This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json) Hash identifier: 0rqopJQxSRGAC7QP7dieZqj+wJTe/Op5BOnxxpEf1iA= Subject key identifier: 02:08:87:16:4E:B0:20:FA:EB:5E:D3:F3:E7:67:75:BB:4A:AB:1E:55 Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019B42B71B402379A8E9A176AEBA1656186A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 21:00:54 +0000 Manifest this update: Sun 21 Dec 2025 21:00:54 +0000 Manifest next update: Mon 22 Dec 2025 21:00:54 +0000 Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=) 2: OCKZtcIzoUazVhraYe6bR411Z6A.roa (hash: Avps0CfgCm8XLEgiLO8DQKloLOZ7sLrF5+aFYZ63Qz4=) 3: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: q8B3e2S+MIWIAy+QQ7YdJqpnip6i/TBSXqV6uV9GWZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:1b:40:23:79:a8:e9:a1:76:ae:ba:16:56:18:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Dec 21 21:00:54 2025 GMT Not After : Dec 22 21:00:54 2025 GMT Subject: CN=020887164eb020faeb5ed3f3e76775bb4aab1e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:4d:e1:bd:45:43:28:d7:da:92:96:27:59: bf:80:8d:90:71:52:6f:22:20:00:3f:09:1f:12:43: 5d:43:ab:5c:d1:d8:8c:c7:35:e5:4b:ea:6c:3e:1b: b3:4e:ca:fe:fb:7f:96:aa:a2:11:b4:8d:26:07:4d: 26:11:da:0a:dd:4d:05:e0:b7:a3:6e:de:9c:ff:dc: d4:c6:1e:81:3f:e4:ca:c9:15:c8:2a:d5:57:bf:00: 12:27:4c:d0:4a:d4:8b:6b:f5:d5:36:b4:64:d5:09: 3e:e3:cd:c5:cc:d8:6d:af:08:ce:fc:04:ca:8a:28: 4d:c1:5d:f0:dc:31:1c:55:03:2f:63:34:dc:c7:b0: f1:0e:5a:f1:84:29:c4:a8:4d:a8:9d:12:46:7a:c1: f2:63:4b:7c:17:2a:b1:f9:4d:60:bd:9f:6c:67:6d: 22:06:01:d1:3f:45:24:88:68:e3:1a:2d:c2:e0:6d: b6:29:86:83:7e:06:41:73:63:0f:41:e9:53:6c:b8: b8:38:4a:da:08:24:c2:19:fc:13:71:a2:4e:04:b4: ac:34:82:52:69:2a:36:70:6a:d5:2e:96:32:0b:2e: 79:41:3b:37:f2:29:7c:17:9c:be:50:27:16:15:f0: ad:03:40:b0:4a:71:e9:f6:e0:43:67:9f:1f:81:f9: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:87:16:4E:B0:20:FA:EB:5E:D3:F3:E7:67:75:BB:4A:AB:1E:55 X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:42:f7:a5:b2:bc:99:c8:99:d2:56:a8:41:20:8c:48:74:43: 11:b6:06:de:14:41:74:3e:1e:d2:33:ae:ae:a5:86:d5:96:84: 14:ab:25:68:87:44:10:d4:f9:25:d6:40:f8:75:99:74:96:87: ce:e9:35:58:51:e3:20:62:a0:ff:8e:56:85:a4:6c:e2:c3:df: 2b:3d:c7:e8:09:36:47:c3:4d:b1:2c:b2:63:fa:5d:83:fa:f7: c4:6b:0e:5a:da:37:d3:33:a4:d2:ce:fe:20:f8:7b:2c:69:d6: 50:8c:8c:b0:f7:a3:c5:19:ca:20:e2:62:7d:98:ef:00:1f:5b: 0b:92:bb:2c:bf:a2:bf:0d:14:5d:ab:d6:34:10:37:b6:da:b5: a9:59:1a:32:a6:14:cd:3b:3d:64:a3:13:49:36:f5:c4:29:62: 34:43:4b:88:91:36:91:61:43:1d:85:bd:22:05:2c:48:23:bd: 12:bb:0d:20:ec:1f:db:52:1e:de:ef:3d:98:e9:e3:df:8f:de: 6c:81:b1:22:54:4f:64:0f:90:49:16:f8:6e:57:35:95:7a:88: 8e:4a:12:85:40:5a:5a:17:f5:f2:94:e0:47:bc:c1:f2:0c:85: ca:2d:12:e2:e8:66:33:02:62:31:e6:af:eb:45:20:fe:9a:ed: ea:9a:7d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxtAI3mo6aF2rroWVhhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjUxMjIxMjEwMDU0WhcNMjUxMjIyMjEwMDU0WjAzMTEwLwYDVQQD EygwMjA4ODcxNjRlYjAyMGZhZWI1ZWQzZjNlNzY3NzViYjRhYWIxZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWFN4b1FQyjX2pKWJ1m/gI2QcVJv IiAAPwkfEkNdQ6tc0diMxzXlS+psPhuzTsr++3+WqqIRtI0mB00mEdoK3U0F4Lej bt6c/9zUxh6BP+TKyRXIKtVXvwASJ0zQStSLa/XVNrRk1Qk+483FzNhtrwjO/ATK iihNwV3w3DEcVQMvYzTcx7DxDlrxhCnEqE2onRJGesHyY0t8Fyqx+U1gvZ9sZ20i BgHRP0UkiGjjGi3C4G22KYaDfgZBc2MPQelTbLi4OEraCCTCGfwTcaJOBLSsNIJS aSo2cGrVLpYyCy55QTs38il8F5y+UCcWFfCtA0CwSnHp9uBDZ58fgfkZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIIhxZOsCD6617T8+dndbtKqx5VMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUL3pbK8 mciZ0laoQSCMSHRDEbYG3hRBdD4e0jOurqWG1ZaEFKslaIdEENT5JdZA+HWZdJaH zuk1WFHjIGKg/45WhaRs4sPfKz3H6Ak2R8NNsSyyY/pdg/r3xGsOWto30zOk0s7+ IPh7LGnWUIyMsPejxRnKIOJifZjvAB9bC5K7LL+ivw0UXavWNBA3ttq1qVkaMqYU zTs9ZKMTSTb1xCliNENLiJE2kWFDHYW9IgUsSCO9ErsNIOwf21Ie3u89mOnj34/e bIGxIlRPZA+QSRb4blc1lXqIjkoShUBaWhf18pTgR7zB8gyFyi0S4uhmMwJiMeav 60Ug/prt6pp9OQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:47:37 2025 by rpki-client