This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json) Hash identifier: JjMIVTwqAqX9L7oH4j9vhJHAavRu7Z4QlwT2YSsP1YU= Subject key identifier: 8B:A1:42:28:CC:A8:33:23:C1:83:F3:F4:1E:DF:66:AD:6E:A6:72:52 Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd Certificate serial: 019B34C47604EFDDB21BDC3686909DAFB03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 04:00:49 +0000 Manifest this update: Fri 19 Dec 2025 04:00:49 +0000 Manifest next update: Sat 20 Dec 2025 04:00:49 +0000 Files and hashes: 1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=) 2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=) 3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=) 4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: Mh6rfZD/fEK6G/WIYg0Sd2KP9JPlf2WpCzBnn3Jyg+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:76:04:ef:dd:b2:1b:dc:36:86:90:9d:af:b0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd Validity Not Before: Dec 19 04:00:49 2025 GMT Not After : Dec 20 04:00:49 2025 GMT Subject: CN=8ba14228cca83323c183f3f41edf66ad6ea67252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f8:71:f5:c1:40:88:a2:2e:11:0c:60:9c:ee: 47:e7:99:6b:e0:b8:22:73:63:8a:ed:5f:ae:f4:33: ea:06:b9:65:4a:19:fc:d6:8d:5b:fe:ce:cf:a7:79: a8:80:60:31:b4:b7:95:92:d7:a9:f7:af:0b:d1:14: 65:2c:0c:f3:55:56:b4:fa:9b:80:2d:ed:5e:d4:57: 1b:ab:7d:6d:62:9a:7d:9c:e5:04:e7:51:4f:36:61: 4d:40:ca:38:7a:4f:0a:73:dc:36:ac:b5:f8:5a:48: 0e:b4:98:80:6b:10:6c:22:c9:77:28:15:e9:d9:b8: 85:2f:85:b0:2a:94:7a:42:12:f1:3f:b2:dd:d8:9d: 0f:cb:b3:46:65:d1:8c:6c:21:e0:09:01:9a:ba:f2: 54:e9:48:e8:8d:5a:c9:4f:0a:9d:ec:ba:67:fb:cf: 41:6a:e9:82:8c:43:ac:e3:7c:a5:7a:11:d9:74:31: 97:d5:9e:2b:36:6f:b9:81:2e:82:ba:a6:7e:da:26: c4:45:99:0c:b3:0c:22:54:c2:7a:65:6b:ef:06:b5: 3e:7d:81:7a:aa:2e:5b:54:32:e7:2b:14:87:20:ce: b3:b7:4e:7a:2b:ac:b1:98:34:01:f8:8f:4f:c9:d2: dc:47:87:70:d1:5b:4e:a3:26:68:bc:d9:66:49:70: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:42:28:CC:A8:33:23:C1:83:F3:F4:1E:DF:66:AD:6E:A6:72:52 X509v3 Authority Key Identifier: keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:53:29:d7:50:07:d8:f0:1e:7a:21:1d:86:0c:16:2d:1e:28: bf:9e:79:6e:d7:d9:bb:ac:59:af:0a:ff:b5:a0:54:d5:a5:84: a1:8e:80:18:f7:61:75:9e:37:d1:4d:ca:94:77:c9:d8:cb:8b: 9c:3d:de:b5:6b:f9:8e:42:ab:01:29:82:ab:0a:d3:87:2f:b8: ee:7b:3b:18:57:43:b7:91:60:af:5a:a3:30:80:78:6d:2e:50: 09:c7:dd:d5:30:9a:6c:42:bf:48:6b:b2:7a:44:ea:6a:a0:1a: fe:04:a0:fd:99:c8:a4:31:f1:0c:9f:91:ab:f2:f8:04:4a:28: 74:4a:87:4b:49:66:fd:78:0c:68:e0:60:9f:ce:6a:1b:c8:26: 0b:59:1f:14:50:ee:8b:57:96:f2:6e:d4:1b:3c:f9:35:7b:bd: 2f:fb:37:10:a3:6d:e7:40:6b:aa:19:32:21:8c:90:98:3f:d2: ac:1a:6e:e7:8d:57:49:14:7f:f1:ef:cc:ec:d0:f2:cf:9e:6f: 8b:58:06:7f:c1:32:8e:2b:e4:c6:fb:f7:3a:53:e6:fb:64:4e: fd:fe:67:be:d7:3c:c7:c1:70:a3:bc:a8:ea:17:b5:af:40:a9: c2:be:9a:f1:3f:3f:82:94:24:4c:7f:dc:6c:69:9e:3b:ca:37: c1:6d:a6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xHYE792yG9w2hpCdr7A7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx YTYzZGQwHhcNMjUxMjE5MDQwMDQ5WhcNMjUxMjIwMDQwMDQ5WjAzMTEwLwYDVQQD Eyg4YmExNDIyOGNjYTgzMzIzYzE4M2YzZjQxZWRmNjZhZDZlYTY3MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vhx9cFAiKIuEQxgnO5H55lr4Lgi c2OK7V+u9DPqBrllShn81o1b/s7Pp3mogGAxtLeVktep968L0RRlLAzzVVa0+puA Le1e1Fcbq31tYpp9nOUE51FPNmFNQMo4ek8Kc9w2rLX4WkgOtJiAaxBsIsl3KBXp 2biFL4WwKpR6QhLxP7Ld2J0Py7NGZdGMbCHgCQGauvJU6UjojVrJTwqd7Lpn+89B aumCjEOs43ylehHZdDGX1Z4rNm+5gS6CuqZ+2ibERZkMswwiVMJ6ZWvvBrU+fYF6 qi5bVDLnKxSHIM6zt056K6yxmDQB+I9PydLcR4dw0VtOoyZovNlmSXDcLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuhQijMqDMjwYPz9B7fZq1upnJSMB8GA1UdIwQY MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt YzJhNDNiMDgwZDZmLzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFMp11AH 2PAeeiEdhgwWLR4ov555btfZu6xZrwr/taBU1aWEoY6AGPdhdZ430U3KlHfJ2MuL nD3etWv5jkKrASmCqwrThy+47ns7GFdDt5Fgr1qjMIB4bS5QCcfd1TCabEK/SGuy ekTqaqAa/gSg/ZnIpDHxDJ+Rq/L4BEoodEqHS0lm/XgMaOBgn85qG8gmC1kfFFDu i1eW8m7UGzz5NXu9L/s3EKNt50BrqhkyIYyQmD/SrBpu541XSRR/8e/M7NDyz55v i1gGf8Eyjivkxvv3OlPm+2RO/f5nvtc8x8Fwo7yo6he1r0Cpwr6a8T8/gpQkTH/c bGmeO8o3wW2mcQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:32 2025 by rpki-client