This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json) Hash identifier: 4k4GDwLVPT1WgLPgTs+cniIrdZ2VuIxnbbvARKJ0hOI= Subject key identifier: FE:A7:0E:D1:12:3B:89:16:88:88:24:A4:15:4B:45:CC:B4:47:AB:61 Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03 Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03 Certificate serial: 019B5976D80DD2715DCEB65EFAFA95729448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft Manifest number: 0D0E Signing time: Fri 26 Dec 2025 07:01:59 +0000 Manifest this update: Fri 26 Dec 2025 07:01:59 +0000 Manifest next update: Sat 27 Dec 2025 07:01:59 +0000 Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: rIAM1/TCAfZJNAJMEBqPd8RPPFa2VdpHDR3gpIUWVpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d8:0d:d2:71:5d:ce:b6:5e:fa:fa:95:72:94:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03 Validity Not Before: Dec 26 07:01:59 2025 GMT Not After : Dec 27 07:01:59 2025 GMT Subject: CN=fea70ed1123b8916888824a4154b45ccb447ab61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:42:3d:7a:6e:30:3a:19:bc:01:8d:d4:0a: eb:9d:05:84:a1:dd:17:67:f4:a2:13:2d:6c:d0:73: 13:fa:b2:7c:a3:6e:56:20:8c:4c:d9:67:e6:0c:3a: 22:5e:af:bf:53:43:f0:48:8b:0d:e9:85:07:5d:b1: 01:f5:ad:f1:2b:a4:99:82:0b:e9:0b:55:62:0a:d4: 07:bd:d9:e5:e7:28:1e:7e:95:c3:c3:15:4a:75:c8: 83:f2:ac:60:d4:6a:9e:39:ea:9d:a6:8e:4a:2c:00: b1:48:56:af:36:72:48:28:37:90:3f:0f:e4:b0:8f: bf:be:31:2c:7c:73:52:6c:8f:36:86:cd:73:6e:ee: 35:12:48:a2:70:79:f0:c6:f9:13:13:8d:04:ca:26: 9c:25:22:a5:51:90:3e:d1:88:93:2c:55:b8:18:05: ba:4e:2c:1c:94:37:fe:52:cb:6e:f9:85:03:77:8d: 5e:30:88:24:8e:eb:db:a4:15:97:c4:ad:ba:3c:47: b3:0d:52:20:f8:29:7d:13:e2:e6:3b:5a:06:98:ac: 18:e1:ce:c1:25:13:18:25:ed:7b:16:02:d8:bf:ce: ba:5e:4a:d3:32:63:8e:ed:e8:51:88:1f:0b:af:4f: e4:91:a5:c2:29:1f:d2:0b:2c:2f:89:0d:c0:e1:f8: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A7:0E:D1:12:3B:89:16:88:88:24:A4:15:4B:45:CC:B4:47:AB:61 X509v3 Authority Key Identifier: keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:42:21:88:04:44:ea:08:88:a4:59:72:91:49:6f:46:27:17: 04:a6:e0:63:de:8d:77:b7:1a:64:72:82:82:15:8d:00:91:0b: 38:a7:ab:8f:de:52:c2:b9:38:9a:4a:9e:a8:7d:49:2c:e1:77: 74:04:2e:56:b4:d9:38:41:d5:c2:8b:64:09:43:2b:3f:35:53: 57:ba:79:1f:78:66:7f:8c:b4:94:00:16:5f:cd:72:d9:47:1e: 18:ca:98:dc:ff:7c:ae:88:56:39:c9:6a:77:48:3e:87:48:86: 6c:d9:22:a2:d4:fd:c2:86:e1:d6:f3:a5:57:f0:ea:28:f2:38: 49:99:a4:e5:ea:af:6a:df:3e:98:f7:24:dd:ad:f5:69:62:79: 48:a4:e3:77:34:15:c7:91:da:7d:da:41:15:67:51:67:ce:50: 64:5c:fa:bf:a9:b6:4c:19:e2:52:a1:c7:ce:fa:cb:a0:3f:98: d7:d0:87:6d:b0:ef:c1:e7:7b:8e:1f:07:0b:a4:e4:e8:4b:f4: 90:91:4b:57:b0:89:0a:a8:ad:d1:8c:a4:c7:16:4f:d4:cd:4f: 5f:2e:a5:0d:40:97:b6:2b:72:81:e7:08:4f:83:e3:5b:cb:3a: 8e:ad:48:88:5f:e6:d1:41:d7:e3:5b:40:96:e7:e5:eb:d1:57: 85:c2:d7:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtgN0nFdzrZe+vqVcpRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjg5YmQzNzM2Y2U0ZjAwODQ3Mzk2NWZkYWU0MDc0NTY3 Y2RhMDMwHhcNMjUxMjI2MDcwMTU5WhcNMjUxMjI3MDcwMTU5WjAzMTEwLwYDVQQD EyhmZWE3MGVkMTEyM2I4OTE2ODg4ODI0YTQxNTRiNDVjY2I0NDdhYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVRCPXpuMDoZvAGN1ArrnQWEod0X Z/SiEy1s0HMT+rJ8o25WIIxM2WfmDDoiXq+/U0PwSIsN6YUHXbEB9a3xK6SZggvp C1ViCtQHvdnl5ygefpXDwxVKdciD8qxg1GqeOeqdpo5KLACxSFavNnJIKDeQPw/k sI+/vjEsfHNSbI82hs1zbu41EkiicHnwxvkTE40EyiacJSKlUZA+0YiTLFW4GAW6 TiwclDf+Ustu+YUDd41eMIgkjuvbpBWXxK26PEezDVIg+Cl9E+LmO1oGmKwY4c7B JRMYJe17FgLYv866XkrTMmOO7ehRiB8Lr0/kkaXCKR/SCywviQ3A4fgYUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6nDtESO4kWiIgkpBVLRcy0R6thMB8GA1UdIwQY MBaAFEG4m9NzbOTwCEc5Zf2uQHRWfNoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84OGUxZWUtYjdjMi00NTIwLWE4NDkt MzBlOWZmZDgyNzU5LzEvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84OGUxZWUtYjdjMi00NTIwLWE4NDktMzBlOWZmZDgyNzU5 LzEvUWJpYjAzTnM1UEFJUnpsbF9hNUFkRlo4MmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykIhiARE 6giIpFlykUlvRicXBKbgY96Nd7caZHKCghWNAJELOKerj95Swrk4mkqeqH1JLOF3 dAQuVrTZOEHVwotkCUMrPzVTV7p5H3hmf4y0lAAWX81y2UceGMqY3P98rohWOclq d0g+h0iGbNkiotT9wobh1vOlV/DqKPI4SZmk5eqvat8+mPck3a31aWJ5SKTjdzQV x5HafdpBFWdRZ85QZFz6v6m2TBniUqHHzvrLoD+Y19CHbbDvwed7jh8HC6Tk6Ev0 kJFLV7CJCqit0YykxxZP1M1PXy6lDUCXtitygecIT4PjW8s6jq1IiF/m0UHX41tA lufl69FXhcLXXg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:05 2025 by rpki-client