This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json) Hash identifier: ghAgI+qGuau8cujrOtRp4hhziqqV/Iplm3CTUOMYbf8= Subject key identifier: AD:61:1C:25:8B:1D:39:34:F4:B2:C8:30:9B:84:90:3B:BC:93:7A:B0 Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784 Certificate serial: 019B5ABF16140D3FBAB31A92B6A35A450752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft Manifest number: 172B Signing time: Fri 26 Dec 2025 13:00:31 +0000 Manifest this update: Fri 26 Dec 2025 13:00:31 +0000 Manifest next update: Sat 27 Dec 2025 13:00:31 +0000 Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=) 2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: nJyz9jipVTrsk24FvTOS3jmkKoFQWjkSK8G9HAoc7iw=) 3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:16:14:0d:3f:ba:b3:1a:92:b6:a3:5a:45:07:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784 Validity Not Before: Dec 26 13:00:31 2025 GMT Not After : Dec 27 13:00:31 2025 GMT Subject: CN=ad611c258b1d3934f4b2c8309b84903bbc937ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:c0:a9:5c:81:50:c2:84:e8:44:3d:b8:ac: 70:33:41:a9:20:58:ee:85:ce:1a:9a:f2:77:ca:40: 65:2f:e2:5f:89:11:d2:bd:de:11:1f:54:9d:f4:4f: 28:07:ba:5a:f9:f6:e3:3e:f9:37:76:e0:45:3d:8b: cc:21:98:32:87:67:76:42:bb:f9:07:e9:2c:8c:dd: 7c:14:b2:8d:52:bf:8e:84:86:ec:60:9c:15:9f:50: de:de:25:34:bd:5f:c7:43:12:d9:e6:3f:d6:72:4c: b3:cf:34:31:23:25:6d:bd:07:11:bb:19:ba:fa:7b: a3:24:3f:a7:4e:4d:22:3c:aa:ac:71:d4:67:47:5c: a5:e5:11:a8:0f:2c:e8:8d:7a:ed:8b:a5:f1:b1:1a: b4:7d:22:b6:5c:a4:a9:68:6d:8e:e2:ad:1f:84:e8: bf:cc:4c:8a:f4:29:54:ae:46:09:ce:f6:4a:dd:db: 69:0d:c5:b2:a8:b6:f5:5a:72:66:0a:0a:ba:b0:a8: 00:34:26:f6:6e:e0:49:4f:90:3b:cd:56:60:81:b7: c6:ab:1c:6c:4a:4d:bb:e8:be:d7:43:ca:f5:7b:1c: 23:12:41:45:b7:95:05:a0:c0:77:b5:0b:24:0c:dd: c6:f3:d6:e0:cc:ce:30:9c:ef:1b:b6:cd:71:8c:2c: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:61:1C:25:8B:1D:39:34:F4:B2:C8:30:9B:84:90:3B:BC:93:7A:B0 X509v3 Authority Key Identifier: keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:50:28:65:07:84:1d:76:23:fc:42:0a:19:61:d4:3f:86:41: c6:24:2a:02:06:36:4f:51:41:27:fc:40:82:1d:c1:3d:51:37: 57:63:58:21:bb:d4:0a:47:48:c2:7a:85:12:d9:a4:62:1e:1d: 46:ae:bb:c8:ea:b2:44:17:df:dd:92:29:29:b1:0f:8b:50:bd: 93:c0:14:8e:a2:56:1e:ab:a3:be:86:60:c5:74:12:3e:0a:c9: 9e:c0:1e:2d:78:1e:ed:48:69:0f:35:d2:58:72:27:fc:fa:e3: ec:af:2b:c7:38:0a:36:a9:80:9d:9a:ff:4a:c7:8b:c9:2d:8a: 54:7d:3d:a0:20:3f:02:a9:8d:14:d0:25:17:0c:e1:16:56:e0: 14:32:70:67:ee:61:0c:2a:94:be:0c:16:78:ca:11:fe:1a:65: 30:eb:fc:11:f7:a4:fc:d8:53:20:0f:b1:26:07:8d:9f:ad:0a: f1:5a:50:a7:de:ba:2b:b5:41:1f:f6:1d:0b:a5:03:df:3a:29: 58:fc:4f:63:a4:e1:11:80:e6:39:b6:2d:50:84:85:ad:9f:02: 39:57:a4:73:db:e4:08:48:88:79:d8:d2:05:ae:b1:b9:af:eb: 47:4e:c8:65:ab:78:ad:e0:ee:6d:f8:a6:8f:a0:9e:12:bf:4f: ad:b6:b8:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavxYUDT+6sxqStqNaRQdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj NjA3ODQwHhcNMjUxMjI2MTMwMDMxWhcNMjUxMjI3MTMwMDMxWjAzMTEwLwYDVQQD EyhhZDYxMWMyNThiMWQzOTM0ZjRiMmM4MzA5Yjg0OTAzYmJjOTM3YWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7jAqVyBUMKE6EQ9uKxwM0GpIFju hc4amvJ3ykBlL+JfiRHSvd4RH1Sd9E8oB7pa+fbjPvk3duBFPYvMIZgyh2d2Qrv5 B+ksjN18FLKNUr+OhIbsYJwVn1De3iU0vV/HQxLZ5j/WckyzzzQxIyVtvQcRuxm6 +nujJD+nTk0iPKqscdRnR1yl5RGoDyzojXrti6XxsRq0fSK2XKSpaG2O4q0fhOi/ zEyK9ClUrkYJzvZK3dtpDcWyqLb1WnJmCgq6sKgANCb2buBJT5A7zVZggbfGqxxs Sk276L7XQ8r1exwjEkFFt5UFoMB3tQskDN3G89bgzM4wnO8bts1xjCy4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1hHCWLHTk09LLIMJuEkDu8k3qwMB8GA1UdIwQY MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt NzA4OWJjNTk4ZDgzLzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1AoZQeE HXYj/EIKGWHUP4ZBxiQqAgY2T1FBJ/xAgh3BPVE3V2NYIbvUCkdIwnqFEtmkYh4d Rq67yOqyRBff3ZIpKbEPi1C9k8AUjqJWHqujvoZgxXQSPgrJnsAeLXge7UhpDzXS WHIn/Prj7K8rxzgKNqmAnZr/SseLyS2KVH09oCA/AqmNFNAlFwzhFlbgFDJwZ+5h DCqUvgwWeMoR/hplMOv8Efek/NhTIA+xJgeNn60K8VpQp966K7VBH/YdC6UD3zop WPxPY6ThEYDmObYtUISFrZ8COVekc9vkCEiIedjSBa6xua/rR07IZat4reDubfim j6CeEr9Prba4eg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:16 2025 by rpki-client