This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json) Hash identifier: IIgusLhzy/JZqJliFX1J+mgjOfV6JLg/SVnjb3OSS8o= Subject key identifier: FC:9B:DF:A1:4F:18:21:95:05:A2:8E:CA:68:AA:8B:50:46:F9:56:02 Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b Certificate serial: 019C4358E22C3DA7A914CD62373B5D53D9BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft Manifest number: 0796 Signing time: Mon 09 Feb 2026 17:00:24 +0000 Manifest this update: Mon 09 Feb 2026 17:00:24 +0000 Manifest next update: Tue 10 Feb 2026 17:00:24 +0000 Files and hashes: 1: YMlojSojXsI2HBIediVAZQR53Uw.roa (hash: JmufbrfZpdywXGEriwFTpVhWPjQ10Wi0s4R9uPOJmgM=) 2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: GlUs1M2bLNQMnOH5+sQAxtvXmR9ZKV4Xu3du7td5BF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e2:2c:3d:a7:a9:14:cd:62:37:3b:5d:53:d9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b Validity Not Before: Feb 9 17:00:24 2026 GMT Not After : Feb 10 17:00:24 2026 GMT Subject: CN=fc9bdfa14f18219505a28eca68aa8b5046f95602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:00:00:80:c6:b4:46:c6:41:ed:fe:07:22: ac:2b:a5:34:de:dc:b3:1a:32:71:ec:c2:b8:1a:6e: 1c:f6:3a:76:b2:fd:83:d3:f8:08:c1:e9:7e:a4:5a: aa:8e:1c:69:dc:7f:c8:e8:79:df:94:0f:ee:e0:c9: 55:86:ad:5a:c2:40:21:72:53:b3:70:35:51:8e:a6: 73:2f:ef:0a:ce:99:42:21:ff:2d:43:6b:1c:97:f6: 93:73:4b:71:82:32:e0:24:54:59:de:ef:c4:96:9d: ef:06:27:24:d8:56:5e:fe:3f:da:53:e1:33:44:ba: c8:5b:48:63:1f:fa:93:d2:85:c6:8b:9c:67:49:e0: 08:07:da:3d:0a:73:0e:3b:65:f3:12:fa:b2:49:0c: 06:ca:0e:44:af:ae:72:1a:d4:c7:00:84:8a:15:e8: 58:cd:67:b5:77:b3:13:f1:6c:99:2d:96:4f:f7:bd: f8:ee:36:bd:1c:0a:ae:58:d4:8b:b6:33:cc:e8:8f: 59:28:66:5f:39:f6:26:92:be:6e:3b:14:6c:9f:63: 22:80:6f:83:f7:a9:dd:c9:3c:22:3c:3a:98:bb:e7: cb:f8:af:03:bc:8f:f1:72:f7:a1:4e:db:65:8e:d4: 35:a6:1a:65:87:07:2a:5b:6a:1a:27:fc:72:75:13: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9B:DF:A1:4F:18:21:95:05:A2:8E:CA:68:AA:8B:50:46:F9:56:02 X509v3 Authority Key Identifier: keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ab:4c:8a:9e:71:5b:97:a4:d3:95:f3:34:67:49:be:80:9a: e4:47:7b:ff:bd:68:51:cc:0b:f8:5a:46:cf:c7:ae:56:76:69: 61:6d:5e:1f:14:47:ea:ab:4d:9a:cd:b3:b2:e1:f2:18:72:12: 44:81:04:8e:0c:62:ee:cd:77:dd:97:c7:e0:83:5f:e9:4e:f0: 35:7f:c2:a3:e8:4f:ba:84:bd:e7:9f:cb:60:2c:c9:29:4d:18: 9f:7f:96:75:6a:80:f2:b9:f8:21:20:04:e0:61:7a:20:f2:5b: 10:2d:0e:a9:24:63:c4:c9:ff:10:3b:1c:73:35:a9:1b:07:51: d1:1d:f0:c3:ba:b9:c7:34:c4:23:fa:40:2f:83:46:ed:b4:20: 84:bc:f2:85:0c:0d:83:b8:38:fb:05:59:2b:d5:c3:b2:89:19: a6:3f:f1:01:b6:87:ba:83:89:91:31:88:41:92:02:f6:e6:ca: 31:a4:ae:b0:9b:aa:d8:0d:9e:aa:03:c7:a4:d1:fd:cd:ad:2b: 72:b3:5f:85:2e:14:20:1f:57:c6:c3:3b:6e:90:8f:7b:78:72: e5:a7:e4:97:af:08:f0:13:c2:1a:01:29:1d:3e:93:84:ea:4b: cf:a3:fd:eb:2d:f1:79:37:cb:16:5e:8d:f4:6b:cf:e4:9a:d3: 1b:83:26:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOIsPaepFM1iNztdU9m6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh ZGFlN2IwHhcNMjYwMjA5MTcwMDI0WhcNMjYwMjEwMTcwMDI0WjAzMTEwLwYDVQQD EyhmYzliZGZhMTRmMTgyMTk1MDVhMjhlY2E2OGFhOGI1MDQ2Zjk1NjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA028AAIDGtEbGQe3+ByKsK6U03tyz GjJx7MK4Gm4c9jp2sv2D0/gIwel+pFqqjhxp3H/I6HnflA/u4MlVhq1awkAhclOz cDVRjqZzL+8KzplCIf8tQ2scl/aTc0txgjLgJFRZ3u/Elp3vBick2FZe/j/aU+Ez RLrIW0hjH/qT0oXGi5xnSeAIB9o9CnMOO2XzEvqySQwGyg5Er65yGtTHAISKFehY zWe1d7MT8WyZLZZP97347ja9HAquWNSLtjPM6I9ZKGZfOfYmkr5uOxRsn2MigG+D 96ndyTwiPDqYu+fL+K8DvI/xcvehTttljtQ1phplhwcqW2oaJ/xydRNSwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyb36FPGCGVBaKOymiqi1BG+VYCMB8GA1UdIwQY MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVatMip5x W5ek05XzNGdJvoCa5Ed7/71oUcwL+FpGz8euVnZpYW1eHxRH6qtNms2zsuHyGHIS RIEEjgxi7s133ZfH4INf6U7wNX/Co+hPuoS955/LYCzJKU0Yn3+WdWqA8rn4ISAE 4GF6IPJbEC0OqSRjxMn/EDscczWpGwdR0R3ww7q5xzTEI/pAL4NG7bQghLzyhQwN g7g4+wVZK9XDsokZpj/xAbaHuoOJkTGIQZIC9ubKMaSusJuq2A2eqgPHpNH9za0r crNfhS4UIB9XxsM7bpCPe3hy5afkl68I8BPCGgEpHT6ThOpLz6P96y3xeTfLFl6N 9GvP5JrTG4MmPw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:04 2026 by rpki-client