This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json) Hash identifier: V6zuK4op739QHslxbJ0o73pVuLKYvBbe5oE82dsmERo= Subject key identifier: 8A:2E:6B:42:AB:13:FF:0C:2F:FC:CF:3D:FB:75:8A:F0:DD:CC:DE:E8 Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019AF19B76180D82B519E89F0FB1F3C4206C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=) 2: OCKZtcIzoUazVhraYe6bR411Z6A.roa (hash: Avps0CfgCm8XLEgiLO8DQKloLOZ7sLrF5+aFYZ63Qz4=) 3: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: yW1ZgLmomAVfIgS9uq49p5tnUxGiQsY8ZOxeA5T6an8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:76:18:0d:82:b5:19:e8:9f:0f:b1:f3:c4:20:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=8a2e6b42ab13ff0c2ffccf3dfb758af0ddccdee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:5e:f6:7e:bb:e3:05:3c:41:55:a2:86:04: 93:a0:7f:53:2e:cf:15:ee:c1:90:86:4a:16:94:93: 81:12:ea:c0:69:4d:b6:df:7f:32:e6:9a:e8:74:42: d4:e5:94:9f:91:a0:0b:a8:29:3d:22:c0:49:8a:65: d8:54:c5:c2:16:5f:22:58:cb:b7:6f:83:c8:2a:c5: 30:ea:9c:3e:be:18:ce:62:26:6d:9c:2d:ba:50:9f: 65:3c:19:4d:f9:6d:90:45:6d:02:a8:c3:09:37:37: ac:37:ba:f8:92:29:47:6e:c2:08:3b:5c:80:4d:09: 23:a2:9a:26:9a:de:d4:68:b1:af:53:c2:02:13:1a: e8:1f:cb:a4:e6:a0:b6:4e:4f:aa:4d:ea:99:aa:a2: 0f:0c:b3:64:93:f9:34:0d:2a:02:5e:0d:de:a6:f7: f7:ed:eb:46:35:8f:b2:42:6c:90:f6:ac:44:77:f5: 08:9c:54:71:47:ef:9f:45:23:3c:ce:11:59:fe:e6: 82:f1:e2:23:d1:24:c5:e3:9a:ca:d7:1e:a7:95:b1: db:80:e7:52:5a:36:fb:1e:07:1a:29:dd:e5:f6:f8: 26:1b:b2:87:e6:8c:3b:60:22:52:5b:43:b5:fa:8e: 0e:97:9a:ca:d3:dd:ef:2b:6f:e2:57:ba:57:5e:9f: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2E:6B:42:AB:13:FF:0C:2F:FC:CF:3D:FB:75:8A:F0:DD:CC:DE:E8 X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:80:82:63:4e:f7:df:ae:fd:be:74:d1:18:82:03:ed:2d: ec:57:55:fd:d5:25:a8:a5:47:86:4c:cb:14:20:50:85:f4:67: 75:26:46:8f:9f:54:2f:8e:68:80:b7:3d:e2:0b:79:94:e6:f8: 93:91:62:b7:f1:41:a3:2e:40:fe:6c:49:d8:b9:31:f1:be:7b: 61:49:f2:d4:a2:ba:79:a2:46:6a:37:3b:90:01:5e:26:63:30: ef:8d:3a:d5:92:e8:80:8d:30:39:db:dd:ec:32:3c:c3:42:55: 79:86:b4:62:ea:79:d8:de:f0:15:70:97:3c:f0:b8:05:44:30: a1:50:41:72:3f:0e:0e:fd:96:7d:57:d4:f5:08:a5:c3:b8:79: 1b:f2:b8:9b:e0:ca:67:3d:d0:95:c5:1a:10:6a:21:78:c5:b2: e5:84:06:c9:fb:9b:de:1e:df:a6:e4:ee:bf:6e:4c:8e:64:88: b0:13:f0:9a:77:14:76:53:4c:ec:3a:1e:0e:34:c9:a7:fa:f9: 82:26:33:75:9f:4e:99:df:64:f9:04:28:5c:9d:f4:32:b2:d7: 01:be:d7:be:07:40:5c:4b:51:cc:b0:3d:5f:a3:5b:7d:44:ff: 2d:fa:85:10:cc:f3:90:e3:94:59:40:89:90:e0:ae:a2:8b:a4: d8:63:1e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3YYDYK1GeifD7HzxCBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD Eyg4YTJlNmI0MmFiMTNmZjBjMmZmY2NmM2RmYjc1OGFmMGRkY2NkZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsle9n674wU8QVWihgSToH9TLs8V 7sGQhkoWlJOBEurAaU22338y5prodELU5ZSfkaALqCk9IsBJimXYVMXCFl8iWMu3 b4PIKsUw6pw+vhjOYiZtnC26UJ9lPBlN+W2QRW0CqMMJNzesN7r4kilHbsIIO1yA TQkjopommt7UaLGvU8ICExroH8uk5qC2Tk+qTeqZqqIPDLNkk/k0DSoCXg3epvf3 7etGNY+yQmyQ9qxEd/UInFRxR++fRSM8zhFZ/uaC8eIj0STF45rK1x6nlbHbgOdS Wjb7HgcaKd3l9vgmG7KH5ow7YCJSW0O1+o4Ol5rK093vK2/iV7pXXp+hLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoua0KrE/8ML/zPPft1ivDdzN7oMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGSAgmNO 99+u/b500RiCA+0t7FdV/dUlqKVHhkzLFCBQhfRndSZGj59UL45ogLc94gt5lOb4 k5Fit/FBoy5A/mxJ2Lkx8b57YUny1KK6eaJGajc7kAFeJmMw74061ZLogI0wOdvd 7DI8w0JVeYa0Yup52N7wFXCXPPC4BUQwoVBBcj8ODv2WfVfU9Qilw7h5G/K4m+DK Zz3QlcUaEGoheMWy5YQGyfub3h7fpuTuv25MjmSIsBPwmncUdlNM7DoeDjTJp/r5 giYzdZ9Omd9k+QQoXJ30MrLXAb7XvgdAXEtRzLA9X6NbfUT/LfqFEMzzkOOUWUCJ kOCuoouk2GMePQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:46 2025 by rpki-client