This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json) Hash identifier: e0PgGIZUmbsX8RvqDyU3taLQqCDgmr0oO/dsxw3apGQ= Subject key identifier: 13:70:76:9E:0B:41:E9:B2:31:74:E7:11:5F:21:D6:EE:A3:2A:73:B5 Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Certificate serial: 019BFB092FA0078839C19C55B69ACA966B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft Manifest number: 039E Signing time: Mon 26 Jan 2026 16:00:41 +0000 Manifest this update: Mon 26 Jan 2026 16:00:41 +0000 Manifest next update: Tue 27 Jan 2026 16:00:41 +0000 Files and hashes: 1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: Q10kLGcNObu/MR+yCdSj2Zt2PfW85ew5g8vC32qvXnk=) 2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:2f:a0:07:88:39:c1:9c:55:b6:9a:ca:96:6b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Validity Not Before: Jan 26 16:00:41 2026 GMT Not After : Jan 27 16:00:41 2026 GMT Subject: CN=1370769e0b41e9b23174e7115f21d6eea32a73b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:0b:06:56:4e:c6:5c:c2:82:8f:95:16:b1: ab:3e:d9:1b:68:28:93:c6:c0:25:81:0b:de:3c:8c: 15:c0:a7:f5:c0:27:38:78:0a:7f:b6:bf:80:95:1c: 82:9e:8a:1d:61:f7:a0:6e:3c:fb:5c:49:c5:a7:e0: bd:e8:66:b3:92:fa:a7:d5:b3:1c:09:91:61:c1:b0: a3:06:ea:05:c2:e6:63:68:1f:da:68:65:48:d8:ed: f5:91:ed:9e:23:c7:39:ed:d8:f9:67:6a:63:6e:46: 27:ff:51:2c:db:02:d3:ac:30:6e:fa:95:f8:ad:58: 34:f0:4f:17:ab:26:30:23:e0:a6:5a:5d:49:11:e6: 93:4d:85:a9:93:97:b9:69:90:6a:62:3e:9b:be:38: 6e:d8:8e:08:3b:29:b3:33:36:9a:af:24:6b:06:e8: 4e:a7:2c:7d:be:78:ea:94:af:3a:e0:26:3f:a1:f1: 1f:1d:2b:89:30:73:2a:45:fa:60:25:43:66:e2:0a: 8b:ca:e9:71:6e:3f:ef:39:32:34:a2:9f:81:c0:ec: 7b:97:fc:8e:d8:6c:51:0c:fc:c3:53:9f:7e:9b:07: 66:3e:53:6b:1d:10:ef:3c:87:ba:0e:40:a3:4f:fb: 00:3e:db:38:f9:54:f3:85:30:f2:4c:6e:25:fc:c2: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:76:9E:0B:41:E9:B2:31:74:E7:11:5F:21:D6:EE:A3:2A:73:B5 X509v3 Authority Key Identifier: keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c6:b9:07:2b:27:91:c3:88:6a:09:fb:41:46:ca:a7:1f:9c: c5:0f:ca:3d:33:8d:86:4a:06:d6:c6:7e:13:ce:32:fb:ad:d5: 67:7a:23:6a:d5:c4:fa:58:be:bf:30:cb:81:1d:d0:48:17:bf: d5:55:48:a9:6c:0a:d7:eb:fb:8a:74:74:e8:06:e3:44:70:c1: 98:0d:37:4f:c6:f4:59:ef:4f:b3:47:84:45:c5:e2:17:d2:f0: d4:26:f9:4b:0d:2e:23:cf:2e:a3:80:3a:ab:cc:91:23:85:4f: 84:fd:69:43:39:bc:ed:5b:c8:3d:3e:71:22:b5:fb:8e:86:64: 06:68:31:d8:6b:95:63:b9:d1:c1:1e:8d:f3:8e:5f:1f:dd:63: 36:be:8a:b7:0d:ea:74:56:9d:3c:f0:f7:79:79:df:82:28:d7: d6:15:7b:5f:f7:f0:85:7b:85:b9:96:04:52:cf:30:03:04:cf: 2c:9f:f5:38:49:26:82:fc:cd:ec:a8:51:ac:18:e8:d9:fd:2b: 3f:6e:c0:13:52:95:e8:68:68:21:96:14:70:18:f1:33:7e:b8: a4:8f:69:36:c4:94:b3:bc:24:54:f3:e3:68:dc:d7:2b:6b:4b: 95:0f:30:51:c1:95:05:ed:af:93:a4:02:e2:0d:6b:03:4f:58: 41:07:7f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CS+gB4g5wZxVtprKlmuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj NThlZTIwHhcNMjYwMTI2MTYwMDQxWhcNMjYwMTI3MTYwMDQxWjAzMTEwLwYDVQQD EygxMzcwNzY5ZTBiNDFlOWIyMzE3NGU3MTE1ZjIxZDZlZWEzMmE3M2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNELBlZOxlzCgo+VFrGrPtkbaCiT xsAlgQvePIwVwKf1wCc4eAp/tr+AlRyCnoodYfegbjz7XEnFp+C96Gazkvqn1bMc CZFhwbCjBuoFwuZjaB/aaGVI2O31ke2eI8c57dj5Z2pjbkYn/1Es2wLTrDBu+pX4 rVg08E8XqyYwI+CmWl1JEeaTTYWpk5e5aZBqYj6bvjhu2I4IOymzMzaaryRrBuhO pyx9vnjqlK864CY/ofEfHSuJMHMqRfpgJUNm4gqLyulxbj/vOTI0op+BwOx7l/yO 2GxRDPzDU59+mwdmPlNrHRDvPIe6DkCjT/sAPts4+VTzhTDyTG4l/MJyOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNwdp4LQemyMXTnEV8h1u6jKnO1MB8GA1UdIwQY MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasa5Bysn kcOIagn7QUbKpx+cxQ/KPTONhkoG1sZ+E84y+63VZ3ojatXE+li+vzDLgR3QSBe/ 1VVIqWwK1+v7inR06AbjRHDBmA03T8b0We9Ps0eERcXiF9Lw1Cb5Sw0uI88uo4A6 q8yRI4VPhP1pQzm87VvIPT5xIrX7joZkBmgx2GuVY7nRwR6N845fH91jNr6Ktw3q dFadPPD3eXnfgijX1hV7X/fwhXuFuZYEUs8wAwTPLJ/1OEkmgvzN7KhRrBjo2f0r P27AE1KV6GhoIZYUcBjxM364pI9pNsSUs7wkVPPjaNzXK2tLlQ8wUcGVBe2vk6QC 4g1rA09YQQd/oQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:22 2026 by rpki-client