This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json) Hash identifier: 9aBbA53ST2po9jod4nruRrPwFHvnozP95QW43af7q7c= Subject key identifier: 0D:2F:C2:82:96:D7:D7:E7:94:56:AE:A5:14:6E:BE:48:0B:BE:B1:5A Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Certificate serial: 019BF8AD1A10F4066E6BA08DC8F90FEED51D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft Manifest number: 15AD Signing time: Mon 26 Jan 2026 05:00:52 +0000 Manifest this update: Mon 26 Jan 2026 05:00:52 +0000 Manifest next update: Tue 27 Jan 2026 05:00:52 +0000 Files and hashes: 1: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (hash: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU=) 2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: hNxvRhRN2p4C5iymLvW5LbxsAp0yef8YR5E5Nel0dDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:1a:10:f4:06:6e:6b:a0:8d:c8:f9:0f:ee:d5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Validity Not Before: Jan 26 05:00:52 2026 GMT Not After : Jan 27 05:00:52 2026 GMT Subject: CN=0d2fc28296d7d7e79456aea5146ebe480bbeb15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:e6:1e:a0:82:06:f2:04:95:5e:76:e9:9d: f5:c7:e1:de:b6:47:4f:d2:5d:18:aa:2b:2a:b3:34: 64:76:e5:cf:82:ac:00:9c:21:18:5a:9c:3e:32:64: 4b:27:69:5d:02:0c:54:40:6b:bc:66:9b:2e:96:c8: d6:d7:25:48:a1:bc:83:1e:27:81:32:3a:79:cf:40: 08:a7:22:62:d1:b7:13:fc:2a:e5:ef:36:96:e1:48: 08:db:37:63:72:0b:46:1d:ba:4e:06:e5:30:75:3b: 5a:02:f0:10:32:57:b1:42:82:0e:6a:12:93:48:7d: d2:30:34:59:2f:e1:d2:f8:44:25:c9:4c:a0:b9:ef: 4d:08:88:18:cb:74:8b:6f:f9:c5:29:de:11:f5:c3: 2f:07:49:c8:c7:8f:c9:6e:59:71:6e:dc:17:0d:f4: 6a:4c:2d:52:d3:06:8e:50:56:48:5b:f8:fd:9d:3d: 67:76:bf:0e:67:a8:0c:6d:21:01:d6:e7:17:02:4a: 52:bb:6d:06:63:d3:ac:f6:90:a3:31:3b:d7:f0:1d: b1:e1:e2:3c:5c:0b:c0:fa:c1:63:b7:34:d7:50:87: 55:0a:39:32:04:59:8d:5f:21:27:fd:2c:e3:7c:31: 29:f7:a0:5b:9a:77:ec:2c:f1:10:30:75:ca:cf:b6: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2F:C2:82:96:D7:D7:E7:94:56:AE:A5:14:6E:BE:48:0B:BE:B1:5A X509v3 Authority Key Identifier: keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:22:ce:02:21:2c:91:84:85:88:0c:4b:dd:93:1c:c6:be:c1: 1a:db:ae:4f:12:02:80:ee:20:21:6a:d3:a8:f1:2d:13:2e:81: bb:85:81:da:b1:5e:97:ee:65:d0:3d:76:90:63:e5:b9:aa:94: b1:29:16:10:0a:d1:68:d1:d5:e1:04:39:df:56:3e:53:ea:eb: d7:dd:2b:9a:eb:71:12:4d:9a:a1:69:25:c0:97:f9:19:db:84: b3:23:6a:b2:34:27:3e:ae:3d:3c:f7:ed:53:15:e6:f0:d4:a4: a5:2a:9b:ec:cc:19:ec:ff:a6:24:99:55:d2:74:62:6b:b1:0f: 8e:6c:71:93:1c:77:77:05:68:0f:c6:19:12:61:5a:24:67:a2: d5:a8:f5:c5:45:df:1d:f9:2b:d8:37:ba:dd:27:ea:af:c4:82: e6:55:1a:7d:8f:42:11:4e:a3:33:cc:8d:63:4a:a4:53:89:a4: 0c:6d:80:76:84:8d:80:20:78:7c:9c:2c:15:6d:bf:9d:ed:7d: 21:9a:06:b2:63:bc:f7:1a:30:92:5e:c1:0c:41:61:4b:22:e2: 1b:79:be:08:97:c6:f6:31:10:c5:03:6b:2b:7f:c9:e9:0c:07: c0:7a:fd:6b:d2:2e:43:46:c6:7b:c6:cd:b4:8a:e2:1f:29:26: 6a:1a:b1:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rRoQ9AZua6CNyPkP7tUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZiNmQ3ZTVkZDBjMzI4ZjZjZWFmN2U5ZTljMGQxY2I4 YzFkMjIwHhcNMjYwMTI2MDUwMDUyWhcNMjYwMTI3MDUwMDUyWjAzMTEwLwYDVQQD EygwZDJmYzI4Mjk2ZDdkN2U3OTQ1NmFlYTUxNDZlYmU0ODBiYmViMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h/mHqCCBvIElV526Z31x+HetkdP 0l0YqisqszRkduXPgqwAnCEYWpw+MmRLJ2ldAgxUQGu8ZpsulsjW1yVIobyDHieB Mjp5z0AIpyJi0bcT/Crl7zaW4UgI2zdjcgtGHbpOBuUwdTtaAvAQMlexQoIOahKT SH3SMDRZL+HS+EQlyUygue9NCIgYy3SLb/nFKd4R9cMvB0nIx4/JbllxbtwXDfRq TC1S0waOUFZIW/j9nT1ndr8OZ6gMbSEB1ucXAkpSu20GY9Os9pCjMTvX8B2x4eI8 XAvA+sFjtzTXUIdVCjkyBFmNXyEn/SzjfDEp96BbmnfsLPEQMHXKz7ZJHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0vwoKW19fnlFaupRRuvkgLvrFaMB8GA1UdIwQY MBaAFLO2ttfl3Qwyj2zq9+npwNHLjB0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGIt MjA3MTU0NmI3MGY5LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGItMjA3MTU0NmI3MGY5 LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSLOAiEs kYSFiAxL3ZMcxr7BGtuuTxICgO4gIWrTqPEtEy6Bu4WB2rFel+5l0D12kGPluaqU sSkWEArRaNHV4QQ531Y+U+rr190rmutxEk2aoWklwJf5GduEsyNqsjQnPq49PPft UxXm8NSkpSqb7MwZ7P+mJJlV0nRia7EPjmxxkxx3dwVoD8YZEmFaJGei1aj1xUXf Hfkr2De63Sfqr8SC5lUafY9CEU6jM8yNY0qkU4mkDG2AdoSNgCB4fJwsFW2/ne19 IZoGsmO89xowkl7BDEFhSyLiG3m+CJfG9jEQxQNrK3/J6QwHwHr9a9IuQ0bGe8bN tIriHykmahqxTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:36 2026 by rpki-client