This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json) Hash identifier: 51zkJWDqrfgCs/93QbQLHxaho06JdkU/QloQz3pbUg8= Subject key identifier: 6A:5E:F4:7F:22:09:8E:FF:7B:57:A2:87:2F:93:23:22:F9:59:8B:76 Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93 Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293 Certificate serial: 019B59ACC405AB591C33293635113D6B8D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 08:00:53 +0000 Manifest this update: Fri 26 Dec 2025 08:00:53 +0000 Manifest next update: Sat 27 Dec 2025 08:00:53 +0000 Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: ugPrJtxfs7yv2By2qUtxb7M405EzGC6RO/Rakh74aK0=) 2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:c4:05:ab:59:1c:33:29:36:35:11:3d:6b:8d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293 Validity Not Before: Dec 26 08:00:53 2025 GMT Not After : Dec 27 08:00:53 2025 GMT Subject: CN=6a5ef47f22098eff7b57a2872f932322f9598b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:ba:9d:44:79:86:ee:ac:2f:28:5d:17:9d: bc:2c:99:ee:aa:f9:08:27:cf:a2:b5:fb:5d:46:51: c6:b7:19:13:5c:11:fd:ed:15:15:66:da:db:fb:45: 91:f1:1c:a0:1c:5b:71:51:d6:cd:6b:8c:12:23:7c: b4:0d:fa:ec:dd:39:12:28:bc:14:d6:25:59:50:54: 7f:21:45:81:50:8e:2e:46:fa:32:9b:70:ea:dc:40: 01:c8:70:7e:c2:1e:76:ca:32:d9:da:57:66:c0:4a: e6:db:9e:da:0d:eb:34:1a:af:9c:6c:44:18:21:d1: b2:59:d1:8b:15:d7:a7:45:62:94:4d:d7:15:bb:59: 1e:84:f1:96:03:79:b2:14:75:f5:9b:c8:cd:e7:ef: 3e:00:23:de:eb:8d:0d:37:f0:f8:76:c3:4e:dc:29: e3:4e:34:97:60:62:e0:fe:1f:bc:40:49:ae:61:4f: 46:34:29:87:b3:6a:56:24:2e:3f:73:03:a1:49:ab: 59:af:b5:40:7f:9c:e4:33:19:9c:b3:35:70:ad:00: 50:30:b1:1e:c4:cf:f9:88:ab:fa:a6:5d:a8:25:c2: f6:e1:af:68:b6:99:af:67:d0:97:aa:0d:1d:51:b1: ef:ac:36:f1:3f:6d:ef:69:13:0a:04:c6:22:a9:ce: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5E:F4:7F:22:09:8E:FF:7B:57:A2:87:2F:93:23:22:F9:59:8B:76 X509v3 Authority Key Identifier: keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:83:6e:4b:51:21:4f:c5:d7:1c:95:21:ea:d2:b5:24:a6:5c: bb:1c:ab:3d:5b:75:45:de:4e:a4:d4:b3:5b:61:0d:d3:f9:19: 8a:20:2b:bf:be:f5:5e:85:ff:f0:00:ed:42:93:f6:6f:7a:e8: c5:38:d4:fd:03:75:7c:a3:4c:9e:2a:84:6e:8f:db:d8:d2:3c: 4d:79:0e:31:38:ed:ca:e2:23:a7:d3:6a:c8:d7:21:31:1a:86: e2:73:33:8d:42:59:e8:a5:67:23:18:b6:2e:c0:af:e9:c7:99: 4c:74:ae:21:2b:25:c2:74:31:a3:5e:3c:00:cf:86:29:b7:96: fb:ad:42:cf:10:7b:16:90:91:33:ad:a9:2c:b6:0c:56:b5:e9: e5:70:48:2c:90:dc:e7:bd:58:60:bc:d2:a8:6b:11:2c:0b:7e: ec:cd:dc:5d:11:9a:d3:de:96:19:d5:dc:54:9f:ce:7c:eb:7d: 70:7e:cf:55:b0:72:32:94:bf:fb:dc:48:90:00:e1:7d:d6:21: 6d:bc:32:55:c6:78:1f:21:88:1f:40:67:95:6e:46:f2:8e:1a: 64:36:9e:13:86:bd:4d:6b:db:ae:6a:db:70:73:80:48:53:7d: 6e:17:22:c3:50:74:76:ba:bb:63:e7:8c:82:19:32:cf:5f:0f: 43:4d:2e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrMQFq1kcMyk2NRE9a419MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNGY5OTVmNDE5MjIwZjU4NzQyNjdkNjhjYzE0MzcyZjBj ZGYyOTMwHhcNMjUxMjI2MDgwMDUzWhcNMjUxMjI3MDgwMDUzWjAzMTEwLwYDVQQD Eyg2YTVlZjQ3ZjIyMDk4ZWZmN2I1N2EyODcyZjkzMjMyMmY5NTk4Yjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbK6nUR5hu6sLyhdF528LJnuqvkI J8+itftdRlHGtxkTXBH97RUVZtrb+0WR8RygHFtxUdbNa4wSI3y0Dfrs3TkSKLwU 1iVZUFR/IUWBUI4uRvoym3Dq3EAByHB+wh52yjLZ2ldmwErm257aDes0Gq+cbEQY IdGyWdGLFdenRWKUTdcVu1kehPGWA3myFHX1m8jN5+8+ACPe640NN/D4dsNO3Cnj TjSXYGLg/h+8QEmuYU9GNCmHs2pWJC4/cwOhSatZr7VAf5zkMxmcszVwrQBQMLEe xM/5iKv6pl2oJcL24a9otpmvZ9CXqg0dUbHvrDbxP23vaRMKBMYiqc4XWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpe9H8iCY7/e1eihy+TIyL5WYt2MB8GA1UdIwQY MBaAFAxPmV9BkiD1h0Jn1ozBQ3LwzfKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEt MjY0Y2M0MjcyNTRlLzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEtMjY0Y2M0MjcyNTRl LzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooNuS1Eh T8XXHJUh6tK1JKZcuxyrPVt1Rd5OpNSzW2EN0/kZiiArv771XoX/8ADtQpP2b3ro xTjU/QN1fKNMniqEbo/b2NI8TXkOMTjtyuIjp9NqyNchMRqG4nMzjUJZ6KVnIxi2 LsCv6ceZTHSuISslwnQxo148AM+GKbeW+61CzxB7FpCRM62pLLYMVrXp5XBILJDc 571YYLzSqGsRLAt+7M3cXRGa096WGdXcVJ/OfOt9cH7PVbByMpS/+9xIkADhfdYh bbwyVcZ4HyGIH0BnlW5G8o4aZDaeE4a9TWvbrmrbcHOASFN9bhciw1B0drq7Y+eM ghkyz18PQ00ufQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:24 2025 by rpki-client