This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json) Hash identifier: V2WpLo3cu5uau0oUrrnWpplz2h/6P6exd7Z8J8FS16I= Subject key identifier: B0:A9:17:59:74:7B:FB:B5:EE:DE:8E:B8:B1:8E:B7:57:45:97:87:73 Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e Certificate serial: 019AF31BB7B2182A83E4A9EC2843C373A180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft Manifest number: 0D71 Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: 05bfquE7MnsyHJB/26YzgG0YcChwX7ctEV4sIcz36Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b7:b2:18:2a:83:e4:a9:ec:28:43:c3:73:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=b0a91759747bfbb5eede8eb8b18eb75745978773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:78:0c:c5:68:be:ae:31:0c:99:a7:66:11: ab:5f:9b:10:db:f4:37:6a:24:63:bc:5b:24:2e:5e: d3:5a:9a:fb:04:0d:ad:be:95:af:d5:05:a5:f7:5c: e1:5f:d8:77:3b:09:3c:52:25:26:b8:cb:ea:02:8f: 1a:ab:97:40:df:90:c9:ab:69:15:32:41:b3:e0:d1: a3:9f:50:f6:d1:47:a4:a6:13:41:6b:a3:cc:25:e3: a4:78:d1:ab:76:98:92:8b:84:e5:ac:c4:df:db:18: d9:46:6c:4d:e3:22:0c:5f:1b:24:21:c4:01:19:d5: 07:8a:cb:c5:52:25:34:3a:7c:bc:11:2b:99:a2:ca: 73:ff:30:07:c4:84:ca:8e:24:9f:b0:1a:e5:cd:ca: 6f:d4:91:d5:fa:1d:31:06:f0:a9:27:0e:63:3e:cc: f4:dc:61:f0:b1:d9:b9:74:0d:f4:a4:dc:f6:41:fc: 87:a7:c5:04:14:b4:35:cc:0b:ae:a2:7f:75:91:e9: ff:8b:6f:25:83:75:bc:47:7b:e4:05:f4:e5:d2:92: 18:af:35:f6:a0:80:16:e3:91:01:86:b1:ce:3c:84: 74:48:cc:30:60:b6:46:da:ba:a4:9e:94:66:f3:32: f8:9f:7f:50:c2:f0:f6:d6:a9:c5:7b:98:c5:75:4d: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A9:17:59:74:7B:FB:B5:EE:DE:8E:B8:B1:8E:B7:57:45:97:87:73 X509v3 Authority Key Identifier: keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:60:80:f8:01:1a:00:2c:94:0d:f3:07:d9:9c:1f:9c:ec:59: 55:13:13:51:41:2e:18:49:76:82:28:69:13:c2:66:08:21:1f: 54:58:fe:a5:01:31:f3:fb:dc:12:02:2d:24:17:91:f1:68:2f: 9b:e1:94:00:23:ea:40:22:63:a9:42:b3:20:e0:a1:fc:c6:f0: 8d:a3:f0:e6:f6:9d:85:28:d0:cf:65:7b:65:70:6b:79:3f:16: 34:32:ef:6d:81:69:29:c3:20:0f:7b:c2:2b:db:f2:91:ec:9d: 85:ab:39:0c:75:c5:42:71:07:3e:03:68:d2:2a:1a:f7:59:83: 51:9b:82:91:a3:36:74:37:bd:fa:56:52:f9:49:ff:0f:44:17: e8:1a:a6:e1:f3:fe:f1:5f:ab:fa:72:34:8a:94:e5:bd:da:37: a5:1e:14:f6:6c:9b:ae:60:ea:f1:70:3a:be:2d:ad:b9:5b:89: 2a:53:33:27:f5:b5:a8:b8:3e:10:da:16:a2:7e:d8:53:65:80: e9:ca:db:54:87:68:28:42:61:37:f3:ba:7d:22:e4:fd:32:fe: 3f:4b:f5:ad:77:9a:72:60:1b:53:9f:da:50:07:bf:71:9f:f1: 21:3b:d8:21:37:98:56:9d:5a:92:06:30:92:30:67:69:fd:1f: ac:91:bd:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7eyGCqD5KnsKEPDc6GAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTY1MjA0Y2ZlNDcwNzNjYzg2ZDZkZTQzYzQxZDg4MTdl MmU0MmUwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD EyhiMGE5MTc1OTc0N2JmYmI1ZWVkZThlYjhiMThlYjc1NzQ1OTc4NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuep4DMVovq4xDJmnZhGrX5sQ2/Q3 aiRjvFskLl7TWpr7BA2tvpWv1QWl91zhX9h3Owk8UiUmuMvqAo8aq5dA35DJq2kV MkGz4NGjn1D20UekphNBa6PMJeOkeNGrdpiSi4TlrMTf2xjZRmxN4yIMXxskIcQB GdUHisvFUiU0Ony8ESuZospz/zAHxITKjiSfsBrlzcpv1JHV+h0xBvCpJw5jPsz0 3GHwsdm5dA30pNz2QfyHp8UEFLQ1zAuuon91ken/i28lg3W8R3vkBfTl0pIYrzX2 oIAW45EBhrHOPIR0SMwwYLZG2rqknpRm8zL4n39QwvD21qnFe5jFdU3ZrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCpF1l0e/u17t6OuLGOt1dFl4dzMB8GA1UdIwQY MBaAFEEWUgTP5HBzzIbW3kPEHYgX4uQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAt MzRkMjhiNDNjMzI0LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAtMzRkMjhiNDNjMzI0 LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWCA+AEa ACyUDfMH2ZwfnOxZVRMTUUEuGEl2gihpE8JmCCEfVFj+pQEx8/vcEgItJBeR8Wgv m+GUACPqQCJjqUKzIOCh/MbwjaPw5vadhSjQz2V7ZXBreT8WNDLvbYFpKcMgD3vC K9vykeydhas5DHXFQnEHPgNo0ioa91mDUZuCkaM2dDe9+lZS+Un/D0QX6Bqm4fP+ 8V+r+nI0ipTlvdo3pR4U9mybrmDq8XA6vi2tuVuJKlMzJ/W1qLg+ENoWon7YU2WA 6crbVIdoKEJhN/O6fSLk/TL+P0v1rXeacmAbU5/aUAe/cZ/xITvYITeYVp1akgYw kjBnaf0frJG9Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:08 2025 by rpki-client