This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json) Hash identifier: zOy+o4rBb0W8KLRcalM4VohlUtViE91HqOEoLuXzDjI= Subject key identifier: FF:DB:46:E6:D2:F1:BA:63:19:D9:3F:5C:B7:7C:27:0D:BF:63:29:6F Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b Certificate serial: 019AF12CD77C0EC30D1E543ED0D8D8A83736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft Manifest number: 06E6 Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=) 2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: SdFcGqDe343s07pxq1F26ZIpok2ndr+dOfJ2LO9gRxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d7:7c:0e:c3:0d:1e:54:3e:d0:d8:d8:a8:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=ffdb46e6d2f1ba6319d93f5cb77c270dbf63296f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:f9:fe:fd:be:45:ff:ac:f4:10:45:d7:e5: e6:19:fe:e1:d0:4e:e0:59:be:15:54:d9:42:22:8f: 4d:11:27:07:79:27:28:c0:46:88:69:43:05:34:5f: ca:51:f9:3b:38:51:b4:11:fe:13:13:80:b7:fb:da: e8:f8:a4:99:a9:bb:9f:6a:5c:2c:43:8a:0c:0a:2f: 12:ae:be:c2:4a:95:d2:d3:ea:a5:78:d6:0c:bd:45: 63:ea:b6:8a:d7:ec:b3:21:85:0e:f3:3f:ca:5e:c2: a9:45:3d:a7:39:31:6c:39:50:2c:f4:7e:1f:37:50: 98:86:e4:d6:6a:3e:cf:f3:92:96:96:42:e6:0b:38: 40:73:92:49:f1:7b:d7:81:a8:dd:eb:59:3d:39:5e: 55:0b:09:6b:b2:23:8d:aa:3b:f5:93:81:db:9d:b2: 51:5b:e7:58:2f:14:54:eb:48:04:a7:9f:09:e2:c9: d6:3d:b7:14:72:72:91:ad:44:55:c2:0b:e7:24:59: 3f:cc:50:6f:1e:d5:fd:5e:8d:e7:53:b7:2a:5f:4f: 47:6a:da:8d:16:77:93:c6:00:a2:9f:72:e6:df:71: aa:72:89:c4:fc:38:19:55:04:8c:74:55:b9:bc:e7: 45:f4:58:81:43:f4:03:9a:ad:24:14:37:d8:7c:23: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:46:E6:D2:F1:BA:63:19:D9:3F:5C:B7:7C:27:0D:BF:63:29:6F X509v3 Authority Key Identifier: keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:79:a2:98:33:5e:36:a2:17:cd:0a:06:48:68:f2:85:86:7b: 7e:0e:cd:b0:dd:13:4b:ce:c6:61:aa:60:02:85:43:5a:ed:db: 08:1a:8a:24:54:0a:a2:4d:41:46:e5:50:43:4b:0a:df:be:ff: 92:60:41:a6:a2:9c:03:36:46:b1:78:63:e2:83:05:47:4c:65: b3:3d:33:cf:2b:60:d2:a7:aa:e7:29:d9:c0:db:c3:51:18:ce: f5:8f:13:e7:57:d5:74:60:06:2f:6f:03:23:00:b3:79:78:6a: 21:0a:1e:ce:c8:83:cb:38:3c:7b:3d:92:99:46:94:35:93:02: 94:11:f9:d1:dc:14:b6:3d:fe:96:af:69:79:01:68:35:ce:ec: bc:e1:ae:a5:6e:bc:4f:e4:da:f0:a1:c5:8a:71:ae:ae:71:51: 27:ea:3b:07:0f:f4:17:1f:8f:9f:e1:70:97:79:0d:80:11:49: 3b:83:fc:4e:2a:7f:de:19:7d:98:d4:b9:32:fb:6b:ee:55:ac: 11:7c:03:2e:1b:3c:ea:35:27:25:59:2d:23:64:d3:ba:12:7a: 51:d1:ec:c0:d3:a3:12:54:8e:93:9b:a1:3a:33:79:83:1d:bb: d6:64:43:77:b4:18:75:ec:59:07:8d:42:09:1b:c4:0e:7f:57: b8:2b:93:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNd8DsMNHlQ+0NjYqDc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh ZGFlN2IwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD EyhmZmRiNDZlNmQyZjFiYTYzMTlkOTNmNWNiNzdjMjcwZGJmNjMyOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugP5/v2+Rf+s9BBF1+XmGf7h0E7g Wb4VVNlCIo9NEScHeScowEaIaUMFNF/KUfk7OFG0Ef4TE4C3+9ro+KSZqbufalws Q4oMCi8Srr7CSpXS0+qleNYMvUVj6raK1+yzIYUO8z/KXsKpRT2nOTFsOVAs9H4f N1CYhuTWaj7P85KWlkLmCzhAc5JJ8XvXgajd61k9OV5VCwlrsiONqjv1k4HbnbJR W+dYLxRU60gEp58J4snWPbcUcnKRrURVwgvnJFk/zFBvHtX9Xo3nU7cqX09HatqN FneTxgCin3Lm33GqconE/DgZVQSMdFW5vOdF9FiBQ/QDmq0kFDfYfCPaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/bRubS8bpjGdk/XLd8Jw2/YylvMB8GA1UdIwQY MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonmimDNe NqIXzQoGSGjyhYZ7fg7NsN0TS87GYapgAoVDWu3bCBqKJFQKok1BRuVQQ0sK377/ kmBBpqKcAzZGsXhj4oMFR0xlsz0zzytg0qeq5ynZwNvDURjO9Y8T51fVdGAGL28D IwCzeXhqIQoezsiDyzg8ez2SmUaUNZMClBH50dwUtj3+lq9peQFoNc7svOGupW68 T+Ta8KHFinGurnFRJ+o7Bw/0Fx+Pn+Fwl3kNgBFJO4P8Tip/3hl9mNS5Mvtr7lWs EXwDLhs86jUnJVktI2TTuhJ6UdHswNOjElSOk5uhOjN5gx271mRDd7QYdexZB41C CRvEDn9XuCuTow== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:34 2025 by rpki-client