This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json) Hash identifier: BuHfu32EwrDUQF72AQEGXE3O2Qm8YILDLXaw914aRFI= Subject key identifier: 48:6C:3A:5D:2A:19:FD:6D:05:AC:34:30:1A:16:40:71:D2:07:BD:29 Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Certificate serial: 019B3C7F9CF4DD0032CB041B28A218779936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft Manifest number: 0CDC Signing time: Sat 20 Dec 2025 16:02:34 +0000 Manifest this update: Sat 20 Dec 2025 16:02:34 +0000 Manifest next update: Sun 21 Dec 2025 16:02:34 +0000 Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=) 2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=) 3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: WPhvwSSsgwrynbTS1m6BqVvYpLhOfa7WO1yNoYEDjMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:9c:f4:dd:00:32:cb:04:1b:28:a2:18:77:99:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Validity Not Before: Dec 20 16:02:34 2025 GMT Not After : Dec 21 16:02:34 2025 GMT Subject: CN=486c3a5d2a19fd6d05ac34301a164071d207bd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:47:7a:34:ae:ec:0a:f8:2e:ab:b2:70:fc: 9d:54:ab:02:b0:59:c4:7d:b0:7a:9b:d4:a2:10:2c: 72:2b:e1:bb:44:a3:ef:47:77:82:3b:f5:6c:7e:17: 2d:5e:8f:b5:9b:11:e8:4f:04:25:7e:66:39:8e:07: b0:a8:70:6f:bc:2c:b3:79:1f:60:28:c1:03:f2:39: a2:4b:9b:e9:37:de:d0:3e:94:40:53:e2:a6:2a:b8: 9a:c6:9b:77:a5:ab:2f:4b:f1:69:55:05:cb:f9:00: 3b:c7:0c:0f:cc:13:65:7a:16:b9:ef:4a:c8:95:00: 2b:1e:85:84:e7:de:4b:f8:be:67:af:b0:9c:d1:5e: 7e:2a:f1:8b:7f:ca:24:57:de:34:5e:67:c6:0d:ae: 8d:61:9c:d4:f6:24:dc:01:88:2b:94:31:e5:07:55: 11:08:94:49:e4:7b:ed:52:2c:a7:b5:d1:26:b9:eb: d1:ce:25:f2:67:fb:c4:e4:ba:6b:f9:f8:c1:0f:76: 0a:c0:8c:c3:11:8d:4a:30:ee:c6:db:7a:b7:1b:0a: ba:02:a3:30:fe:54:24:9f:78:cc:2f:f3:e7:73:12: ab:5d:33:e7:48:54:2f:c0:67:61:2c:c7:eb:f4:d7: cc:c2:17:6f:93:41:bf:98:a8:4b:b5:fe:69:e0:9b: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:3A:5D:2A:19:FD:6D:05:AC:34:30:1A:16:40:71:D2:07:BD:29 X509v3 Authority Key Identifier: keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:85:c6:1b:ab:2d:06:69:f1:35:0f:dc:ad:cf:fb:3d:c6:c7: 4d:36:e8:90:ff:a1:82:11:99:53:21:d4:12:64:57:cf:da:33: 80:0d:5f:54:7b:ae:5d:45:09:13:d9:82:b1:2a:45:f6:d0:df: 22:b8:fa:89:04:89:9d:55:cb:e0:68:d4:85:1f:0d:2a:9b:bc: c2:9c:d7:8c:3e:65:b5:31:34:5c:24:c0:13:cb:4b:5e:89:62: 7a:87:59:bc:89:92:5a:dc:6a:4c:ef:53:a0:36:cf:c4:62:b0: 1e:7d:d7:5a:3d:18:31:60:36:1d:04:94:39:96:6d:9c:4f:36: 1e:49:cd:44:23:eb:6d:6b:92:9b:65:7f:b2:85:c6:69:f4:c5: 85:2d:41:ca:3a:34:c2:c3:93:71:7c:b9:51:a8:b1:8a:1e:46: 69:56:07:ab:62:61:64:99:35:a3:61:bd:0c:78:0b:ce:b8:0d: 27:a6:09:6f:18:41:1c:48:f7:57:34:e2:e4:08:a0:e1:21:25: 99:43:71:0a:14:cf:31:5e:6c:42:a7:6e:9e:ea:d0:51:8c:b8: 02:4a:1d:10:b8:a7:48:af:d1:f7:32:c1:16:4a:a5:71:46:0b: 96:10:c7:df:9a:6a:e3:a3:b7:60:e7:09:89:4b:75:3c:0f:d6: 71:d3:f8:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f5z03QAyywQbKKIYd5k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMWExZjk3NzBiYWIwNzc1MTViNzcxMmNiOGQ0OTU1MGIz MTM4YTEwHhcNMjUxMjIwMTYwMjM0WhcNMjUxMjIxMTYwMjM0WjAzMTEwLwYDVQQD Eyg0ODZjM2E1ZDJhMTlmZDZkMDVhYzM0MzAxYTE2NDA3MWQyMDdiZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KBHejSu7Ar4LquycPydVKsCsFnE fbB6m9SiECxyK+G7RKPvR3eCO/VsfhctXo+1mxHoTwQlfmY5jgewqHBvvCyzeR9g KMED8jmiS5vpN97QPpRAU+KmKriaxpt3pasvS/FpVQXL+QA7xwwPzBNleha570rI lQArHoWE595L+L5nr7Cc0V5+KvGLf8okV940XmfGDa6NYZzU9iTcAYgrlDHlB1UR CJRJ5HvtUiyntdEmuevRziXyZ/vE5Lpr+fjBD3YKwIzDEY1KMO7G23q3Gwq6AqMw /lQkn3jML/PncxKrXTPnSFQvwGdhLMfr9NfMwhdvk0G/mKhLtf5p4JvcXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhsOl0qGf1tBaw0MBoWQHHSB70pMB8GA1UdIwQY MBaAFLEaH5dwurB3UVt3EsuNSVULMTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDkt ODIxN2E5MjlmZDhkLzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDktODIxN2E5MjlmZDhk LzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIXGG6st BmnxNQ/crc/7PcbHTTbokP+hghGZUyHUEmRXz9ozgA1fVHuuXUUJE9mCsSpF9tDf Irj6iQSJnVXL4GjUhR8NKpu8wpzXjD5ltTE0XCTAE8tLXolieodZvImSWtxqTO9T oDbPxGKwHn3XWj0YMWA2HQSUOZZtnE82HknNRCPrbWuSm2V/soXGafTFhS1Byjo0 wsOTcXy5Uaixih5GaVYHq2JhZJk1o2G9DHgLzrgNJ6YJbxhBHEj3VzTi5Aig4SEl mUNxChTPMV5sQqdunurQUYy4AkodELinSK/R9zLBFkqlcUYLlhDH35pq46O3YOcJ iUt1PA/WcdP4wA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:47 2025 by rpki-client