This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json) Hash identifier: XhGjX/0Xlap9/IPp5PkNivEJKaI8eoBsa0xBt144I0A= Subject key identifier: 42:6E:DE:49:0D:93:3C:45:7D:28:89:88:D4:AF:C2:0C:EB:41:9D:67 Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Certificate serial: 019AF12E41D5BE5091562F42674C53CB0FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=) 2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: kAhpFwBj8zt0tPKvRhFgkbwtiZXl6/UBVgn9KCoLwic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:41:d5:be:50:91:56:2f:42:67:4c:53:cb:0f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=426ede490d933c457d288988d4afc20ceb419d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:69:ca:08:46:b6:e1:4f:b2:2c:7d:56:c1: cc:20:7e:33:81:f6:b9:0f:fd:1e:ad:e9:e0:68:22: da:a8:94:f9:f7:09:bc:dd:70:16:ad:d6:ad:df:e9: 94:47:c7:3c:30:2c:bc:88:74:16:45:e4:30:d7:40: d9:d5:64:f6:c9:3b:69:ae:d3:82:4c:c7:5a:a1:6b: b7:dc:32:9d:53:19:5d:78:3c:90:67:16:52:8f:fe: d4:46:de:81:34:32:e7:c4:46:1d:2f:1a:60:ac:fd: dc:e1:aa:a6:71:f5:60:1f:8f:ce:00:78:49:a9:a0: 8a:81:d7:ea:22:20:8d:43:4b:e3:93:98:58:bd:b0: 6f:a3:1f:fa:d7:30:d6:72:8f:34:40:7f:88:34:c3: bd:4d:aa:4a:a6:cb:eb:71:bc:ff:0d:70:f7:ab:15: 05:92:57:45:dc:5c:b9:7f:a9:8a:05:fc:d0:b9:97: d5:a5:fb:c3:3a:9a:3b:44:3d:25:39:98:db:d8:ad: 2b:db:08:f7:7c:7b:31:a7:02:f0:c7:55:14:9f:89: 9c:7f:ef:00:eb:ef:67:ca:69:b8:42:16:45:ec:e5: 6b:b5:95:18:66:ea:33:92:1f:0f:72:42:a1:f5:46: 99:af:1c:8d:76:28:f0:80:ff:27:db:21:76:36:de: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:DE:49:0D:93:3C:45:7D:28:89:88:D4:AF:C2:0C:EB:41:9D:67 X509v3 Authority Key Identifier: keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:eb:72:35:ce:22:cb:7e:01:9d:18:96:00:e7:95:02:76:8c: 29:ed:0f:7d:4b:43:ae:2e:14:f8:77:18:c3:b2:10:27:ff:73: 6b:d2:51:65:18:d1:3c:11:75:fb:43:34:f8:f6:d3:c7:9d:45: eb:46:ad:2f:40:69:d7:2e:d1:64:66:fd:cb:9f:dc:6b:f9:ef: b8:ab:3b:c5:e4:86:38:27:76:93:37:c0:48:c9:0a:7e:c2:3c: 87:9a:a6:dc:70:bd:de:11:cf:fb:a7:ec:ec:fc:47:dc:bf:96: d9:24:f2:c7:57:8f:67:50:5d:f4:cc:7d:02:91:89:7f:b4:06: c0:43:99:91:da:76:00:8a:1b:a1:54:b5:56:b3:ab:5e:51:b1: 96:2f:d7:92:c3:0e:b7:4a:6b:6c:41:3a:d2:22:b0:5a:ab:3b: 5d:f7:8d:cb:27:54:31:14:fd:f1:70:af:6f:b8:50:de:b8:98: 10:87:7c:4e:3a:19:39:f1:c6:d7:8a:cb:f7:f5:28:30:a5:b5: 0e:0b:81:f5:d2:71:fb:e9:97:1d:fb:48:74:34:9c:12:89:97: fb:19:4b:6b:fc:f2:23:d7:1f:0b:c9:d0:0c:3b:91:89:30:92: d8:0b:95:2e:f1:15:1c:85:2c:75:42:f6:b1:a5:6e:1c:f7:ea: 7f:af:fb:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkHVvlCRVi9CZ0xTyw+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdlMGViNGE0NTA2YTE5YWIyZWZmOTg5YTY3ZDU1OWI5 OGNjMWEwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD Eyg0MjZlZGU0OTBkOTMzYzQ1N2QyODg5ODhkNGFmYzIwY2ViNDE5ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWVpyghGtuFPsix9VsHMIH4zgfa5 D/0erengaCLaqJT59wm83XAWrdat3+mUR8c8MCy8iHQWReQw10DZ1WT2yTtprtOC TMdaoWu33DKdUxldeDyQZxZSj/7URt6BNDLnxEYdLxpgrP3c4aqmcfVgH4/OAHhJ qaCKgdfqIiCNQ0vjk5hYvbBvox/61zDWco80QH+INMO9TapKpsvrcbz/DXD3qxUF kldF3Fy5f6mKBfzQuZfVpfvDOpo7RD0lOZjb2K0r2wj3fHsxpwLwx1UUn4mcf+8A 6+9nymm4QhZF7OVrtZUYZuozkh8PckKh9UaZrxyNdijwgP8n2yF2Nt7+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJu3kkNkzxFfSiJiNSvwgzrQZ1nMB8GA1UdIwQY MBaAFKpX4OtKRQahmrLv+YmmfVWbmMwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDIt MGZkMDJjNDQyNTNiLzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDItMGZkMDJjNDQyNTNi LzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAletyNc4i y34BnRiWAOeVAnaMKe0PfUtDri4U+HcYw7IQJ/9za9JRZRjRPBF1+0M0+PbTx51F 60atL0Bp1y7RZGb9y5/ca/nvuKs7xeSGOCd2kzfASMkKfsI8h5qm3HC93hHP+6fs 7PxH3L+W2STyx1ePZ1Bd9Mx9ApGJf7QGwEOZkdp2AIoboVS1VrOrXlGxli/XksMO t0prbEE60iKwWqs7XfeNyydUMRT98XCvb7hQ3riYEId8TjoZOfHG14rL9/UoMKW1 DguB9dJx++mXHftIdDScEomX+xlLa/zyI9cfC8nQDDuRiTCS2AuVLvEVHIUsdUL2 saVuHPfqf6/7Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:33 2025 by rpki-client