This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json) Hash identifier: sUH/vN7z8UEd3TLxWu3mR+t2PtJdmpKGqeQGvO/Z6w4= Subject key identifier: 63:2B:68:C7:04:54:F8:60:82:6A:F4:C0:13:47:00:79:F3:0F:C5:7D Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Certificate serial: 019B19BC55CB9C55538A5609DB823D689C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 22:02:11 +0000 Manifest this update: Sat 13 Dec 2025 22:02:11 +0000 Manifest next update: Sun 14 Dec 2025 22:02:11 +0000 Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=) 2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: +76LPj963q6FjkErRynpD56Ovt1ndkMefOmUZC+L+WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:55:cb:9c:55:53:8a:56:09:db:82:3d:68:9c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Validity Not Before: Dec 13 22:02:11 2025 GMT Not After : Dec 14 22:02:11 2025 GMT Subject: CN=632b68c70454f860826af4c013470079f30fc57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:b3:1a:3a:0f:f4:ff:4b:f4:f9:42:56:1e: fc:a8:2f:44:d4:c1:37:02:a8:53:1a:d8:76:4d:61: 45:28:1c:29:34:99:60:52:93:30:4f:b6:b2:de:1f: 52:5a:ba:d6:e9:b4:6f:1b:94:4d:63:ee:c8:e5:74: ab:fc:70:b2:55:a2:f4:74:96:f8:67:9b:c8:d0:02: 7b:39:a8:33:cb:b9:e2:8b:85:b0:1b:e2:e6:77:87: 5e:7f:da:ac:6c:d6:66:2b:17:95:e4:20:38:a8:94: 67:a7:9e:87:cb:f0:0b:ab:02:32:8b:b7:19:16:1b: 4f:c1:0e:c5:87:01:1c:27:78:98:b5:ed:e8:7c:d9: 5e:7d:e4:62:23:de:d5:84:bf:32:9c:a5:67:16:ae: 11:e5:57:07:21:64:ad:c7:e0:1b:72:e2:f6:81:81: da:88:f6:df:82:65:2a:49:4a:9b:d8:7d:99:39:7b: 98:ef:d0:86:83:4b:61:89:04:8c:6b:0c:86:e9:22: 3c:b6:52:bd:99:3e:46:3d:ef:47:9f:d9:f3:38:20: 85:67:cf:4e:05:08:df:81:05:82:50:0e:fc:2c:cc: 57:23:54:73:fb:d4:13:ca:46:65:6c:84:91:0a:0a: 9f:57:58:25:3f:cf:0e:40:f0:0f:46:94:b7:b0:f0: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:68:C7:04:54:F8:60:82:6A:F4:C0:13:47:00:79:F3:0F:C5:7D X509v3 Authority Key Identifier: keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1a:8e:ed:23:9d:fd:a6:8e:99:78:d6:1f:7d:bd:c6:84:29: 00:e1:6d:b7:0a:ed:a6:62:ec:c3:80:26:87:10:c6:9a:a2:70: e9:3e:e8:b6:51:76:d9:0d:42:89:d6:5c:b5:c4:04:14:94:fa: 32:d6:ad:1c:41:40:c9:69:1d:10:b3:99:c5:af:85:73:c5:af: e3:16:29:b2:d0:46:88:9e:ac:0b:83:0e:7e:15:5e:55:b8:ee: 5c:2f:fd:ed:8d:94:57:e0:d7:43:4c:01:19:25:eb:64:78:ee: a7:2a:a5:11:c0:f5:fa:7e:46:dd:4a:77:5b:23:49:86:51:57: 6c:52:51:99:9a:77:4d:c6:cf:14:65:45:71:fb:e6:f0:35:b6: 28:4b:cc:d5:47:b4:e5:66:f9:67:d0:5c:a0:13:ea:d2:3e:d1: 50:0e:b2:98:16:48:a0:29:fa:99:1b:d3:57:0d:33:8d:c6:95: de:90:13:8a:7a:62:f6:07:77:f9:ed:74:1f:9b:ff:35:ae:b2: e0:e2:a7:b1:24:2a:48:0d:bd:fd:6d:ee:05:55:ff:55:40:f3: bd:0f:06:1a:d1:d8:64:1f:42:ac:df:09:eb:c1:08:18:dc:8e: d4:a0:5b:e4:46:36:8e:34:ed:03:bd:60:a6:85:32:24:46:91: 4f:7e:c6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvFXLnFVTilYJ24I9aJyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdlMGViNGE0NTA2YTE5YWIyZWZmOTg5YTY3ZDU1OWI5 OGNjMWEwHhcNMjUxMjEzMjIwMjExWhcNMjUxMjE0MjIwMjExWjAzMTEwLwYDVQQD Eyg2MzJiNjhjNzA0NTRmODYwODI2YWY0YzAxMzQ3MDA3OWYzMGZjNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArryzGjoP9P9L9PlCVh78qC9E1ME3 AqhTGth2TWFFKBwpNJlgUpMwT7ay3h9SWrrW6bRvG5RNY+7I5XSr/HCyVaL0dJb4 Z5vI0AJ7Oagzy7nii4WwG+Lmd4def9qsbNZmKxeV5CA4qJRnp56Hy/ALqwIyi7cZ FhtPwQ7FhwEcJ3iYte3ofNlefeRiI97VhL8ynKVnFq4R5VcHIWStx+AbcuL2gYHa iPbfgmUqSUqb2H2ZOXuY79CGg0thiQSMawyG6SI8tlK9mT5GPe9Hn9nzOCCFZ89O BQjfgQWCUA78LMxXI1Rz+9QTykZlbISRCgqfV1glP88OQPAPRpS3sPC1GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMraMcEVPhggmr0wBNHAHnzD8V9MB8GA1UdIwQY MBaAFKpX4OtKRQahmrLv+YmmfVWbmMwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDIt MGZkMDJjNDQyNTNiLzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDItMGZkMDJjNDQyNTNi LzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBqO7SOd /aaOmXjWH329xoQpAOFttwrtpmLsw4AmhxDGmqJw6T7otlF22Q1CidZctcQEFJT6 MtatHEFAyWkdELOZxa+Fc8Wv4xYpstBGiJ6sC4MOfhVeVbjuXC/97Y2UV+DXQ0wB GSXrZHjupyqlEcD1+n5G3Up3WyNJhlFXbFJRmZp3TcbPFGVFcfvm8DW2KEvM1Ue0 5Wb5Z9BcoBPq0j7RUA6ymBZIoCn6mRvTVw0zjcaV3pATinpi9gd3+e10H5v/Na6y 4OKnsSQqSA29/W3uBVX/VUDzvQ8GGtHYZB9CrN8J68EIGNyO1KBb5EY2jjTtA71g poUyJEaRT37G4Q== -----END CERTIFICATE-----Generated at Sun Dec 14 03:43:32 2025 by rpki-client