This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json) Hash identifier: Jt/e9p9NzNEmp3XVfxiva/uobYa0vGdKvHs1WItarzQ= Subject key identifier: 95:68:14:CB:D0:89:34:D7:20:D8:75:6A:49:F8:DB:00:74:4B:55:60 Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Certificate serial: 019B5A51AC7AEA94EDD69097877E86A01097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 11:01:00 +0000 Manifest this update: Fri 26 Dec 2025 11:01:00 +0000 Manifest next update: Sat 27 Dec 2025 11:01:00 +0000 Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: x+aVR9INhdzKXQqwrUKrYKfYEsohqdwtoRoJb6c+QVo=) 2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ac:7a:ea:94:ed:d6:90:97:87:7e:86:a0:10:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019 Validity Not Before: Dec 26 11:01:00 2025 GMT Not After : Dec 27 11:01:00 2025 GMT Subject: CN=956814cbd08934d720d8756a49f8db00744b5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:69:b9:3a:0f:15:30:a8:2e:2d:a3:1f:60: 5c:92:41:b6:c2:6b:e8:5a:23:dc:45:28:1c:6c:38: 9c:91:1a:16:5f:b2:0e:14:8e:ba:f7:f4:08:82:63: 39:b2:92:64:d1:51:4e:dd:9b:60:22:e1:b8:14:d3: bf:bc:52:41:53:23:2b:5e:2f:4f:2e:af:d4:2b:5c: 02:5f:43:74:65:cc:3a:f9:60:8c:e6:62:1d:0c:ae: 2f:6c:81:47:d6:8f:b1:c1:ec:5e:bf:af:19:69:f9: 78:a6:23:5b:b1:e1:7d:d5:eb:db:46:9b:7f:f9:36: 9a:da:b4:99:93:20:a9:f9:a6:29:3a:9d:5f:70:ab: 56:24:fb:8b:37:26:74:0f:02:6d:9b:c3:66:b3:4e: 09:f9:f8:a0:43:97:99:f3:32:6a:79:28:fe:fd:71: 2b:b6:54:a1:af:77:46:5e:af:67:b3:f6:b9:1e:63: 51:b7:c2:5b:e5:d3:10:cb:79:07:1f:a7:4d:01:fc: 46:2c:e6:91:81:e7:3d:1d:6b:d5:19:ed:1b:46:9c: a8:22:4e:86:27:1a:b3:0f:40:31:00:1e:28:2f:60: 3b:d6:f7:77:dd:99:9a:49:18:c2:38:0c:e5:3a:b5: c9:1a:3e:b4:5a:bb:70:9a:8c:2d:fa:94:46:88:fe: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:68:14:CB:D0:89:34:D7:20:D8:75:6A:49:F8:DB:00:74:4B:55:60 X509v3 Authority Key Identifier: keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f1:90:b8:16:e3:59:8d:1b:d0:04:d3:72:30:cc:fb:34:27: b7:f9:f1:bd:96:01:3c:da:76:37:b2:20:f7:7a:4d:d1:ac:9b: e2:17:93:e6:fd:cf:08:f9:ab:46:ad:d1:97:9a:a5:f6:fe:e9: dd:2b:1a:15:9d:2a:58:b0:43:f1:b5:6b:b5:cc:2c:19:a2:67: 67:02:c5:c9:10:68:0c:75:73:d7:85:5d:0a:4f:f1:c1:f0:55: 20:97:f4:61:d0:08:fc:9e:eb:ea:e2:c8:c5:6d:ed:f5:fb:5c: 17:02:a2:61:62:1d:66:8c:b5:c4:a6:62:eb:3b:df:4f:8b:19: 41:12:31:41:aa:e5:ef:a8:99:9b:8a:d4:08:5e:b6:12:b3:b5: 84:ca:9d:80:9b:87:f0:c9:6f:c1:51:6f:9d:df:7b:0c:ad:85: a0:8b:2b:01:a6:c4:69:56:a8:15:f3:16:4f:c4:e1:a7:19:0d: ce:76:f3:8f:c6:c6:9b:7b:8e:6d:f9:9a:79:7d:25:80:58:50: 9f:b3:e5:b5:5b:de:b7:4e:28:51:bd:f6:75:4c:a5:06:e0:e9: 1b:6a:51:b2:4b:eb:81:a4:e6:0a:af:ae:51:d5:c2:10:c0:8f: 33:ae:ed:0f:75:f2:c6:cd:39:1e:c8:0d:a1:0b:ad:79:5d:07: 4a:34:b6:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUax66pTt1pCXh36GoBCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0 MzcwMTkwHhcNMjUxMjI2MTEwMTAwWhcNMjUxMjI3MTEwMTAwWjAzMTEwLwYDVQQD Eyg5NTY4MTRjYmQwODkzNGQ3MjBkODc1NmE0OWY4ZGIwMDc0NGI1NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPZpuToPFTCoLi2jH2BckkG2wmvo WiPcRSgcbDickRoWX7IOFI669/QIgmM5spJk0VFO3ZtgIuG4FNO/vFJBUyMrXi9P Lq/UK1wCX0N0Zcw6+WCM5mIdDK4vbIFH1o+xwexev68Zafl4piNbseF91evbRpt/ +Taa2rSZkyCp+aYpOp1fcKtWJPuLNyZ0DwJtm8Nms04J+figQ5eZ8zJqeSj+/XEr tlShr3dGXq9ns/a5HmNRt8Jb5dMQy3kHH6dNAfxGLOaRgec9HWvVGe0bRpyoIk6G JxqzD0AxAB4oL2A71vd33ZmaSRjCOAzlOrXJGj60Wrtwmowt+pRGiP7PdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVoFMvQiTTXINh1akn42wB0S1VgMB8GA1UdIwQY MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPGQuBbj WY0b0ATTcjDM+zQnt/nxvZYBPNp2N7Ig93pN0ayb4heT5v3PCPmrRq3Rl5ql9v7p 3SsaFZ0qWLBD8bVrtcwsGaJnZwLFyRBoDHVz14VdCk/xwfBVIJf0YdAI/J7r6uLI xW3t9ftcFwKiYWIdZoy1xKZi6zvfT4sZQRIxQarl76iZm4rUCF62ErO1hMqdgJuH 8MlvwVFvnd97DK2FoIsrAabEaVaoFfMWT8ThpxkNznbzj8bGm3uObfmaeX0lgFhQ n7PltVvet04oUb32dUylBuDpG2pRskvrgaTmCq+uUdXCEMCPM67tD3Xyxs05HsgN oQuteV0HSjS2SQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:44 2025 by rpki-client