This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json) Hash identifier: J9X4+Flq7C1tT0a70dYZms9bez0FYNWBZasxfgcVopI= Subject key identifier: C2:61:FF:37:39:63:F9:A9:17:AE:71:D8:13:8E:82:B0:81:A9:B2:59 Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03 Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03 Certificate serial: 019C4322D66BCB1BB29D4E57854C59E6442C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft Manifest number: 0D87 Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: gApeDyiDqILic0cwNNA/9EXbrRz4HN1XON45xTpxilY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d6:6b:cb:1b:b2:9d:4e:57:85:4c:59:e6:44:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03 Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=c261ff373963f9a917ae71d8138e82b081a9b259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:c6:1c:2f:95:79:b0:40:13:ec:d0:98:4f: 69:9d:4a:3c:a2:18:85:f1:83:5b:da:8d:89:16:85: de:e7:5d:60:49:8b:ac:55:dc:95:42:0c:2c:22:de: 96:13:ff:50:60:af:76:3f:2c:1e:b5:06:80:fb:91: 10:37:18:0f:46:54:e0:a5:ee:69:77:f4:81:36:92: 8b:61:8f:6a:1a:11:28:7f:9f:bf:50:c6:12:c4:d1: 88:89:a9:5a:95:c6:45:4e:24:86:d3:8b:84:ea:b0: 33:25:9e:47:d9:d8:37:4c:91:c6:99:8a:e6:b8:ff: a0:18:3d:36:60:f3:59:c6:a4:00:6f:fa:4f:1e:59: 3a:ee:16:e9:00:e1:98:57:95:57:f2:ef:2b:ab:21: 93:0a:55:17:79:36:39:ae:c4:39:67:58:e9:79:eb: d2:12:70:15:f3:77:e0:b7:10:91:16:20:7b:83:0e: b3:0c:b5:6c:c2:2f:74:a8:c8:57:e5:2b:a2:5f:9d: 3b:38:3b:93:9d:d5:ca:49:c6:1f:b8:7f:1a:ed:c6: a5:24:f7:ba:11:95:cc:b3:4a:2d:99:1d:14:d8:6b: c5:09:60:7a:c1:eb:4f:f4:5d:39:73:90:c2:2f:06: 9a:24:af:ad:54:02:8e:af:b3:ba:95:e7:e3:ab:56: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:61:FF:37:39:63:F9:A9:17:AE:71:D8:13:8E:82:B0:81:A9:B2:59 X509v3 Authority Key Identifier: keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:82:95:70:37:cc:83:55:dd:07:d6:12:2d:cf:b5:0b:51:58: 40:4f:6f:94:00:ea:9c:46:54:30:76:ea:e9:53:3d:9f:96:fe: 84:79:35:2e:28:10:66:9e:da:c1:99:77:35:11:a9:7e:26:e7: 82:7f:fb:71:b8:d0:20:33:45:01:90:df:8f:b4:20:5d:9e:83: a1:48:c2:4b:45:5c:eb:76:bb:dc:89:75:c1:1d:3b:3d:50:12: d9:6e:1d:c3:c5:b6:7c:bc:8f:23:31:53:e5:af:bd:74:61:57: 5a:19:be:0f:d7:63:44:38:8c:3b:25:06:10:63:5e:89:58:a0: ca:e6:5a:4e:4c:1e:c4:79:86:d5:de:d6:ba:ec:d8:95:05:55: 90:a0:b1:ec:41:2e:dc:a3:db:74:c9:da:0b:91:cf:11:5f:38: 43:23:1d:34:cc:19:79:1a:64:eb:69:01:a3:0d:fd:d1:6a:81: 49:8a:2f:9f:01:58:a2:fc:d6:6f:ff:6d:ef:61:3f:af:c0:b8: 00:0b:d9:fc:21:6f:73:24:33:a8:93:b9:5f:46:7f:86:67:96: a6:5f:71:ff:8f:8f:98:78:a5:9a:f5:67:09:38:90:d7:d9:6f: 90:1b:e8:9a:e3:04:60:79:85:54:0e:cd:20:6c:c4:60:18:4d: 1b:88:67:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItZryxuynU5XhUxZ5kQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjg5YmQzNzM2Y2U0ZjAwODQ3Mzk2NWZkYWU0MDc0NTY3 Y2RhMDMwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD EyhjMjYxZmYzNzM5NjNmOWE5MTdhZTcxZDgxMzhlODJiMDgxYTliMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK/GHC+VebBAE+zQmE9pnUo8ohiF 8YNb2o2JFoXe511gSYusVdyVQgwsIt6WE/9QYK92PywetQaA+5EQNxgPRlTgpe5p d/SBNpKLYY9qGhEof5+/UMYSxNGIialalcZFTiSG04uE6rAzJZ5H2dg3TJHGmYrm uP+gGD02YPNZxqQAb/pPHlk67hbpAOGYV5VX8u8rqyGTClUXeTY5rsQ5Z1jpeevS EnAV83fgtxCRFiB7gw6zDLVswi90qMhX5SuiX507ODuTndXKScYfuH8a7calJPe6 EZXMs0otmR0U2GvFCWB6wetP9F05c5DCLwaaJK+tVAKOr7O6lefjq1YKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJh/zc5Y/mpF65x2BOOgrCBqbJZMB8GA1UdIwQY MBaAFEG4m9NzbOTwCEc5Zf2uQHRWfNoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84OGUxZWUtYjdjMi00NTIwLWE4NDkt MzBlOWZmZDgyNzU5LzEvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84OGUxZWUtYjdjMi00NTIwLWE4NDktMzBlOWZmZDgyNzU5 LzEvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYKVcDfM g1XdB9YSLc+1C1FYQE9vlADqnEZUMHbq6VM9n5b+hHk1LigQZp7awZl3NRGpfibn gn/7cbjQIDNFAZDfj7QgXZ6DoUjCS0Vc63a73Il1wR07PVAS2W4dw8W2fLyPIzFT 5a+9dGFXWhm+D9djRDiMOyUGEGNeiVigyuZaTkwexHmG1d7WuuzYlQVVkKCx7EEu 3KPbdMnaC5HPEV84QyMdNMwZeRpk62kBow390WqBSYovnwFYovzWb/9t72E/r8C4 AAvZ/CFvcyQzqJO5X0Z/hmeWpl9x/4+PmHilmvVnCTiQ19lvkBvomuMEYHmFVA7N IGzEYBhNG4hn8w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:59 2026 by rpki-client