This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json) Hash identifier: GvYjYss0r9fW7wvURtwN4ps5iCNn9lMUJk2EIbB37q0= Subject key identifier: 2E:2C:53:25:A0:E8:95:F4:E8:D3:CF:17:83:60:81:A6:3B:18:3E:CE Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6 Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6 Certificate serial: 019B31C40C38A20428067044AD9703E1085D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft Manifest number: 1265 Signing time: Thu 18 Dec 2025 14:01:30 +0000 Manifest this update: Thu 18 Dec 2025 14:01:30 +0000 Manifest next update: Fri 19 Dec 2025 14:01:30 +0000 Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=) 2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=) 3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: LFTZt/SLhvsbWzsj7361cUjXuODgAXRCFyTW9ikELgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:0c:38:a2:04:28:06:70:44:ad:97:03:e1:08:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6 Validity Not Before: Dec 18 14:01:30 2025 GMT Not After : Dec 19 14:01:30 2025 GMT Subject: CN=2e2c5325a0e895f4e8d3cf17836081a63b183ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:20:94:b2:3b:9f:39:eb:e9:1d:fd:f4:e7: 68:25:f1:08:9a:83:1b:b3:46:cf:9f:8a:52:05:43: de:1d:1c:e7:74:d4:52:4d:df:02:ee:dc:57:59:0f: a3:66:9a:d9:25:62:70:f6:32:49:48:c7:d0:14:28: be:36:07:00:c0:12:0a:98:66:1e:b3:72:cd:98:73: 0d:83:db:d1:3b:60:02:e8:93:e4:2a:2a:ec:08:0f: a0:52:9a:0c:6d:6e:97:d0:be:05:47:0b:bd:8f:54: 5d:df:9e:22:d4:ae:c4:11:4f:c0:b8:a2:9f:df:36: ce:2d:ee:59:23:ea:99:ba:c3:03:0f:2d:ec:b0:a1: 80:a8:03:12:5d:d0:19:6d:e7:cb:77:7c:35:fd:47: ea:8a:b9:09:ef:ad:59:44:4a:f3:40:a5:fd:6d:d9: cd:35:f5:81:c3:e1:89:ff:23:69:98:87:44:c9:18: 97:32:0f:4a:66:5d:b5:8d:0d:a2:a5:45:3c:9f:15: 73:06:27:01:48:82:fd:c7:66:19:f5:51:63:56:d3: b1:56:b3:70:04:21:35:3c:af:ac:e5:9a:7d:0e:21: be:8c:f3:e2:e9:83:15:c8:db:dd:44:5f:86:52:6a: ab:ed:da:96:1e:19:ed:f9:75:d6:15:4d:37:b1:9d: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2C:53:25:A0:E8:95:F4:E8:D3:CF:17:83:60:81:A6:3B:18:3E:CE X509v3 Authority Key Identifier: keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:00:2b:49:78:da:11:00:70:dd:95:5d:97:b0:33:6a:d5:a5: ad:1b:3b:12:3a:28:76:de:84:43:7d:6e:b9:48:cf:19:c1:5d: db:40:66:3c:e7:51:ed:7e:ce:4e:4f:a7:ee:cb:37:ea:af:87: 91:c0:13:27:28:4e:d5:04:34:ed:09:3e:14:6c:b5:da:cb:08: e0:ad:08:0d:c5:9b:c3:17:9a:50:47:66:c9:2f:9c:2a:43:dc: 8d:7a:b3:38:74:14:7f:78:ed:2d:67:b0:ba:e8:e5:c4:64:a1: 38:4a:01:9c:a3:50:fc:b0:00:0d:de:0d:25:ae:75:77:51:0b: 20:8f:e2:4b:ed:2d:a1:83:58:9a:c8:61:a9:e8:3a:33:e5:1e: 53:1b:dc:b6:e8:ad:41:a7:ba:2b:e1:06:4f:fc:31:06:f3:31: b7:f6:cf:3b:0d:52:ee:74:60:21:1b:82:2d:a1:73:1e:80:4a: 09:19:1d:d0:f2:94:7f:01:ef:e9:34:e6:9e:24:1f:76:e0:df: 8c:46:cf:a9:2b:d8:32:94:89:24:26:8f:a8:48:ce:7b:a6:84: f2:41:54:f2:58:9f:85:d5:23:5f:4c:c4:1d:38:50:9c:67:a9: ae:4c:4b:8e:e8:66:8a:3d:89:69:98:f1:21:67:ef:3c:f4:21: ea:d7:be:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxAw4ogQoBnBErZcD4QhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjNlYjQ0M2MwNmEzZGNjMDg4ZTJjYWEwNWNlMDljZjhk NGU3YTYwHhcNMjUxMjE4MTQwMTMwWhcNMjUxMjE5MTQwMTMwWjAzMTEwLwYDVQQD EygyZTJjNTMyNWEwZTg5NWY0ZThkM2NmMTc4MzYwODFhNjNiMTgzZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApioglLI7nznr6R399OdoJfEImoMb s0bPn4pSBUPeHRzndNRSTd8C7txXWQ+jZprZJWJw9jJJSMfQFCi+NgcAwBIKmGYe s3LNmHMNg9vRO2AC6JPkKirsCA+gUpoMbW6X0L4FRwu9j1Rd354i1K7EEU/AuKKf 3zbOLe5ZI+qZusMDDy3ssKGAqAMSXdAZbefLd3w1/UfqirkJ761ZRErzQKX9bdnN NfWBw+GJ/yNpmIdEyRiXMg9KZl21jQ2ipUU8nxVzBicBSIL9x2YZ9VFjVtOxVrNw BCE1PK+s5Zp9DiG+jPPi6YMVyNvdRF+GUmqr7dqWHhnt+XXWFU03sZ0wBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4sUyWg6JX06NPPF4NggaY7GD7OMB8GA1UdIwQY MBaAFKiz60Q8BqPcwIjiyqBc4Jz41OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEt MzEzZGU0ODkyYjhkLzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEtMzEzZGU0ODkyYjhk LzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAArSXja EQBw3ZVdl7AzatWlrRs7Ejoodt6EQ31uuUjPGcFd20BmPOdR7X7OTk+n7ss36q+H kcATJyhO1QQ07Qk+FGy12ssI4K0IDcWbwxeaUEdmyS+cKkPcjXqzOHQUf3jtLWew uujlxGShOEoBnKNQ/LAADd4NJa51d1ELII/iS+0toYNYmshhqeg6M+UeUxvctuit Qae6K+EGT/wxBvMxt/bPOw1S7nRgIRuCLaFzHoBKCRkd0PKUfwHv6TTmniQfduDf jEbPqSvYMpSJJCaPqEjOe6aE8kFU8lifhdUjX0zEHThQnGeprkxLjuhmij2JaZjx IWfvPPQh6te+Rw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:36:25 2025 by rpki-client