This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json) Hash identifier: 6TK9OhX97pSO0pRIYHjlJNbgrKFDeUOQCUTjSNzGcwc= Subject key identifier: 5A:4B:64:13:D9:F8:DF:59:43:CE:C9:81:72:A1:BD:F9:AB:FD:48:F2 Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Certificate serial: 019AF31B1C2BCCC86D2A2FF2BA82985602AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft Manifest number: 1525 Signing time: Sat 06 Dec 2025 10:00:31 +0000 Manifest this update: Sat 06 Dec 2025 10:00:31 +0000 Manifest next update: Sun 07 Dec 2025 10:00:31 +0000 Files and hashes: 1: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (hash: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=) 2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: yfL7z/PxO2ksy3WMeh5n9M+pWmOwLOXfPLbmKuUxYnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1c:2b:cc:c8:6d:2a:2f:f2:ba:82:98:56:02:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Validity Not Before: Dec 6 10:00:31 2025 GMT Not After : Dec 7 10:00:31 2025 GMT Subject: CN=5a4b6413d9f8df5943cec98172a1bdf9abfd48f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:3a:64:e5:2f:43:b3:da:31:3c:c5:8a:c7: 02:ee:41:57:19:e2:f7:ee:09:43:fc:eb:76:20:af: 1b:1f:b5:c8:fa:43:ea:b4:76:91:c1:57:39:47:ca: c8:58:15:21:21:a9:ba:4d:49:a7:6c:1b:e3:5c:10: 42:8e:ab:da:93:e2:9b:29:12:35:f7:d6:3e:83:2c: eb:5f:d6:2b:56:3a:8e:d3:71:05:c0:da:b8:a7:c0: 51:49:4d:cd:98:ed:b4:6c:7a:85:d3:dc:14:12:a0: b9:a7:24:13:87:3c:42:ab:66:40:fb:37:06:d4:35: 1b:c7:42:85:de:92:26:f0:5f:b3:9e:d2:e8:d4:d2: a4:ac:3f:7f:c4:7f:b2:c9:08:d7:a1:6a:56:a5:81: 7d:26:5d:f9:b9:9a:e5:21:e8:85:0a:9a:9d:fa:24: af:db:ec:20:25:7d:6c:0e:66:0f:29:35:d3:b4:73: a6:ac:ed:83:40:87:24:c3:d4:37:ca:05:cc:82:5b: de:87:a5:46:b6:80:2e:b2:ed:2e:e0:96:86:14:24: ba:fc:42:af:db:26:65:8b:8f:bc:4b:2a:f5:30:85: 84:ca:df:b6:eb:37:12:b4:51:a7:59:12:cd:ab:c0: ac:6f:b8:47:ae:ea:d8:15:47:e5:07:fc:21:1d:24: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:64:13:D9:F8:DF:59:43:CE:C9:81:72:A1:BD:F9:AB:FD:48:F2 X509v3 Authority Key Identifier: keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c3:be:50:d0:2e:7f:cb:3c:98:08:e9:d1:7c:9a:58:3a:ba: 84:c2:3f:e9:8e:6c:d0:87:00:57:9a:27:39:c6:ef:ba:5c:94: 3f:9b:97:30:48:3a:38:51:58:58:32:76:51:eb:6b:2b:0a:94: 56:24:1f:77:35:74:f7:55:fb:b1:4b:a3:bd:4e:7e:6f:b0:1d: 08:1d:d5:b7:ae:3f:12:dc:30:14:e5:52:77:ea:83:07:08:d8: 82:02:63:c0:30:d5:93:98:07:2f:23:cd:75:ec:7b:d4:ec:0c: 62:e7:99:16:b6:4b:ec:09:46:55:78:de:3d:4d:49:0b:f0:ef: 0a:1e:71:62:3e:09:ae:e6:44:b9:59:5b:eb:57:c6:e1:39:76: b1:de:70:d1:29:f5:1d:6b:15:75:6c:d4:93:2d:66:e2:b9:f4: d2:3d:21:90:a4:b2:4e:b3:13:da:c3:80:6b:fa:54:d6:85:49: 60:2d:cd:2b:2d:35:49:3d:2d:b8:4c:e7:0b:91:da:e7:bc:48: 0d:4d:ae:db:78:39:f6:dd:7e:84:c5:92:26:c4:6b:eb:6a:55: 80:32:b7:90:99:e3:ed:ab:54:f8:92:a8:59:bb:00:23:58:89: 71:81:7b:b6:2a:c6:02:f3:d9:6f:2b:38:ca:43:ae:ef:45:72: 1a:6b:31:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxwrzMhtKi/yuoKYVgKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZiNmQ3ZTVkZDBjMzI4ZjZjZWFmN2U5ZTljMGQxY2I4 YzFkMjIwHhcNMjUxMjA2MTAwMDMxWhcNMjUxMjA3MTAwMDMxWjAzMTEwLwYDVQQD Eyg1YTRiNjQxM2Q5ZjhkZjU5NDNjZWM5ODE3MmExYmRmOWFiZmQ0OGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FI6ZOUvQ7PaMTzFiscC7kFXGeL3 7glD/Ot2IK8bH7XI+kPqtHaRwVc5R8rIWBUhIam6TUmnbBvjXBBCjqvak+KbKRI1 99Y+gyzrX9YrVjqO03EFwNq4p8BRSU3NmO20bHqF09wUEqC5pyQThzxCq2ZA+zcG 1DUbx0KF3pIm8F+zntLo1NKkrD9/xH+yyQjXoWpWpYF9Jl35uZrlIeiFCpqd+iSv 2+wgJX1sDmYPKTXTtHOmrO2DQIckw9Q3ygXMglveh6VGtoAusu0u4JaGFCS6/EKv 2yZli4+8Syr1MIWEyt+26zcStFGnWRLNq8Csb7hHrurYFUflB/whHSQWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpLZBPZ+N9ZQ87JgXKhvfmr/UjyMB8GA1UdIwQY MBaAFLO2ttfl3Qwyj2zq9+npwNHLjB0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGIt MjA3MTU0NmI3MGY5LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGItMjA3MTU0NmI3MGY5 LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsO+UNAu f8s8mAjp0XyaWDq6hMI/6Y5s0IcAV5onOcbvulyUP5uXMEg6OFFYWDJ2UetrKwqU ViQfdzV091X7sUujvU5+b7AdCB3Vt64/EtwwFOVSd+qDBwjYggJjwDDVk5gHLyPN dex71OwMYueZFrZL7AlGVXjePU1JC/DvCh5xYj4JruZEuVlb61fG4Tl2sd5w0Sn1 HWsVdWzUky1m4rn00j0hkKSyTrMT2sOAa/pU1oVJYC3NKy01ST0tuEznC5Ha57xI DU2u23g59t1+hMWSJsRr62pVgDK3kJnj7atU+JKoWbsAI1iJcYF7tirGAvPZbys4 ykOu70VyGmsx0w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:19:16 2025 by rpki-client