTMyYzhjODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq759PKFET2wN2lR4rFm9ENwWjDc+ Upm63n8fWkFnKjJJBsvCIKrcZKs+zOtcEmeJ/eHWXroj/Fo7OvrKrro/lUGltVGC eNS0/SpOESObV4XP1cFnP9gHjfLJaDifiMr2EAPGbZ7kmZGn2XExQDg42pKx2S+1 9crkUosJDlPWEDMx7lf6kurkU243KJ8yO8oP1400YB6rQWkEHlk6s03WEyzTtYyl rlK8Wv4s5ruKhIhufeEVaVjh7dciFtYTXIv8k5fty+dQdvy9oFXj+ZRUsXuFz5Kc vnnxCqcKG839GQPZ860wzeyMLLKHp4+YLW2wnn0JkurqWrv+T6/0RpzOlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxeJkK5C1JCkWsNMAeWAkkyyMgKMB8GA1UdIwQY MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt NzA4OWJjNTk4ZDgzLzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPP92+hw Z3jEIPunjqhTsm58FWOhm3KbymGeYsgm9+j/afy2rqbbVzEPX6iyXrP3vzsvvMvE 4IKxX42k8ahuGbox1lPtqsuPKWIC8AymhvKXCcHCnBrqurKxKI5KkD1T0wQdVHWL khKGs+dE/dJnb+IqPEPLVPsnkm8kKZjqiPEE3S4a+XALXixGyU3ZszhFNXzd2+yZ dQk8eSwQwrZgm04s0Ae3EI5lRq9Ys1tp8viJE1GfRREe8Up5cbF01ohxxQ+iKrsL /f0uXcZUlaAl5CQlMrDRhXRDKn8FN//MvXo1VYLs6KxunYMhLyaRLb3XsdtWs0XB Z7r8lQTm228HpQ== -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:31 2025 by rpki-client