This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json) Hash identifier: zLVJvVJ1PATkbxXDbr8XUVp8yP6bpWqVh2ww2syKuhw= Subject key identifier: 92:18:32:B9:EA:FA:B5:3F:87:EE:8A:C7:DC:F1:11:42:E2:9B:60:28 Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb Certificate serial: 019B4EBB8385926E211284B93D9812D40E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 05:01:10 +0000 Manifest this update: Wed 24 Dec 2025 05:01:10 +0000 Manifest next update: Thu 25 Dec 2025 05:01:10 +0000 Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: pFfOwLFCJBvICqnhMPia6vt4t/B3WjksqjxNxd+TNAo=) 2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=) 3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:83:85:92:6e:21:12:84:b9:3d:98:12:d4:0e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb Validity Not Before: Dec 24 05:01:10 2025 GMT Not After : Dec 25 05:01:10 2025 GMT Subject: CN=921832b9eafab53f87ee8ac7dcf11142e29b6028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:72:a4:41:04:3d:dc:7f:0a:1f:2a:02:69: 77:23:ce:51:f0:04:6d:ec:d3:f7:fb:cf:9e:9f:cb: 33:b7:b9:42:ed:35:57:51:70:75:7d:d7:69:8f:a7: c5:f5:1e:06:79:21:08:40:68:b8:57:7e:ce:93:10: 72:43:6f:96:7b:3f:4a:51:d9:10:00:1a:ed:1e:e7: a6:f3:34:d8:64:06:2e:c2:25:ce:65:25:51:5f:96: 25:95:15:b2:92:9d:84:53:ab:64:c5:7d:c6:cc:5d: 1a:66:7d:b3:b5:2e:56:d4:65:74:66:4f:c2:dc:c3: 5d:55:ff:52:9f:a2:8b:13:64:4d:95:84:78:ae:f1: a5:51:a7:05:dd:c5:77:96:49:da:5a:6f:d0:a6:8f: 42:03:93:35:c6:7b:17:86:91:a4:51:6b:68:6c:79: 2c:25:07:f5:a8:26:54:f4:da:09:ee:fb:cb:bd:ee: 10:f1:87:63:03:12:2f:fc:a9:8e:9e:33:e6:85:04: a8:96:2f:78:25:ed:15:4b:82:83:b0:df:55:fc:87: c9:3f:90:b7:7a:c2:97:80:71:ab:ae:47:f8:64:3f: 8b:1d:d8:56:2d:04:6f:2f:51:eb:9c:f4:ae:3d:09: 2a:87:1e:37:51:c6:6a:7d:ca:ae:ce:99:b0:e1:0d: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:32:B9:EA:FA:B5:3F:87:EE:8A:C7:DC:F1:11:42:E2:9B:60:28 X509v3 Authority Key Identifier: keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bd:29:20:f1:a9:be:50:10:eb:16:dc:1d:e9:7e:aa:9c:4f: 3b:25:cc:61:40:dc:f1:f7:c7:1e:21:80:f5:67:85:74:c5:9a: 69:ed:1a:a4:41:0a:d2:7e:53:68:fb:89:8d:8e:5b:2f:bf:0f: c0:a2:c0:91:3c:14:78:40:26:c2:7e:3d:a2:c8:69:19:6d:60: 46:70:0f:a3:33:db:e3:c0:8d:fb:b3:f7:ac:ec:70:82:cc:18: cb:69:c7:b6:e9:89:2d:25:0a:46:96:92:b7:02:fa:bd:5f:71: 1b:87:62:e1:2c:23:5d:a6:c2:84:70:0c:56:58:d1:4d:4d:68: c1:8a:51:4e:33:8a:5a:05:77:00:8e:8b:29:c8:3b:09:b8:b8: f6:e9:53:fc:d4:df:5b:b9:b8:fb:41:89:99:58:00:13:8c:50: 76:d1:b5:fb:79:0c:a6:76:0c:36:2e:c0:2e:8b:a1:5f:82:64: 0f:84:bc:e9:15:01:ac:ad:65:df:1b:15:32:61:b7:de:34:88: 64:c3:54:63:90:88:12:2c:f6:80:5f:5e:77:06:63:b6:a4:9a: e6:1f:d9:d1:c6:de:16:3d:9e:b3:e3:0d:b8:75:fb:a6:6a:c7: d7:39:5c:28:1a:4a:6e:99:77:bb:f2:bb:b3:20:8a:cd:0e:47: fa:1c:26:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu4OFkm4hEoS5PZgS1A4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2 NzcyYmIwHhcNMjUxMjI0MDUwMTEwWhcNMjUxMjI1MDUwMTEwWjAzMTEwLwYDVQQD Eyg5MjE4MzJiOWVhZmFiNTNmODdlZThhYzdkY2YxMTE0MmUyOWI2MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15NypEEEPdx/Ch8qAml3I85R8ARt 7NP3+8+en8szt7lC7TVXUXB1fddpj6fF9R4GeSEIQGi4V37OkxByQ2+Wez9KUdkQ ABrtHuem8zTYZAYuwiXOZSVRX5YllRWykp2EU6tkxX3GzF0aZn2ztS5W1GV0Zk/C 3MNdVf9Sn6KLE2RNlYR4rvGlUacF3cV3lknaWm/Qpo9CA5M1xnsXhpGkUWtobHks JQf1qCZU9NoJ7vvLve4Q8YdjAxIv/KmOnjPmhQSoli94Je0VS4KDsN9V/IfJP5C3 esKXgHGrrkf4ZD+LHdhWLQRvL1HrnPSuPQkqhx43UcZqfcquzpmw4Q2NzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIYMrnq+rU/h+6Kx9zxEULim2AoMB8GA1UdIwQY MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt ZDM4YTc2NjBiNTFlLzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi70pIPGp vlAQ6xbcHel+qpxPOyXMYUDc8ffHHiGA9WeFdMWaae0apEEK0n5TaPuJjY5bL78P wKLAkTwUeEAmwn49oshpGW1gRnAPozPb48CN+7P3rOxwgswYy2nHtumJLSUKRpaS twL6vV9xG4di4SwjXabChHAMVljRTU1owYpRTjOKWgV3AI6LKcg7Cbi49ulT/NTf W7m4+0GJmVgAE4xQdtG1+3kMpnYMNi7ALouhX4JkD4S86RUBrK1l3xsVMmG33jSI ZMNUY5CIEiz2gF9edwZjtqSa5h/Z0cbeFj2es+MNuHX7pmrH1zlcKBpKbpl3u/K7 syCKzQ5H+hwm/Q== -----END CERTIFICATE-----Generated at Wed Dec 24 09:17:23 2025 by rpki-client