This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json) Hash identifier: LKlo9hVP/hzS+ut/RihpAo/sHYdGFc+dgzsYorbk770= Subject key identifier: 84:FC:D9:2D:FA:77:A9:7A:73:59:F6:DC:7D:F5:26:30:15:5B:A3:9A Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd Certificate serial: 019AF50A1C34E5C33352A2048690F276BCC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=) 2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=) 3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=) 4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: i2INmMi9X5tqSCsDF8MLUJVJ4Sdrtj1SdfYCyyRNr2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1c:34:e5:c3:33:52:a2:04:86:90:f2:76:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=84fcd92dfa77a97a7359f6dc7df52630155ba39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:89:fc:dc:f8:a5:21:1d:41:35:19:df:25: 88:57:ee:a8:e1:e1:fc:ab:5c:b1:bd:87:ab:95:25: 9d:8d:97:5c:13:23:2f:45:b1:50:8e:53:99:fc:29: 37:87:fb:e7:30:70:05:3f:72:a2:9d:8b:51:7b:66: 51:8c:d4:3e:c9:97:73:07:6e:7e:5e:ec:9a:3a:34: b6:31:7f:70:be:4e:31:5b:9a:95:da:03:a7:9d:35: 19:a9:57:4b:32:a4:ad:86:5b:c7:cd:bd:4b:32:6b: 7e:28:8f:0a:90:09:c2:58:ed:90:c7:f5:56:03:47: 32:a8:d8:ba:da:14:87:56:ce:66:e0:67:1b:34:e2: d5:64:c9:f5:64:6b:d7:34:1d:62:d2:db:6b:b1:f6: 2f:19:6b:5c:6c:a5:1b:3b:da:64:c5:fe:11:4e:7c: db:82:05:9a:dd:1a:31:1a:58:7f:8c:a1:be:41:c4: c4:75:68:4e:7e:2a:4d:0f:43:98:c6:49:5b:33:dd: 3f:6a:6f:31:b8:13:2a:64:70:d6:75:88:ea:f9:08: 7e:19:00:0f:0f:c5:2b:78:b7:10:01:9a:83:d0:65: b0:2a:fc:c4:0e:9c:16:bf:93:fa:9d:0a:05:a5:64: ec:f0:3d:64:93:34:70:bc:94:c8:74:b5:78:0b:87: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FC:D9:2D:FA:77:A9:7A:73:59:F6:DC:7D:F5:26:30:15:5B:A3:9A X509v3 Authority Key Identifier: keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:de:a8:e1:ab:16:d2:29:ab:b2:cc:50:b0:4c:29:48:6e: b2:82:87:35:9b:43:ed:39:b1:69:9c:3e:7f:c1:9c:9a:43:e7: 18:6d:56:71:9a:de:aa:62:77:62:55:4f:fe:9d:44:02:f9:a1: 85:ad:8a:11:ac:a6:18:98:6c:ea:12:4d:9d:32:11:59:56:56: 1a:c7:1d:5b:04:cb:74:36:d1:f0:3f:12:a7:ac:9e:8b:81:4d: 5b:cc:db:a0:d4:94:66:cb:77:04:61:50:77:ba:82:5e:8b:68: d2:fa:de:01:6d:58:ea:21:59:1a:0b:dd:44:95:47:19:ce:08: 8a:93:9e:a4:4d:2e:95:7d:42:24:95:ea:d2:fb:27:17:8c:e0: ed:e0:36:e6:c6:a8:7e:49:84:8c:33:39:15:10:7c:9e:cd:23: 40:6a:4b:dc:99:51:2e:7f:c2:db:43:0e:08:16:83:07:13:a8: 46:02:61:a7:cf:1e:8c:3c:e5:a8:ab:4d:39:74:a6:09:fa:23: 12:c1:b1:3b:86:3e:12:3d:5e:a0:14:16:d8:c8:8a:7d:08:3e: a7:f8:73:02:be:5d:f4:52:d8:2a:d0:d1:07:35:77:fc:1f:eb: a1:3f:d9:9b:cc:47:13:55:cd:04:2e:39:da:9e:bf:45:57:81: 6c:6a:a6:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Chw05cMzUqIEhpDydrzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx YTYzZGQwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD Eyg4NGZjZDkyZGZhNzdhOTdhNzM1OWY2ZGM3ZGY1MjYzMDE1NWJhMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5+J/Nz4pSEdQTUZ3yWIV+6o4eH8 q1yxvYerlSWdjZdcEyMvRbFQjlOZ/Ck3h/vnMHAFP3KinYtRe2ZRjNQ+yZdzB25+ XuyaOjS2MX9wvk4xW5qV2gOnnTUZqVdLMqSthlvHzb1LMmt+KI8KkAnCWO2Qx/VW A0cyqNi62hSHVs5m4GcbNOLVZMn1ZGvXNB1i0ttrsfYvGWtcbKUbO9pkxf4RTnzb ggWa3RoxGlh/jKG+QcTEdWhOfipND0OYxklbM90/am8xuBMqZHDWdYjq+Qh+GQAP D8UreLcQAZqD0GWwKvzEDpwWv5P6nQoFpWTs8D1kkzRwvJTIdLV4C4dXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIT82S36d6l6c1n23H31JjAVW6OaMB8GA1UdIwQY MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt YzJhNDNiMDgwZDZmLzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwneqOGr FtIpq7LMULBMKUhusoKHNZtD7TmxaZw+f8GcmkPnGG1WcZreqmJ3YlVP/p1EAvmh ha2KEaymGJhs6hJNnTIRWVZWGscdWwTLdDbR8D8Sp6yei4FNW8zboNSUZst3BGFQ d7qCXoto0vreAW1Y6iFZGgvdRJVHGc4IipOepE0ulX1CJJXq0vsnF4zg7eA25sao fkmEjDM5FRB8ns0jQGpL3JlRLn/C20MOCBaDBxOoRgJhp88ejDzlqKtNOXSmCfoj EsGxO4Y+Ej1eoBQW2MiKfQg+p/hzAr5d9FLYKtDRBzV3/B/roT/Zm8xHE1XNBC45 2p6/RVeBbGqmmA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:55 2025 by rpki-client