This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json) Hash identifier: A1+pV21aJY5ap5RyTtp+Oyymyxzb6L73fHwEedKV6jM= Subject key identifier: C3:0B:AC:39:FE:46:D9:A1:84:6D:61:06:8C:FD:BB:0B:43:11:F3:77 Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Certificate serial: 019B54861AC56DFB1402F4F97DC2FCD6BEA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 08:00:33 +0000 Manifest this update: Thu 25 Dec 2025 08:00:33 +0000 Manifest next update: Fri 26 Dec 2025 08:00:33 +0000 Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: i8A3raGNOGlTQyGxgcnebAhL5zfP5IESpWIRZ3OID3w=) 2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:1a:c5:6d:fb:14:02:f4:f9:7d:c2:fc:d6:be:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Validity Not Before: Dec 25 08:00:33 2025 GMT Not After : Dec 26 08:00:33 2025 GMT Subject: CN=c30bac39fe46d9a1846d61068cfdbb0b4311f377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:3b:cb:38:f2:c8:6a:aa:81:c9:f0:59:8c: 86:2b:79:78:af:25:a1:86:fc:b2:71:d8:27:92:8c: 2d:2a:35:9c:77:8c:53:60:f7:24:dc:01:db:f6:63: d0:13:d9:01:e7:d7:56:18:a5:23:0d:07:6f:d0:c0: 44:88:19:86:b7:52:69:b3:95:83:2a:51:f0:fe:46: 48:91:f0:5e:c5:04:44:d7:60:8f:42:11:17:de:46: 87:02:28:8d:22:97:8e:09:db:28:77:76:d7:d5:ad: 04:92:6f:86:e0:20:01:c0:95:7a:38:4d:8e:19:8b: eb:10:69:00:c0:8b:f1:83:cc:4e:e0:39:7a:e3:21: 98:15:14:69:e7:49:65:66:2b:19:6f:2d:c8:ae:7c: 81:49:80:0f:ff:46:6a:14:bb:05:34:4d:3e:6c:7f: b3:e4:3e:f2:ed:9f:cd:f6:4f:1f:e4:87:7e:60:b7: 75:7e:72:45:23:84:8f:42:ed:5e:3a:de:4a:8b:a1: 02:6c:73:0f:24:f4:02:3a:94:8e:21:39:30:2a:2f: 93:98:13:2a:1f:d6:09:c7:ed:74:2e:ae:0f:c3:44: d5:77:d9:f7:37:37:93:59:70:20:ad:65:6f:46:c1: 65:78:fb:5f:46:ee:a3:69:0c:70:4b:7b:be:cb:e1: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0B:AC:39:FE:46:D9:A1:84:6D:61:06:8C:FD:BB:0B:43:11:F3:77 X509v3 Authority Key Identifier: keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:69:02:1a:38:1b:cc:0f:97:39:a9:9e:88:53:5f:6c:77:c8: 9a:eb:0d:0c:26:88:50:17:87:c9:7c:20:f1:54:79:01:4b:86: 78:1d:d4:bf:96:82:0c:9a:78:91:9f:06:5d:cb:d6:b3:e3:e2: 12:7a:48:cc:5c:4e:3f:b2:22:97:70:03:f8:5e:b3:a9:be:aa: 83:9c:4d:1d:1c:27:c6:32:fb:7a:5f:94:d5:cb:68:93:47:3c: 12:1c:aa:bd:f0:7e:8b:a6:cf:96:7f:ca:b3:21:89:ad:5d:5e: a7:3d:65:31:7a:59:99:10:32:3a:fd:9d:f4:d8:8e:00:cb:f7: ef:9c:b4:1d:88:c5:ed:aa:46:89:28:18:1d:0a:01:47:f6:9b: 93:e8:54:af:8a:6f:19:91:b4:be:99:a7:15:c7:79:79:21:be: 12:21:2c:25:de:74:7c:f0:c3:f3:b0:c5:4c:51:82:10:50:65: ee:33:64:11:33:68:34:f4:f4:a0:91:69:7c:e6:ef:94:15:1e: 28:02:bf:1a:e6:2a:72:f7:54:62:4b:29:11:b0:86:af:6a:f2: 71:9f:01:84:1b:22:0d:50:72:33:b6:1f:75:70:06:5c:e6:56: 20:27:f3:93:a8:ac:c9:f9:f0:31:4e:b9:ca:0f:4f:9e:81:0a: 1b:c8:98:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhhrFbfsUAvT5fcL81r6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0 MzcwMTkwHhcNMjUxMjI1MDgwMDMzWhcNMjUxMjI2MDgwMDMzWjAzMTEwLwYDVQQD EyhjMzBiYWMzOWZlNDZkOWExODQ2ZDYxMDY4Y2ZkYmIwYjQzMTFmMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P07yzjyyGqqgcnwWYyGK3l4ryWh hvyycdgnkowtKjWcd4xTYPck3AHb9mPQE9kB59dWGKUjDQdv0MBEiBmGt1Jps5WD KlHw/kZIkfBexQRE12CPQhEX3kaHAiiNIpeOCdsod3bX1a0Ekm+G4CABwJV6OE2O GYvrEGkAwIvxg8xO4Dl64yGYFRRp50llZisZby3IrnyBSYAP/0ZqFLsFNE0+bH+z 5D7y7Z/N9k8f5Id+YLd1fnJFI4SPQu1eOt5Ki6ECbHMPJPQCOpSOITkwKi+TmBMq H9YJx+10Lq4Pw0TVd9n3NzeTWXAgrWVvRsFlePtfRu6jaQxwS3u+y+GRYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMLrDn+RtmhhG1hBoz9uwtDEfN3MB8GA1UdIwQY MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2kCGjgb zA+XOameiFNfbHfImusNDCaIUBeHyXwg8VR5AUuGeB3Uv5aCDJp4kZ8GXcvWs+Pi EnpIzFxOP7Iil3AD+F6zqb6qg5xNHRwnxjL7el+U1ctok0c8EhyqvfB+i6bPln/K syGJrV1epz1lMXpZmRAyOv2d9NiOAMv375y0HYjF7apGiSgYHQoBR/abk+hUr4pv GZG0vpmnFcd5eSG+EiEsJd50fPDD87DFTFGCEFBl7jNkETNoNPT0oJFpfObvlBUe KAK/GuYqcvdUYkspEbCGr2rycZ8BhBsiDVByM7YfdXAGXOZWICfzk6isyfnwMU65 yg9PnoEKG8iY/Q== -----END CERTIFICATE-----Generated at Thu Dec 25 14:19:59 2025 by rpki-client