This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json) Hash identifier: ErshHqYP678optuQwqiHseLOEAP+iLDD4/xxl/DUZiY= Subject key identifier: F2:19:71:19:9E:A0:F2:64:F7:84:CC:23:4D:3C:D3:FC:94:B7:EF:78 Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Certificate serial: 019BFC52E8C2628B3AD86487C5642BF00BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft Manifest number: 0D40 Signing time: Mon 26 Jan 2026 22:00:50 +0000 Manifest this update: Mon 26 Jan 2026 22:00:50 +0000 Manifest next update: Tue 27 Jan 2026 22:00:50 +0000 Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=) 2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=) 3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: 6/bp20PaQr8hV8GwEd5RdFZUiNoMwL0ZLYv+euGwTKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:e8:c2:62:8b:3a:d8:64:87:c5:64:2b:f0:0b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1 Validity Not Before: Jan 26 22:00:50 2026 GMT Not After : Jan 27 22:00:50 2026 GMT Subject: CN=f21971199ea0f264f784cc234d3cd3fc94b7ef78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:51:d7:10:a5:79:21:63:74:e6:1f:b3:72: 3a:27:d3:42:11:78:3f:86:f0:93:8b:6b:df:e2:eb: 7d:44:14:cb:06:b8:7c:a4:64:09:b9:ce:8b:c7:5b: d6:c8:4a:e6:31:da:42:09:38:80:fe:e7:c1:22:53: d7:e6:78:e8:e9:fd:54:b3:a1:cc:35:c8:6a:2e:56: a1:f0:c5:53:74:b1:3f:f6:89:bc:2e:49:3e:69:24: bb:74:9f:02:c8:ec:e4:1d:a2:82:01:ec:29:94:47: fe:7c:20:34:f9:1c:ff:12:3f:bf:48:de:fe:43:5e: cd:8e:c5:d5:9f:fc:15:49:3c:e7:a3:df:8b:b2:99: 95:ab:d4:dc:6a:1a:93:df:11:36:40:0e:bd:61:d0: ec:f9:b6:23:4b:50:b1:e6:f8:20:5d:3f:5d:f8:a2: 6c:2b:ad:52:4f:e0:ee:de:1b:1d:8a:28:98:bb:aa: f2:d0:15:23:32:65:eb:b7:f7:97:9d:88:5f:30:ea: fe:c9:97:21:17:46:d9:d9:0e:7e:2e:62:4f:89:8e: 03:66:53:de:8a:c5:1a:c1:fa:2d:f8:a1:8b:d8:3f: fd:00:51:89:a0:3d:44:5b:a5:d7:db:e7:2f:c7:68: 9c:7f:dc:7c:f5:49:d9:75:e8:96:46:ac:af:b1:7c: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:19:71:19:9E:A0:F2:64:F7:84:CC:23:4D:3C:D3:FC:94:B7:EF:78 X509v3 Authority Key Identifier: keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ad:02:20:f6:fa:34:e3:0d:6d:8b:82:35:60:a0:74:aa:2f: f9:78:b6:3b:14:0e:7d:8e:aa:9b:c9:52:5f:47:1e:16:62:f1: 86:91:2a:17:0c:0d:9e:3c:bb:f2:ab:20:3f:17:42:72:fb:e0: e4:1d:2e:d6:62:93:9f:f0:6e:9e:96:2e:50:bd:56:eb:12:2f: 0d:d1:85:6b:48:c3:ab:39:e8:4a:ac:7a:6f:02:7c:92:fe:cc: bc:14:e1:a1:e5:27:4f:24:05:28:50:bc:60:e7:62:65:b6:12: a2:b0:73:d6:c7:d8:af:d1:47:94:bb:c5:d6:ce:6d:16:29:f0: 79:da:86:40:f9:e4:0b:a1:5d:49:eb:dc:0d:5c:50:44:43:8c: fb:a5:a0:5b:b3:d0:13:cb:98:94:97:b6:f6:d6:dc:fa:51:d7: 01:a7:d5:2b:da:01:06:32:ed:4b:ce:06:02:96:d3:17:00:59: 16:e0:e8:21:f4:2a:3e:a9:c9:27:74:00:e7:ca:01:63:d4:d3: 58:61:cf:57:7e:11:1b:23:d6:e2:c9:b0:e6:37:f3:df:d1:36: 86:f4:ff:05:82:58:95:65:2c:e3:fc:ff:7a:d0:16:a9:80:27: 58:a9:6e:41:d1:80:bc:ad:4d:f5:54:e5:e1:23:9d:cf:b1:90: ff:75:6e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UujCYos62GSHxWQr8AvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMWExZjk3NzBiYWIwNzc1MTViNzcxMmNiOGQ0OTU1MGIz MTM4YTEwHhcNMjYwMTI2MjIwMDUwWhcNMjYwMTI3MjIwMDUwWjAzMTEwLwYDVQQD EyhmMjE5NzExOTllYTBmMjY0Zjc4NGNjMjM0ZDNjZDNmYzk0YjdlZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzRR1xCleSFjdOYfs3I6J9NCEXg/ hvCTi2vf4ut9RBTLBrh8pGQJuc6Lx1vWyErmMdpCCTiA/ufBIlPX5njo6f1Us6HM NchqLlah8MVTdLE/9om8Lkk+aSS7dJ8CyOzkHaKCAewplEf+fCA0+Rz/Ej+/SN7+ Q17NjsXVn/wVSTzno9+LspmVq9TcahqT3xE2QA69YdDs+bYjS1Cx5vggXT9d+KJs K61ST+Du3hsdiiiYu6ry0BUjMmXrt/eXnYhfMOr+yZchF0bZ2Q5+LmJPiY4DZlPe isUawfot+KGL2D/9AFGJoD1EW6XX2+cvx2icf9x89UnZdeiWRqyvsXyVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIZcRmeoPJk94TMI0080/yUt+94MB8GA1UdIwQY MBaAFLEaH5dwurB3UVt3EsuNSVULMTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDkt ODIxN2E5MjlmZDhkLzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDktODIxN2E5MjlmZDhk LzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha0CIPb6 NOMNbYuCNWCgdKov+Xi2OxQOfY6qm8lSX0ceFmLxhpEqFwwNnjy78qsgPxdCcvvg 5B0u1mKTn/BunpYuUL1W6xIvDdGFa0jDqznoSqx6bwJ8kv7MvBThoeUnTyQFKFC8 YOdiZbYSorBz1sfYr9FHlLvF1s5tFinwedqGQPnkC6FdSevcDVxQREOM+6WgW7PQ E8uYlJe29tbc+lHXAafVK9oBBjLtS84GApbTFwBZFuDoIfQqPqnJJ3QA58oBY9TT WGHPV34RGyPW4smw5jfz39E2hvT/BYJYlWUs4/z/etAWqYAnWKluQdGAvK1N9VTl 4SOdz7GQ/3Vu1g== -----END CERTIFICATE-----Generated at Tue Jan 27 07:41:51 2026 by rpki-client