This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json) Hash identifier: 1jNOlfVYcbiO/u1Eh26DjypiMPRRQTjMIxZH7QQXT1w= Subject key identifier: 6B:83:1E:AE:F1:78:C7:07:BA:E9:B1:C3:47:FD:15:4E:4D:8E:A2:D7 Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019B35325E9AEC1E0A65868DFE525D9775F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 06:00:51 +0000 Manifest this update: Fri 19 Dec 2025 06:00:51 +0000 Manifest next update: Sat 20 Dec 2025 06:00:51 +0000 Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=) 2: OCKZtcIzoUazVhraYe6bR411Z6A.roa (hash: Avps0CfgCm8XLEgiLO8DQKloLOZ7sLrF5+aFYZ63Qz4=) 3: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: nWZHSyKhoGBS8KMzokyCCCcddkS/OKFF8VeqdlHgZEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:5e:9a:ec:1e:0a:65:86:8d:fe:52:5d:97:75:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Dec 19 06:00:51 2025 GMT Not After : Dec 20 06:00:51 2025 GMT Subject: CN=6b831eaef178c707bae9b1c347fd154e4d8ea2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a7:80:bb:d2:b4:1f:76:0b:34:3e:ad:a6:d6: cf:97:c1:5f:87:10:2f:a3:bb:d6:b6:73:26:65:12: 55:bc:39:29:6c:8c:97:bb:b7:3f:75:00:33:86:ec: 75:68:5d:09:fa:10:c9:e4:dc:35:8f:6d:12:6f:a9: 0a:1a:1b:c9:44:25:32:d1:34:c6:f0:3b:74:b2:4e: 7f:ea:6f:5f:67:67:27:6a:f8:27:b0:ce:a5:7a:ce: f3:7c:86:fa:1e:ab:f6:28:8e:89:cf:05:37:0e:44: 11:7a:da:ff:df:79:b9:d1:26:82:61:30:c6:0d:3f: 9b:d1:d7:45:0f:c0:91:60:32:fa:74:78:0d:3a:c8: 2c:69:26:3c:88:ae:8b:ab:2f:b3:16:64:29:0c:f8: 93:29:63:0e:43:93:3d:0f:41:79:cd:5c:21:e8:e1: 25:29:97:36:f0:21:be:93:a7:62:7a:46:88:aa:09: ee:e4:6a:c3:90:15:55:c4:6b:d8:e0:2a:11:d8:ec: 8b:64:b1:3f:93:60:5a:92:63:4e:41:4d:31:9e:01: 21:0d:1b:1f:20:41:a1:e8:cd:0b:c6:38:28:2e:af: e6:cc:3d:f6:d9:e7:ea:14:07:88:8e:ef:1b:2a:de: c0:b1:86:63:9b:92:34:d3:ac:2b:66:7f:f2:ab:ce: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:83:1E:AE:F1:78:C7:07:BA:E9:B1:C3:47:FD:15:4E:4D:8E:A2:D7 X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:1c:1b:ae:63:4d:65:7f:bb:1e:57:15:45:6f:e2:fa:b5: d3:91:24:34:42:33:50:fb:27:e9:33:72:5f:f2:d9:5f:96:4d: 8e:a3:6e:0f:fd:36:9c:55:45:2f:85:db:24:cd:f0:0f:58:a6: 09:85:76:6a:93:b1:53:78:a4:05:b9:d9:19:af:40:72:15:32: e9:1f:a4:cd:74:a3:9c:9f:92:e3:0b:51:a2:64:5a:b0:08:6a: 2d:dd:cf:09:ca:27:1e:be:41:41:0f:84:3e:73:33:1d:b3:dc: 6d:d0:a7:72:23:81:3c:96:88:cf:8d:dc:7e:23:ce:60:d3:1a: 58:72:13:6d:05:c2:5a:cb:0b:3e:e5:99:86:83:44:a2:74:00: 10:11:5c:30:99:ab:15:f6:1a:b7:c4:1b:e9:69:fb:fb:b2:37: 66:cc:88:92:35:8f:71:80:6a:27:7d:c8:5b:65:47:d6:5f:23: 8f:87:a8:f9:ca:3a:6f:82:cb:50:0c:f3:77:55:4f:52:a8:e0: 9e:8c:1e:52:df:f3:1e:52:d0:f0:8f:74:f9:42:6d:2d:69:a8: b1:74:20:4c:10:41:79:32:0a:c6:cb:b4:53:01:50:5c:45:21: 06:45:4d:4d:a7:b7:da:53:e8:e7:95:b6:f4:d9:f3:d9:88:19: 1b:33:dd:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Ml6a7B4KZYaN/lJdl3X3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjUxMjE5MDYwMDUxWhcNMjUxMjIwMDYwMDUxWjAzMTEwLwYDVQQD Eyg2YjgzMWVhZWYxNzhjNzA3YmFlOWIxYzM0N2ZkMTU0ZTRkOGVhMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6eAu9K0H3YLND6tptbPl8FfhxAv o7vWtnMmZRJVvDkpbIyXu7c/dQAzhux1aF0J+hDJ5Nw1j20Sb6kKGhvJRCUy0TTG 8Dt0sk5/6m9fZ2cnavgnsM6les7zfIb6Hqv2KI6JzwU3DkQRetr/33m50SaCYTDG DT+b0ddFD8CRYDL6dHgNOsgsaSY8iK6Lqy+zFmQpDPiTKWMOQ5M9D0F5zVwh6OEl KZc28CG+k6diekaIqgnu5GrDkBVVxGvY4CoR2OyLZLE/k2BakmNOQU0xngEhDRsf IEGh6M0LxjgoLq/mzD322efqFAeIju8bKt7AsYZjm5I006wrZn/yq86fbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuDHq7xeMcHuumxw0f9FU5NjqLXMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYMcG65j TWV/ux5XFUVv4vq105EkNEIzUPsn6TNyX/LZX5ZNjqNuD/02nFVFL4XbJM3wD1im CYV2apOxU3ikBbnZGa9AchUy6R+kzXSjnJ+S4wtRomRasAhqLd3PCconHr5BQQ+E PnMzHbPcbdCnciOBPJaIz43cfiPOYNMaWHITbQXCWssLPuWZhoNEonQAEBFcMJmr FfYat8Qb6Wn7+7I3ZsyIkjWPcYBqJ33IW2VH1l8jj4eo+co6b4LLUAzzd1VPUqjg noweUt/zHlLQ8I90+UJtLWmosXQgTBBBeTIKxsu0UwFQXEUhBkVNTae32lPo55W2 9Nnz2YgZGzPdYQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:51:37 2025 by rpki-client