This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json) Hash identifier: rUnx01f4w1yVaZoKont9C3PPANcMTyXWCk55eAa4Xa8= Subject key identifier: 06:6F:6F:BA:A5:3E:AD:6A:B9:03:21:45:1F:62:91:DF:A7:02:A3:93 Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e Certificate serial: 019BAE6EE665D727813CF6F091D409AFE5FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft Manifest number: 0DD2 Signing time: Sun 11 Jan 2026 19:01:02 +0000 Manifest this update: Sun 11 Jan 2026 19:01:02 +0000 Manifest next update: Mon 12 Jan 2026 19:01:02 +0000 Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: /to5eTDiINo4D5RoOUtYfCsYpzApNvIqhMNH2rgqpT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6e:e6:65:d7:27:81:3c:f6:f0:91:d4:09:af:e5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e Validity Not Before: Jan 11 19:01:02 2026 GMT Not After : Jan 12 19:01:02 2026 GMT Subject: CN=066f6fbaa53ead6ab90321451f6291dfa702a393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:02:61:a3:0b:f1:b0:ce:f2:b7:d2:6c:e6: 15:3c:07:a2:c6:91:f3:77:ab:66:09:9e:19:e4:d6: d1:e0:fe:7e:3b:5e:dc:1c:0c:e8:b9:bb:4a:21:97: ea:ee:22:5e:d6:ec:ca:07:07:fd:b3:19:96:32:a7: b8:d0:de:af:f9:87:c0:41:a1:69:52:1c:e7:01:fd: ee:ea:bc:14:9d:2c:55:76:2f:e6:20:19:0f:1c:2c: 19:94:f1:a1:b3:40:7e:ba:e7:dd:0e:94:f0:96:3e: b3:39:3f:cd:13:81:c8:8f:84:51:d0:d4:e6:a3:38: 43:1d:24:87:23:26:8d:6c:91:ad:2f:6b:34:ba:85: 30:f3:b0:ba:0a:bf:3b:01:b2:87:9c:49:28:6c:3e: 63:78:0c:6c:05:cc:54:6b:7a:44:c4:d8:9f:be:eb: 39:14:44:04:b1:ab:13:bf:d5:38:1b:a2:18:ce:1c: fb:26:3a:ba:00:9d:6a:b3:bd:bc:d3:a2:07:4d:c2: e2:16:50:4c:23:70:e6:c1:92:6d:82:39:20:e2:9d: 27:f2:5e:0b:17:f2:36:44:48:19:cb:19:a8:ce:43: 4e:fc:41:9b:89:40:08:de:37:61:85:ae:b6:93:a5: 22:1e:d0:8a:a9:27:bd:90:86:5c:b9:72:3d:5d:67: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6F:6F:BA:A5:3E:AD:6A:B9:03:21:45:1F:62:91:DF:A7:02:A3:93 X509v3 Authority Key Identifier: keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:44:f1:2d:1d:98:20:6f:42:8b:1c:29:c3:b9:8c:2c:52:9b: 3b:a0:7a:c5:28:28:de:76:a8:61:ee:d7:cd:f7:f4:b3:7e:7d: 52:8e:74:c4:85:25:73:da:ff:44:35:0e:d3:59:bb:b0:58:d4: 32:8a:5b:a5:dc:21:7b:4f:21:7a:dc:0d:25:ad:5e:5d:d9:93: 01:42:75:f7:34:e1:25:e2:b1:d7:86:d7:3d:25:6b:81:ff:1a: f0:c3:7b:8e:f7:e6:d2:a0:fa:56:66:4c:d5:2b:1f:49:6e:a1: dd:0b:e8:f4:fc:e1:06:72:82:4b:7e:44:e6:c7:58:82:4d:81: 00:3d:80:1c:5a:b8:f0:b7:9d:3c:e8:28:ee:aa:cf:03:94:ca: ff:b9:41:03:6a:b2:b6:c0:69:53:c3:39:6c:8e:2c:c2:6c:b6: 01:b1:b4:1f:0b:53:88:dc:55:5f:ae:6e:67:ec:c1:77:fe:62: 9b:7d:69:73:69:43:a1:0e:d8:a0:50:6a:dd:b4:4a:46:74:76: ab:b2:66:fe:cf:6c:11:b1:fd:ab:18:1a:33:40:2c:07:ec:90: 4a:3c:c7:37:00:e4:05:bb:b9:2f:9d:ae:d9:c6:7a:a2:32:19: cd:bf:a0:cc:d8:ba:66:03:bd:c6:7b:fb:80:10:3c:96:82:fc: 97:14:44:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuubuZl1yeBPPbwkdQJr+X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTY1MjA0Y2ZlNDcwNzNjYzg2ZDZkZTQzYzQxZDg4MTdl MmU0MmUwHhcNMjYwMTExMTkwMTAyWhcNMjYwMTEyMTkwMTAyWjAzMTEwLwYDVQQD EygwNjZmNmZiYWE1M2VhZDZhYjkwMzIxNDUxZjYyOTFkZmE3MDJhMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KcCYaML8bDO8rfSbOYVPAeixpHz d6tmCZ4Z5NbR4P5+O17cHAzoubtKIZfq7iJe1uzKBwf9sxmWMqe40N6v+YfAQaFp UhznAf3u6rwUnSxVdi/mIBkPHCwZlPGhs0B+uufdDpTwlj6zOT/NE4HIj4RR0NTm ozhDHSSHIyaNbJGtL2s0uoUw87C6Cr87AbKHnEkobD5jeAxsBcxUa3pExNifvus5 FEQEsasTv9U4G6IYzhz7Jjq6AJ1qs72806IHTcLiFlBMI3DmwZJtgjkg4p0n8l4L F/I2REgZyxmozkNO/EGbiUAI3jdhha62k6UiHtCKqSe9kIZcuXI9XWfNpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZvb7qlPq1quQMhRR9ikd+nAqOTMB8GA1UdIwQY MBaAFEEWUgTP5HBzzIbW3kPEHYgX4uQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAt MzRkMjhiNDNjMzI0LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAtMzRkMjhiNDNjMzI0 LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkTxLR2Y IG9Cixwpw7mMLFKbO6B6xSgo3naoYe7Xzff0s359Uo50xIUlc9r/RDUO01m7sFjU Mopbpdwhe08hetwNJa1eXdmTAUJ19zThJeKx14bXPSVrgf8a8MN7jvfm0qD6VmZM 1SsfSW6h3Qvo9PzhBnKCS35E5sdYgk2BAD2AHFq48LedPOgo7qrPA5TK/7lBA2qy tsBpU8M5bI4swmy2AbG0HwtTiNxVX65uZ+zBd/5im31pc2lDoQ7YoFBq3bRKRnR2 q7Jm/s9sEbH9qxgaM0AsB+yQSjzHNwDkBbu5L52u2cZ6ojIZzb+gzNi6ZgO9xnv7 gBA8loL8lxRErA== -----END CERTIFICATE-----Generated at Mon Jan 12 04:07:04 2026 by rpki-client