This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json) Hash identifier: NmYFg6m7YkyPAdSC5cStZIoIecF0cwoTXWYzLauekg0= Subject key identifier: 09:F2:BC:0D:29:EB:DE:15:C8:24:7B:C3:28:D2:02:B1:FC:F2:A6:07 Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Certificate serial: 019AF208A86E329FFE7239EFFDDF5F240988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: lOIeIK/FGkXQsRTl4jFF3DqsyE3fRtTe5SC2V5FLfGY=) 2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a8:6e:32:9f:fe:72:39:ef:fd:df:5f:24:09:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=09f2bc0d29ebde15c8247bc328d202b1fcf2a607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:9b:8d:19:70:20:63:e1:c9:5c:d4:95:ef: b7:0c:e8:63:46:5f:88:00:b4:d9:90:e5:45:0b:59: 67:32:b1:c8:45:58:4a:a9:fd:c9:a2:5b:7f:20:a5: f6:c6:1b:40:fe:ea:e4:3e:da:5c:a7:e6:65:c9:ee: 09:d5:10:80:5f:ca:59:87:03:ee:03:b2:6c:a6:cd: d0:77:3c:0d:64:dc:4e:c2:63:3a:71:47:70:fe:ea: 07:e7:cf:83:b4:15:94:83:04:2c:c3:d2:f8:e5:44: 69:fa:3c:c4:29:5f:a8:f0:d0:aa:55:22:1b:34:09: 57:8d:d3:e8:d9:08:79:91:d8:2f:b9:3d:16:ae:f9: b4:e7:b9:82:90:92:3e:9b:e2:d1:16:4d:d1:17:2c: cf:8e:0e:b6:29:82:6e:d6:b2:ec:73:34:7e:2c:e9: 76:7e:71:8b:d8:ba:47:48:4c:16:35:73:d7:17:c6: a5:25:b0:7f:26:d4:ca:b7:23:0e:c4:c9:a2:02:a8: 65:a5:c1:68:3a:4a:f7:16:8e:dd:06:b9:e6:03:42: 05:b5:ac:4c:d4:b6:6b:f4:89:0f:e4:ab:2c:40:3b: d3:72:70:e8:31:df:ed:04:25:4a:c9:fd:b0:45:e0: f4:68:cd:64:26:8c:5a:98:2d:68:a8:c0:c9:5d:0d: 59:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F2:BC:0D:29:EB:DE:15:C8:24:7B:C3:28:D2:02:B1:FC:F2:A6:07 X509v3 Authority Key Identifier: keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:94:bb:86:61:5f:09:9a:ad:08:1b:96:f4:ce:3d:76:70:1f: 9d:99:54:bf:2c:c4:80:72:d4:55:4c:26:c1:f4:ce:74:af:09: dd:ad:b9:f3:5a:6e:d3:11:38:7d:25:e0:f8:0a:e0:82:96:52: 34:db:17:11:07:c9:7c:d4:0a:8c:56:a6:77:a7:12:b9:76:51: fa:ba:c6:a0:cc:98:3a:18:9f:5e:64:31:6f:8b:9b:3f:15:30: 9a:c1:28:6f:a2:89:05:d5:b7:15:3d:97:7a:58:56:23:59:10: eb:84:3d:45:9d:3c:5a:21:30:e8:00:0b:80:93:a8:52:71:e6: d9:1e:4e:27:a3:f3:b8:0e:d0:f8:83:78:63:1b:d2:e9:62:4c: 87:c4:ca:2e:b3:ee:2b:33:b2:34:8d:06:0a:18:84:2e:b2:fc: 0e:cd:e4:64:34:3e:ef:2f:13:57:29:44:9a:ed:a0:46:3c:70: c1:b1:87:30:e3:46:c7:db:31:a0:95:b7:38:46:60:c5:31:c8: cf:44:d5:5b:e8:0d:d3:9b:5c:57:65:dc:ad:88:8d:a5:1d:80: 26:ef:de:e1:1b:04:5d:bd:0e:66:3c:a5:2f:e5:7b:38:12:1a: b2:e2:b2:18:49:b8:90:ea:a5:c9:f6:91:fd:15:a9:61:74:58: fd:35:2a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKhuMp/+cjnv/d9fJAmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0 MzcwMTkwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EygwOWYyYmMwZDI5ZWJkZTE1YzgyNDdiYzMyOGQyMDJiMWZjZjJhNjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloCbjRlwIGPhyVzUle+3DOhjRl+I ALTZkOVFC1lnMrHIRVhKqf3Jolt/IKX2xhtA/urkPtpcp+Zlye4J1RCAX8pZhwPu A7Jsps3QdzwNZNxOwmM6cUdw/uoH58+DtBWUgwQsw9L45URp+jzEKV+o8NCqVSIb NAlXjdPo2Qh5kdgvuT0Wrvm057mCkJI+m+LRFk3RFyzPjg62KYJu1rLsczR+LOl2 fnGL2LpHSEwWNXPXF8alJbB/JtTKtyMOxMmiAqhlpcFoOkr3Fo7dBrnmA0IFtaxM 1LZr9IkP5KssQDvTcnDoMd/tBCVKyf2wReD0aM1kJoxamC1oqMDJXQ1Z5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnyvA0p694VyCR7wyjSArH88qYHMB8GA1UdIwQY MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpS7hmFf CZqtCBuW9M49dnAfnZlUvyzEgHLUVUwmwfTOdK8J3a2581pu0xE4fSXg+ArggpZS NNsXEQfJfNQKjFamd6cSuXZR+rrGoMyYOhifXmQxb4ubPxUwmsEob6KJBdW3FT2X elhWI1kQ64Q9RZ08WiEw6AALgJOoUnHm2R5OJ6PzuA7Q+IN4YxvS6WJMh8TKLrPu KzOyNI0GChiELrL8Ds3kZDQ+7y8TVylEmu2gRjxwwbGHMONGx9sxoJW3OEZgxTHI z0TVW+gN05tcV2XcrYiNpR2AJu/e4RsEXb0OZjylL+V7OBIasuKyGEm4kOqlyfaR /RWpYXRY/TUqcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:36 2025 by rpki-client