This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json) Hash identifier: 9nWrMaVO1Hbi2IC/Nu4n0xVVY0TqaGSuGI3G633rKzY= Subject key identifier: 01:1F:20:9E:7E:70:77:0D:79:37:3B:7A:54:BA:06:C5:AD:B8:32:26 Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e Certificate serial: 019C4321D947C9941EB75F03238119AFB58A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft Manifest number: 0E1F Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: Hwpaf1fSZZM8XdXuWro5r28G+iV+eMc5CFM0HdZw+oQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d9:47:c9:94:1e:b7:5f:03:23:81:19:af:b5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=011f209e7e70770d79373b7a54ba06c5adb83226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:91:7e:10:0e:5b:8a:ae:0d:6d:f9:26:be: 88:6d:37:14:16:f7:54:0d:96:eb:8c:e1:9d:47:d3: a6:38:ad:2a:d6:68:65:53:c0:ac:ad:ff:4b:18:50: 08:a2:d6:69:51:36:2b:68:c3:e9:e3:04:9a:57:28: e0:03:5f:4d:77:41:b9:fc:9d:c3:29:97:9c:70:84: 13:2d:f2:2c:54:9c:7e:d1:65:09:b1:f4:46:b4:6b: d0:ff:20:69:3a:2a:dd:fa:0f:50:08:85:53:6d:85: 2e:39:cd:3c:8d:16:8d:6d:63:be:b5:4f:25:d2:5f: a2:8e:ae:74:d9:15:a1:c4:cd:37:df:a0:dd:c9:3c: 50:95:28:d5:13:63:3b:56:29:a1:5d:e5:cb:02:88: 7a:f3:ec:e4:eb:21:a4:ad:91:82:dc:0d:3d:b7:9f: 61:2e:3b:d4:ab:ed:5b:7c:5d:ab:1e:e3:5a:bf:ca: ca:25:19:29:65:95:19:ae:12:04:e3:ba:bc:67:a0: f3:93:91:21:85:c2:8b:74:75:65:64:59:7a:6e:2a: 02:d9:e2:14:d4:6e:db:96:1b:2c:61:15:0e:d7:84: 4b:08:76:77:32:d9:6e:d1:b0:93:ab:25:0c:42:61: 3a:e3:97:e2:69:e3:45:cc:b4:6c:6f:31:f4:89:c1: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:20:9E:7E:70:77:0D:79:37:3B:7A:54:BA:06:C5:AD:B8:32:26 X509v3 Authority Key Identifier: keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:99:ac:6c:f6:d7:fe:91:3b:65:0d:d7:4f:f3:77:0a:40:3a: 77:d8:02:74:5d:33:23:d7:ba:12:6f:ec:ad:51:1f:90:e2:14: 00:4b:e3:53:70:87:9f:45:16:ed:ae:52:74:48:b0:cc:e8:4e: e0:04:ef:44:1b:fd:76:5f:54:81:04:b6:2b:6d:7c:79:d6:0d: 0d:21:67:00:f3:1b:45:1e:56:bd:67:ef:eb:04:da:10:d3:2c: 5b:94:3b:9c:23:1a:f5:7b:27:c3:0a:c2:01:a1:39:ce:cc:bf: e0:f5:d4:6f:49:34:60:05:9b:bc:64:c0:b2:bf:f0:ae:a8:96: 85:4f:1b:d4:a3:36:7a:02:6d:d0:02:6b:db:ab:f3:68:d0:35: 0a:1e:af:02:58:60:af:b2:a2:71:49:16:92:96:7b:8b:df:13: 34:98:b0:b6:85:50:15:00:39:3e:58:90:27:8c:43:9f:a1:6e: 07:7b:1e:97:07:e9:c0:92:a6:35:69:60:ab:c1:21:04:ee:3d: ab:2e:f0:c2:30:5d:f0:fd:81:2a:f4:0c:c4:c3:07:3d:63:3c: 0d:e6:7c:bd:da:26:61:be:3e:e2:4d:e1:81:0f:b0:00:c5:4b: c5:ee:ec:1f:e0:95:3e:87:40:67:b8:50:77:07:e1:0b:9e:c9: 75:b8:6d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdlHyZQet18DI4EZr7WKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMTY1MjA0Y2ZlNDcwNzNjYzg2ZDZkZTQzYzQxZDg4MTdl MmU0MmUwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EygwMTFmMjA5ZTdlNzA3NzBkNzkzNzNiN2E1NGJhMDZjNWFkYjgzMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1byRfhAOW4quDW35Jr6IbTcUFvdU DZbrjOGdR9OmOK0q1mhlU8Csrf9LGFAIotZpUTYraMPp4wSaVyjgA19Nd0G5/J3D KZeccIQTLfIsVJx+0WUJsfRGtGvQ/yBpOird+g9QCIVTbYUuOc08jRaNbWO+tU8l 0l+ijq502RWhxM0336DdyTxQlSjVE2M7VimhXeXLAoh68+zk6yGkrZGC3A09t59h LjvUq+1bfF2rHuNav8rKJRkpZZUZrhIE47q8Z6Dzk5EhhcKLdHVlZFl6bioC2eIU 1G7blhssYRUO14RLCHZ3Mtlu0bCTqyUMQmE645fiaeNFzLRsbzH0icHnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEfIJ5+cHcNeTc7elS6BsWtuDImMB8GA1UdIwQY MBaAFEEWUgTP5HBzzIbW3kPEHYgX4uQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAt MzRkMjhiNDNjMzI0LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mZDM1NjgtZGRlOS00MDljLWJiZDAtMzRkMjhiNDNjMzI0 LzEvUVJaU0JNX2tjSFBNaHRiZVE4UWRpQmZpNUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZmsbPbX /pE7ZQ3XT/N3CkA6d9gCdF0zI9e6Em/srVEfkOIUAEvjU3CHn0UW7a5SdEiwzOhO 4ATvRBv9dl9UgQS2K218edYNDSFnAPMbRR5WvWfv6wTaENMsW5Q7nCMa9XsnwwrC AaE5zsy/4PXUb0k0YAWbvGTAsr/wrqiWhU8b1KM2egJt0AJr26vzaNA1Ch6vAlhg r7KicUkWkpZ7i98TNJiwtoVQFQA5PliQJ4xDn6FuB3selwfpwJKmNWlgq8EhBO49 qy7wwjBd8P2BKvQMxMMHPWM8DeZ8vdomYb4+4k3hgQ+wAMVLxe7sH+CVPodAZ7hQ dwfhC57JdbhtFw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:00 2026 by rpki-client