This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json) Hash identifier: ACfQMMxpkvDTo1MeyXedazSvQDK9f7hYSY2KcfxNvbw= Subject key identifier: 9F:9F:4E:2D:74:41:78:D7:85:F5:3F:9C:3A:5F:A8:DE:47:27:CF:4F Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98 Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898 Certificate serial: 019BF53DEA7CA2AA5B3AAFFB7831EC4F94E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 13:00:34 +0000 Manifest this update: Sun 25 Jan 2026 13:00:34 +0000 Manifest next update: Mon 26 Jan 2026 13:00:34 +0000 Files and hashes: 1: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (hash: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY=) 2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: mq5uqXBE3NXz7Pj4+d6QwLwUbEVTAjY0gQ2h/vXTIWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:ea:7c:a2:aa:5b:3a:af:fb:78:31:ec:4f:94:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898 Validity Not Before: Jan 25 13:00:34 2026 GMT Not After : Jan 26 13:00:34 2026 GMT Subject: CN=9f9f4e2d744178d785f53f9c3a5fa8de4727cf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:75:5c:da:94:57:13:da:bd:97:b4:ff:12: 96:b9:31:50:48:7f:13:fa:7e:e5:41:7f:6f:b6:61: 3b:18:0c:97:34:6b:63:f7:41:d1:d7:69:70:0f:7f: e3:91:f1:2c:5f:16:72:6f:8e:0d:31:85:00:6b:7a: b5:ff:e8:4f:5b:22:42:24:c7:69:d3:c4:c6:55:d1: b3:e3:0c:77:d4:3f:65:d0:01:50:a9:99:ef:6c:7f: 67:50:61:31:3a:37:41:c9:91:5d:ab:9e:c2:f0:f1: 01:b9:fc:5e:67:ce:15:c2:ce:04:95:bc:7a:46:af: 6a:ba:a8:66:19:d4:64:21:a2:35:ed:4d:a1:54:4d: f1:6e:2f:fb:7e:15:ec:6f:3e:a0:2b:c5:a4:96:79: 87:00:94:c3:8f:1d:cb:79:3d:63:d3:12:de:0f:a3: 43:f5:a3:09:23:46:a2:33:9a:06:07:ef:a6:37:5f: e0:44:78:25:9e:31:7c:18:fa:54:cc:dd:46:78:e0: e8:c9:eb:e8:f1:af:93:a3:71:f4:83:63:14:18:77: 9e:37:a9:13:53:13:c3:66:4a:e6:aa:f4:7f:d2:13: 08:2f:df:b0:4b:21:04:5d:df:0a:c6:6e:37:45:e2: 65:13:d3:99:4f:fb:d2:b7:ba:e7:33:57:8d:fa:71: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:4E:2D:74:41:78:D7:85:F5:3F:9C:3A:5F:A8:DE:47:27:CF:4F X509v3 Authority Key Identifier: keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:69:28:a6:5f:d2:2d:d6:d3:ed:76:dd:3f:7b:a7:b7:54:ed: 1a:d4:31:37:4d:4c:bc:03:ea:43:e2:e0:67:fe:f4:72:46:a6: 6f:59:f6:b4:d0:fc:ba:8b:f0:f8:f8:0e:f4:13:7f:0d:57:bf: 67:36:41:ba:a3:e7:ab:d8:95:8f:dc:86:56:e5:80:78:16:57: 63:c8:64:6e:d2:5d:96:56:9b:4d:02:81:ac:26:59:3b:c2:d5: 3a:74:5a:45:8d:58:d1:90:23:4c:d0:d7:7c:c5:6e:3e:41:74: 90:22:35:c0:57:02:a3:c1:46:eb:74:00:04:4c:fb:52:28:f2: 65:78:67:0f:57:41:8c:96:bd:43:0e:96:47:1a:b8:2e:2b:7e: 74:bd:ae:7e:2a:d4:b2:7b:f9:45:55:60:b9:e6:93:55:9e:55: b8:2f:15:3c:ef:17:8d:d5:28:92:89:69:33:7d:0b:ac:c7:37: ba:38:73:c8:4e:3e:04:f6:96:10:8d:33:63:ff:d2:db:46:5e: 1b:83:3d:0b:21:fa:79:79:fe:02:9b:b7:61:de:5b:60:c0:9f: ae:c2:2b:75:0a:64:08:aa:38:a9:3e:32:ec:f2:88:b1:2d:8c: 81:1b:fd:85:b5:fc:80:7e:f8:6d:8a:16:d0:45:8f:04:10:5f: 4a:30:24:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pep8oqpbOq/7eDHsT5TkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi OWI4OTgwHhcNMjYwMTI1MTMwMDM0WhcNMjYwMTI2MTMwMDM0WjAzMTEwLwYDVQQD Eyg5ZjlmNGUyZDc0NDE3OGQ3ODVmNTNmOWMzYTVmYThkZTQ3MjdjZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPZ1XNqUVxPavZe0/xKWuTFQSH8T +n7lQX9vtmE7GAyXNGtj90HR12lwD3/jkfEsXxZyb44NMYUAa3q1/+hPWyJCJMdp 08TGVdGz4wx31D9l0AFQqZnvbH9nUGExOjdByZFdq57C8PEBufxeZ84Vws4Elbx6 Rq9quqhmGdRkIaI17U2hVE3xbi/7fhXsbz6gK8WklnmHAJTDjx3LeT1j0xLeD6ND 9aMJI0aiM5oGB++mN1/gRHglnjF8GPpUzN1GeODoyevo8a+To3H0g2MUGHeeN6kT UxPDZkrmqvR/0hMIL9+wSyEEXd8Kxm43ReJlE9OZT/vSt7rnM1eN+nFOTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+fTi10QXjXhfU/nDpfqN5HJ89PMB8GA1UdIwQY MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt ZjJjNjdlY2EzZTViLzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWkopl/S LdbT7XbdP3unt1TtGtQxN01MvAPqQ+LgZ/70ckamb1n2tND8uovw+PgO9BN/DVe/ ZzZBuqPnq9iVj9yGVuWAeBZXY8hkbtJdllabTQKBrCZZO8LVOnRaRY1Y0ZAjTNDX fMVuPkF0kCI1wFcCo8FG63QABEz7UijyZXhnD1dBjJa9Qw6WRxq4Lit+dL2ufirU snv5RVVgueaTVZ5VuC8VPO8XjdUokolpM30LrMc3ujhzyE4+BPaWEI0zY//S20Ze G4M9CyH6eXn+Apu3Yd5bYMCfrsIrdQpkCKo4qT4y7PKIsS2MgRv9hbX8gH74bYoW 0EWPBBBfSjAkug== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:33 2026 by rpki-client