This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json) Hash identifier: YkhBgiWVvSKj0o7JxyOt3FAosXZlQwVNOUlaM6KF7kc= Subject key identifier: EF:A9:AD:C3:61:53:EC:4C:A6:5D:91:40:C1:4A:63:55:0D:1C:71:38 Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03 Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03 Certificate serial: 019AF50A7B9DE271F9FB4CC9D80287F5D6AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft Manifest number: 0CDA Signing time: Sat 06 Dec 2025 19:01:36 +0000 Manifest this update: Sat 06 Dec 2025 19:01:36 +0000 Manifest next update: Sun 07 Dec 2025 19:01:36 +0000 Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: lzDixg4ZneQlY2MP0bWfttJQqOy4xjssK/ljXPI925M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:7b:9d:e2:71:f9:fb:4c:c9:d8:02:87:f5:d6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03 Validity Not Before: Dec 6 19:01:36 2025 GMT Not After : Dec 7 19:01:36 2025 GMT Subject: CN=efa9adc36153ec4ca65d9140c14a63550d1c7138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:23:9a:48:ce:5e:b8:ae:2e:35:76:67:ba: f9:5d:5f:cd:93:5f:ed:b5:7a:c9:1f:24:21:20:c4: 8f:e0:6c:3f:c6:b0:69:64:46:c2:63:8c:6f:76:17: 98:3a:fb:3b:bb:e4:af:34:f6:24:f3:74:a1:ac:97: 45:25:0d:8e:1a:d8:af:f4:f6:44:cb:3a:93:d1:2b: 14:6a:14:0a:eb:68:41:d1:e2:90:5d:18:53:8c:73: 79:93:68:bf:4b:aa:63:73:d2:53:32:d4:ca:b2:0a: 92:df:6b:86:a0:5d:0c:e3:cd:49:fb:c9:63:35:17: ea:d6:e3:48:68:32:16:b1:5a:e8:56:15:7c:16:7a: 47:52:76:c9:f1:4c:90:d9:10:4e:d7:5d:45:26:6b: 47:7b:27:13:67:07:79:b0:9a:2e:da:50:e1:6b:54: 46:79:a3:89:15:e8:86:f5:27:fc:9e:07:7e:79:af: f5:6e:4e:41:91:be:7d:a4:87:a1:ab:7c:67:8e:c3: ab:b5:aa:da:73:c9:a0:61:02:66:f0:0e:b3:2e:2d: 6e:83:50:2b:a3:61:a3:1d:81:5a:c0:37:8a:d6:89: b0:9b:f5:a8:f7:e3:cb:9f:09:b0:41:f3:67:83:8a: 43:9f:8c:96:bf:b4:52:27:1f:6e:1b:51:f1:40:fe: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A9:AD:C3:61:53:EC:4C:A6:5D:91:40:C1:4A:63:55:0D:1C:71:38 X509v3 Authority Key Identifier: keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:01:04:89:b1:41:c4:0b:7b:c6:62:b4:fd:0d:06:54:c1:88: de:5f:24:2d:c1:b2:c7:ee:09:b9:f2:21:3e:48:f7:0f:8e:33: 49:30:3f:8f:75:1c:9c:7f:e7:12:37:5f:76:cc:6a:59:8f:17: 81:44:66:6a:2e:e1:08:41:fa:70:0b:77:c9:7f:d5:5d:25:5b: 35:68:b6:5b:48:1b:9c:2d:ac:91:24:15:22:06:0a:5d:94:f2: ab:c2:fb:fd:9f:ae:ab:dc:f4:70:ad:25:ec:31:c2:d6:16:dc: 97:92:61:9d:4d:3b:d3:27:2b:67:4b:2f:0e:29:a6:3f:95:6d: ae:1f:b1:19:86:c2:f6:b7:1f:4b:84:e0:8f:4b:f5:43:91:76: fa:51:10:e2:aa:cc:cd:1b:27:08:80:55:ab:98:83:09:60:28: 00:1f:46:aa:c9:d4:1c:6f:6a:09:82:17:f6:2d:d2:ac:3a:f2: 78:f5:ef:43:e6:ab:b7:b3:8c:5a:c8:34:77:aa:0f:a2:f4:17: b9:b3:31:f2:76:e1:a0:07:d2:a9:4b:bf:0e:86:83:c1:d2:65: b6:7d:fd:17:9f:1a:1a:3c:6e:69:b8:98:0f:fe:81:22:04:85: 4e:ff:23:03:f8:d2:d9:b7:4b:a2:d2:a0:46:12:d1:7b:28:86: 40:8f:13:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cnud4nH5+0zJ2AKH9dauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjg5YmQzNzM2Y2U0ZjAwODQ3Mzk2NWZkYWU0MDc0NTY3 Y2RhMDMwHhcNMjUxMjA2MTkwMTM2WhcNMjUxMjA3MTkwMTM2WjAzMTEwLwYDVQQD EyhlZmE5YWRjMzYxNTNlYzRjYTY1ZDkxNDBjMTRhNjM1NTBkMWM3MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ojmkjOXriuLjV2Z7r5XV/Nk1/t tXrJHyQhIMSP4Gw/xrBpZEbCY4xvdheYOvs7u+SvNPYk83ShrJdFJQ2OGtiv9PZE yzqT0SsUahQK62hB0eKQXRhTjHN5k2i/S6pjc9JTMtTKsgqS32uGoF0M481J+8lj NRfq1uNIaDIWsVroVhV8FnpHUnbJ8UyQ2RBO111FJmtHeycTZwd5sJou2lDha1RG eaOJFeiG9Sf8ngd+ea/1bk5Bkb59pIehq3xnjsOrtarac8mgYQJm8A6zLi1ug1Ar o2GjHYFawDeK1omwm/Wo9+PLnwmwQfNng4pDn4yWv7RSJx9uG1HxQP569QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+prcNhU+xMpl2RQMFKY1UNHHE4MB8GA1UdIwQY MBaAFEG4m9NzbOTwCEc5Zf2uQHRWfNoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84OGUxZWUtYjdjMi00NTIwLWE4NDkt MzBlOWZmZDgyNzU5LzEvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84OGUxZWUtYjdjMi00NTIwLWE4NDktMzBlOWZmZDgyNzU5 LzEvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAEEibFB xAt7xmK0/Q0GVMGI3l8kLcGyx+4JufIhPkj3D44zSTA/j3UcnH/nEjdfdsxqWY8X gURmai7hCEH6cAt3yX/VXSVbNWi2W0gbnC2skSQVIgYKXZTyq8L7/Z+uq9z0cK0l 7DHC1hbcl5JhnU070ycrZ0svDimmP5Vtrh+xGYbC9rcfS4Tgj0v1Q5F2+lEQ4qrM zRsnCIBVq5iDCWAoAB9GqsnUHG9qCYIX9i3SrDryePXvQ+art7OMWsg0d6oPovQX ubMx8nbhoAfSqUu/DoaDwdJltn39F58aGjxuabiYD/6BIgSFTv8jA/jS2bdLotKg RhLReyiGQI8TiA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:49 2025 by rpki-client