This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json) Hash identifier: QZ8W0mmBwHUEWCxRbbT232odk1IK8bVfUagR+U8lXbI= Subject key identifier: 44:C8:75:55:D6:3A:18:5F:1A:66:71:81:31:3D:D5:0C:57:DC:4E:79 Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e Certificate serial: 019B405B19593736392CE21AC479BC10B991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft Manifest number: 0D99 Signing time: Sun 21 Dec 2025 10:01:10 +0000 Manifest this update: Sun 21 Dec 2025 10:01:10 +0000 Manifest next update: Mon 22 Dec 2025 10:01:10 +0000 Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: UeYcRjRwLnYvxci1aIov1byhIUomMfjHrCXlpD12JwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:19:59:37:36:39:2c:e2:1a:c4:79:bc:10:b9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e Validity Not Before: Dec 21 10:01:10 2025 GMT Not After : Dec 22 10:01:10 2025 GMT Subject: CN=44c87555d63a185f1a667181313dd50c57dc4e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:2e:4c:d5:da:4e:8c:83:a0:56:b0:00:20: 1b:2a:8d:f3:c9:d5:d1:39:42:1a:38:ad:ed:15:a3: aa:b1:b0:73:5d:da:24:01:3a:d0:31:1d:50:b2:3c: ea:34:cf:e6:55:d4:cb:98:7e:aa:fa:89:52:90:cf: 24:5a:bb:de:96:d1:50:8b:af:ab:c0:c0:c4:48:3c: 12:1f:1a:91:97:bd:ca:9f:a5:29:07:ab:bb:1e:12: e8:a6:eb:83:85:b3:f4:0c:e5:ae:fc:90:a4:95:49: 24:65:6c:5e:ec:40:61:bd:1e:90:0e:e4:d2:34:bc: e9:0e:d6:4c:73:fc:42:65:cc:c3:7c:c3:ff:f8:30: 60:d3:68:4a:9e:3e:7d:ed:61:dc:dc:83:43:22:ce: 04:70:84:4b:da:49:66:03:b9:a5:dd:f4:09:92:8a: e2:8e:e5:3a:a9:cd:81:ec:52:8f:2d:96:f3:81:a5: 05:69:2e:e7:67:9a:5c:55:e5:ba:92:a1:99:8e:9d: bd:18:6c:48:ce:e4:6c:7b:be:72:d2:ef:0c:59:42: 3e:32:c0:b8:52:c3:d8:9a:d2:c6:75:c0:9c:08:2b: 7a:af:0a:52:22:c1:34:3c:9a:3d:da:69:67:66:f5: f5:a3:fc:e4:ae:de:87:a4:ef:87:c4:af:fc:d8:03: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C8:75:55:D6:3A:18:5F:1A:66:71:81:31:3D:D5:0C:57:DC:4E:79 X509v3 Authority Key Identifier: keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:98:d0:7f:db:7d:76:d9:11:67:71:33:34:fe:f9:a3:a3:25: 4a:6d:95:b8:11:0f:e1:5e:f3:9d:e5:ce:ad:47:c7:2e:33:e5: c5:48:dd:40:2f:2a:d5:42:c5:53:9b:ae:b9:48:a9:7e:59:e2: 6a:86:13:c3:43:b0:82:09:cf:df:b2:32:01:ee:44:16:85:42: 54:88:25:b9:94:15:fc:12:2f:94:78:94:77:81:6e:da:86:9a: 18:3a:48:60:67:fd:8c:f1:97:41:4b:c2:77:cb:49:13:e4:04: fe:4b:03:55:84:3b:18:87:ba:2f:59:a1:2e:8c:e8:68:d7:54: 53:29:95:df:0a:25:dc:2f:f5:50:3d:a2:32:24:2b:c8:45:4b: 76:43:44:f4:72:cb:be:52:c3:56:74:9d:ee:65:d9:04:4b:a2: bf:4c:f1:a5:f7:70:6b:0d:71:8d:e2:12:20:ec:57:e8:5b:4a: f2:1f:6c:01:6f:b7:00:c0:30:d2:0b:d8:e5:17:d3:d5:d7:2d: c5:34:bc:23:27:c5:54:58:6c:10:2e:04:04:69:c2:0f:19:21: 29:65:76:78:d4:c7:8c:b4:1d:de:ae:ed:ef:07:25:00:57:56: ed:5a:7d:e2:76:11:b5:4f:a4:52:79:85:7f:a4:60:82:ee:a0: b5:38:36:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxlZNzY5LOIaxHm8ELmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTY1MjA0Y2ZlNDcwNzNjYzg2ZDZkZTQzYzQxZDg4MTdl MmU0MmUwHhcNMjUxMjIxMTAwMTEwWhcNMjUxMjIyMTAwMTEwWjAzMTEwLwYDVQQD Eyg0NGM4NzU1NWQ2M2ExODVmMWE2NjcxODEzMTNkZDUwYzU3ZGM0ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn18uTNXaToyDoFawACAbKo3zydXR OUIaOK3tFaOqsbBzXdokATrQMR1QsjzqNM/mVdTLmH6q+olSkM8kWrveltFQi6+r wMDESDwSHxqRl73Kn6UpB6u7HhLopuuDhbP0DOWu/JCklUkkZWxe7EBhvR6QDuTS NLzpDtZMc/xCZczDfMP/+DBg02hKnj597WHc3INDIs4EcIRL2klmA7ml3fQJkori juU6qc2B7FKPLZbzgaUFaS7nZ5pcVeW6kqGZjp29GGxIzuRse75y0u8MWUI+MsC4 UsPYmtLGdcCcCCt6rwpSIsE0PJo92mlnZvX1o/zkrt6HpO+HxK/82AOtWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETIdVXWOhhfGmZxgTE91QxX3E55MB8GA1UdIwQY MBaAFEEWUgTP5HBzzIbW3kPEHYgX4uQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAt MzRkMjhiNDNjMzI0LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAtMzRkMjhiNDNjMzI0 LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZjQf9t9 dtkRZ3EzNP75o6MlSm2VuBEP4V7zneXOrUfHLjPlxUjdQC8q1ULFU5uuuUipflni aoYTw0OwggnP37IyAe5EFoVCVIgluZQV/BIvlHiUd4Fu2oaaGDpIYGf9jPGXQUvC d8tJE+QE/ksDVYQ7GIe6L1mhLozoaNdUUymV3wol3C/1UD2iMiQryEVLdkNE9HLL vlLDVnSd7mXZBEuiv0zxpfdwaw1xjeISIOxX6FtK8h9sAW+3AMAw0gvY5RfT1dct xTS8IyfFVFhsEC4EBGnCDxkhKWV2eNTHjLQd3q7t7wclAFdW7Vp94nYRtU+kUnmF f6Rggu6gtTg2jg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:17 2025 by rpki-client