This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json) Hash identifier: 2XQ4YcXzvuXjinTmbqX0YwJxvP1BcD2qlZfCwvgZZLE= Subject key identifier: 27:85:BA:FF:AB:BB:D6:50:5F:7F:F4:B4:9D:F0:6B:FF:17:95:34:97 Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Certificate serial: 019B3B6B16A363C518B469DC0B15F9BF82F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 11:00:32 +0000 Manifest this update: Sat 20 Dec 2025 11:00:32 +0000 Manifest next update: Sun 21 Dec 2025 11:00:32 +0000 Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: Htf2jiR/G2IQUWbBw5y+H+zY8Pj6SUQoO40o+JCzHWo=) 2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:16:a3:63:c5:18:b4:69:dc:0b:15:f9:bf:82:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Validity Not Before: Dec 20 11:00:32 2025 GMT Not After : Dec 21 11:00:32 2025 GMT Subject: CN=2785baffabbbd6505f7ff4b49df06bff17953497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:b3:47:f2:9d:fc:b3:82:85:c2:bc:27:24: 19:c8:c3:ee:df:d6:bb:d9:eb:33:6a:47:a7:cc:ae: 7b:79:18:1a:59:54:02:83:23:9f:8d:65:6a:37:61: 28:d0:ea:66:fe:ed:ba:b3:82:df:94:bd:89:fe:3f: fc:43:c1:ad:5e:5a:95:c0:5f:3c:73:90:8b:f9:b7: 69:62:88:c2:e5:7a:71:11:ff:6b:5f:3e:30:8f:4e: 83:1b:41:69:1d:da:4c:9c:e6:89:40:d8:37:fc:47: a1:94:99:0d:7b:0c:3b:70:04:f3:25:a0:4a:e3:b7: e0:db:be:db:51:a2:d5:4a:de:f3:80:03:9c:89:69: e4:a8:87:62:20:04:d3:85:e1:15:4f:87:ff:69:09: f1:c1:13:15:fd:4d:03:49:26:2e:a6:7e:b9:c0:7c: 7f:d5:ae:bf:a6:43:8c:99:c4:e0:bd:4b:ca:42:e7: ab:de:4f:82:b2:01:f4:9a:66:4c:30:ce:5a:dc:85: eb:60:6c:f4:9f:4f:0b:78:48:ec:0b:76:ec:a5:ee: 00:76:d8:e2:b8:02:0c:31:bb:13:48:b6:9e:bf:95: d6:1e:3b:fa:c6:0f:f3:6f:82:39:ab:0b:14:4d:7c: 2b:93:21:6c:21:e0:19:b8:ce:13:6e:75:fe:27:41: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:BA:FF:AB:BB:D6:50:5F:7F:F4:B4:9D:F0:6B:FF:17:95:34:97 X509v3 Authority Key Identifier: keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:23:cb:82:9c:46:f8:f1:e1:16:77:47:8d:e7:ec:8d:b3:14: 79:be:8d:0f:13:0c:4c:84:b6:25:e6:ce:83:a6:4f:7d:c6:fd: 52:0d:86:6b:dd:38:dc:05:19:4d:f2:6d:f8:e8:16:69:d4:d9: ba:4b:84:a4:29:a0:4f:96:87:97:10:95:2f:b6:bc:a2:e9:80: 28:ab:63:93:a2:2a:20:6c:1a:e2:19:7d:5a:79:1f:b8:c1:2a: 51:0b:2c:07:66:3e:b1:e3:02:64:0a:89:49:ff:fb:8a:d6:77: 52:1c:0d:fd:31:64:cf:15:20:a1:2e:99:49:cc:aa:83:a8:f7: 06:16:f0:45:46:04:30:91:19:ac:dc:11:9a:c7:2d:9f:ff:d4: d6:0f:cd:d4:42:ac:a1:46:76:96:17:98:da:00:e7:26:7f:34: e0:70:95:b4:0d:7b:28:c2:60:e4:9d:94:18:04:42:4f:64:4c: ed:b3:63:7e:3f:96:5d:4b:14:3f:44:1c:d2:0c:1c:03:4e:5c: e6:a3:88:48:b1:ae:e5:71:d7:ef:0f:4f:0a:f2:68:fc:42:ec: 84:fa:c0:72:72:0d:4a:74:75:a0:14:84:4c:85:3e:e2:e4:f9: 16:59:6c:4b:66:51:e0:6a:39:85:61:f0:55:bd:45:3c:b8:12: fe:30:f8:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7axajY8UYtGncCxX5v4L1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0 MzcwMTkwHhcNMjUxMjIwMTEwMDMyWhcNMjUxMjIxMTEwMDMyWjAzMTEwLwYDVQQD EygyNzg1YmFmZmFiYmJkNjUwNWY3ZmY0YjQ5ZGYwNmJmZjE3OTUzNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncizR/Kd/LOChcK8JyQZyMPu39a7 2eszakenzK57eRgaWVQCgyOfjWVqN2Eo0Opm/u26s4LflL2J/j/8Q8GtXlqVwF88 c5CL+bdpYojC5XpxEf9rXz4wj06DG0FpHdpMnOaJQNg3/EehlJkNeww7cATzJaBK 47fg277bUaLVSt7zgAOciWnkqIdiIATTheEVT4f/aQnxwRMV/U0DSSYupn65wHx/ 1a6/pkOMmcTgvUvKQuer3k+CsgH0mmZMMM5a3IXrYGz0n08LeEjsC3bspe4Adtji uAIMMbsTSLaev5XWHjv6xg/zb4I5qwsUTXwrkyFsIeAZuM4TbnX+J0EQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeFuv+ru9ZQX3/0tJ3wa/8XlTSXMB8GA1UdIwQY MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCPLgpxG +PHhFndHjefsjbMUeb6NDxMMTIS2JebOg6ZPfcb9Ug2Ga9043AUZTfJt+OgWadTZ ukuEpCmgT5aHlxCVL7a8oumAKKtjk6IqIGwa4hl9WnkfuMEqUQssB2Y+seMCZAqJ Sf/7itZ3UhwN/TFkzxUgoS6ZScyqg6j3BhbwRUYEMJEZrNwRmsctn//U1g/N1EKs oUZ2lheY2gDnJn804HCVtA17KMJg5J2UGARCT2RM7bNjfj+WXUsUP0Qc0gwcA05c 5qOISLGu5XHX7w9PCvJo/ELshPrAcnINSnR1oBSETIU+4uT5FllsS2ZR4Go5hWHw Vb1FPLgS/jD40A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:07 2025 by rpki-client