This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json) Hash identifier: wdPK3lM2y5P/wJyzs62UDf/WAQysGYwkvJW89O69Pyk= Subject key identifier: AB:05:97:62:00:B1:E7:2B:6C:E4:B0:97:9E:77:74:E9:FB:36:06:C4 Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Certificate serial: 019BF53EB99F6391AEE7CDB1786E6D0B0417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft Manifest number: 039B Signing time: Sun 25 Jan 2026 13:01:27 +0000 Manifest this update: Sun 25 Jan 2026 13:01:27 +0000 Manifest next update: Mon 26 Jan 2026 13:01:27 +0000 Files and hashes: 1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: iHfmxonWvmgW3z2guaeQHUkbYFOWaL0CyD1bmR2t3M0=) 2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:b9:9f:63:91:ae:e7:cd:b1:78:6e:6d:0b:04:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Validity Not Before: Jan 25 13:01:27 2026 GMT Not After : Jan 26 13:01:27 2026 GMT Subject: CN=ab05976200b1e72b6ce4b0979e7774e9fb3606c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:45:7f:06:82:2f:c7:07:91:cb:ad:55:db: e0:95:82:c1:2b:d3:16:e8:7a:fc:24:c3:ea:89:7a: 1d:fc:86:d9:71:42:80:48:18:37:1a:00:19:90:a1: 6a:28:cf:3f:e8:42:27:b6:59:c3:ff:ac:da:47:11: 65:5a:18:77:0d:dc:93:f6:5d:8d:72:2c:bd:cd:dc: cc:2c:c3:8d:f8:e2:11:0f:25:72:57:32:22:9c:3b: bd:f3:4e:14:c9:6b:ff:39:c6:62:16:64:c7:63:8c: d0:9d:9e:15:ad:c6:96:f4:8e:05:2b:4d:3d:5e:ab: 0b:22:46:50:08:c6:15:f3:fa:f1:4e:c6:ec:b8:89: cf:4d:ba:8c:f3:4c:42:aa:27:d8:2d:60:cb:11:d8: 0e:c6:f1:a8:de:d1:3c:e2:7b:23:76:54:2e:4b:9d: a7:41:c0:34:02:4c:2e:e3:69:94:01:2b:ba:eb:ee: 05:37:e1:ef:72:a5:b7:8c:b2:48:ad:0c:c4:bd:ae: 1f:f3:de:72:d2:0d:fd:6a:05:b4:7b:f2:9c:ef:40: 76:b9:40:2b:f9:9d:6d:32:37:ee:1f:6e:21:93:6f: fb:56:48:b1:2f:d0:2d:22:d5:36:9e:84:33:15:e1: ec:0d:17:ce:20:7d:0f:56:4c:87:f1:0d:b1:f7:86: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:05:97:62:00:B1:E7:2B:6C:E4:B0:97:9E:77:74:E9:FB:36:06:C4 X509v3 Authority Key Identifier: keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f2:ae:de:a4:7e:11:48:50:6f:c8:57:57:3a:79:c7:18:db: 08:e6:83:83:53:11:cd:fe:c5:80:db:c3:d7:77:2f:ad:7c:96: 18:13:19:6a:a7:f5:98:22:43:65:13:ae:86:e3:7d:54:f1:ff: bf:39:3d:8d:7f:76:0a:52:02:da:15:72:9e:97:cd:2a:5b:93: bd:40:d8:f1:6c:0e:89:0e:91:90:43:72:25:e0:c1:d1:55:05: d8:a1:1d:d9:07:da:42:43:4a:a8:78:ba:a1:7a:d2:24:3f:d3: dd:2d:5d:4e:40:7c:18:70:68:d5:49:68:2e:a8:66:b7:18:53: de:63:dc:a4:fa:19:5f:bb:34:6d:7a:10:f2:ec:c6:38:c5:b5: 53:a6:48:ae:50:9b:a2:44:72:22:fd:2b:f3:8f:60:e8:f4:b5: 9b:00:0e:70:7c:a7:83:10:e6:2d:68:b7:ba:50:ee:1f:f4:75: f2:b7:86:ab:f4:85:f0:f6:2d:be:d7:f9:2a:49:4b:82:0e:2f: 4d:73:69:55:75:0e:f3:3e:fb:c2:8a:3f:1c:fd:a5:dc:0b:a2: 7a:9e:dd:f9:99:24:d5:84:f5:67:4c:8e:86:e0:70:5e:e8:0e: 7d:90:b7:46:f6:10:35:d3:08:40:d8:68:bd:79:b6:d7:5e:74: da:09:2c:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PrmfY5Gu582xeG5tCwQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj NThlZTIwHhcNMjYwMTI1MTMwMTI3WhcNMjYwMTI2MTMwMTI3WjAzMTEwLwYDVQQD EyhhYjA1OTc2MjAwYjFlNzJiNmNlNGIwOTc5ZTc3NzRlOWZiMzYwNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX1FfwaCL8cHkcutVdvglYLBK9MW 6Hr8JMPqiXod/IbZcUKASBg3GgAZkKFqKM8/6EIntlnD/6zaRxFlWhh3DdyT9l2N ciy9zdzMLMON+OIRDyVyVzIinDu9804UyWv/OcZiFmTHY4zQnZ4VrcaW9I4FK009 XqsLIkZQCMYV8/rxTsbsuInPTbqM80xCqifYLWDLEdgOxvGo3tE84nsjdlQuS52n QcA0Akwu42mUASu66+4FN+HvcqW3jLJIrQzEva4f895y0g39agW0e/Kc70B2uUAr +Z1tMjfuH24hk2/7VkixL9AtItU2noQzFeHsDRfOIH0PVkyH8Q2x94bu2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsFl2IAsecrbOSwl553dOn7NgbEMB8GA1UdIwQY MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPKu3qR+ EUhQb8hXVzp5xxjbCOaDg1MRzf7FgNvD13cvrXyWGBMZaqf1mCJDZROuhuN9VPH/ vzk9jX92ClIC2hVynpfNKluTvUDY8WwOiQ6RkENyJeDB0VUF2KEd2QfaQkNKqHi6 oXrSJD/T3S1dTkB8GHBo1UloLqhmtxhT3mPcpPoZX7s0bXoQ8uzGOMW1U6ZIrlCb okRyIv0r849g6PS1mwAOcHyngxDmLWi3ulDuH/R18reGq/SF8PYtvtf5KklLgg4v TXNpVXUO8z77woo/HP2l3Auiep7d+Zkk1YT1Z0yOhuBwXugOfZC3RvYQNdMIQNho vXm211502gksSw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:28 2026 by rpki-client