This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json) Hash identifier: n/HD6plh5jtlggdB4/spLOJW5eWpBTkUYAXJsHpc6LI= Subject key identifier: 75:DF:2F:F3:F8:0C:34:CF:54:8E:10:2F:F6:50:4D:33:90:91:13:A8 Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b Certificate serial: 019B2EF929D2EC78955DB16467FD7F711528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft Manifest number: 0706 Signing time: Thu 18 Dec 2025 01:00:39 +0000 Manifest this update: Thu 18 Dec 2025 01:00:39 +0000 Manifest next update: Fri 19 Dec 2025 01:00:39 +0000 Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=) 2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: DKmoVJmLaKgrhOMxoUb1YpWafALUAzEOOM1zPBx/9gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:29:d2:ec:78:95:5d:b1:64:67:fd:7f:71:15:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b Validity Not Before: Dec 18 01:00:39 2025 GMT Not After : Dec 19 01:00:39 2025 GMT Subject: CN=75df2ff3f80c34cf548e102ff6504d33909113a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:01:50:83:29:b3:88:46:82:46:15:de:08: 0c:63:92:4f:8d:19:06:96:bf:16:35:26:e7:47:81: b1:90:f3:12:14:54:2b:26:bb:37:4b:d9:8b:7c:36: c8:55:b8:d1:f0:fe:33:56:77:70:34:05:59:57:94: 93:78:1d:79:50:7f:5d:79:d4:b2:c4:47:7d:9d:fa: 51:b3:de:41:bd:52:52:2f:e8:b1:1c:72:9f:2c:78: 1f:8b:e0:d0:a5:03:d9:1e:23:a2:bb:3c:e0:44:d3: 08:de:40:28:32:d7:cf:ef:16:61:6f:db:0b:8f:20: 24:2b:a0:25:ac:d4:e3:ab:15:61:91:6a:23:13:bc: 80:0d:f8:3d:98:ff:52:74:e9:37:2c:18:97:09:35: 67:10:62:03:f4:75:e6:cc:1a:1f:07:13:63:d6:79: 35:89:ee:9c:54:ff:d6:e2:5a:d9:e0:bc:df:0d:4a: bf:84:b0:b6:aa:75:0a:6c:aa:44:38:0f:dd:4b:4d: 6e:4a:b2:ce:88:85:fc:64:40:35:45:27:77:c6:e0: ca:73:a2:40:fd:89:e5:47:d1:d8:46:e6:be:30:b5: e3:ee:d1:0e:6f:89:99:15:63:4b:ca:6b:e6:27:e3: 57:37:f3:d4:79:a6:15:6d:8f:21:5c:ee:89:c9:21: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:2F:F3:F8:0C:34:CF:54:8E:10:2F:F6:50:4D:33:90:91:13:A8 X509v3 Authority Key Identifier: keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5f:07:22:0a:9a:ab:d6:9c:a0:f5:ac:3e:81:ab:86:1c:38: 90:28:a9:1d:93:9b:53:25:06:30:ae:56:15:29:59:ba:56:f7: e8:e9:12:5b:96:c7:31:91:97:97:82:43:fe:20:2c:17:8b:62: 99:94:26:8a:82:c8:d7:77:18:23:99:eb:ee:a2:3a:8d:83:d9: c3:4c:ca:e4:02:55:4c:6e:f4:68:41:5e:09:fd:85:3a:22:f5: e5:28:13:48:a0:bd:d6:f9:36:d7:cc:54:40:bc:34:89:92:75: 4e:3c:35:6b:e5:b6:ae:31:08:e5:0f:2b:dc:cf:08:f9:ed:19: 4f:74:36:34:23:aa:7a:71:37:63:fe:3b:f4:90:6d:df:3b:c5: 3d:5e:ff:2d:22:db:a2:86:f3:bc:73:28:b8:9e:21:7a:3b:82: b7:57:85:d4:80:95:85:d7:15:aa:97:fc:69:36:70:cf:e5:76: 63:e4:81:d2:e0:19:bf:56:6a:b0:8e:8a:f8:e6:45:97:b7:ae: 87:a8:60:b7:36:1f:70:61:af:df:f7:e1:52:73:ef:cd:82:74: 50:77:a8:bb:8c:91:87:77:65:f9:f5:c9:88:99:dd:2f:17:b9: d7:5c:06:93:0c:bc:49:e2:db:10:12:e3:11:6a:6a:2d:04:14: 5c:04:44:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+SnS7HiVXbFkZ/1/cRUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh ZGFlN2IwHhcNMjUxMjE4MDEwMDM5WhcNMjUxMjE5MDEwMDM5WjAzMTEwLwYDVQQD Eyg3NWRmMmZmM2Y4MGMzNGNmNTQ4ZTEwMmZmNjUwNGQzMzkwOTExM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvsBUIMps4hGgkYV3ggMY5JPjRkG lr8WNSbnR4GxkPMSFFQrJrs3S9mLfDbIVbjR8P4zVndwNAVZV5STeB15UH9dedSy xEd9nfpRs95BvVJSL+ixHHKfLHgfi+DQpQPZHiOiuzzgRNMI3kAoMtfP7xZhb9sL jyAkK6AlrNTjqxVhkWojE7yADfg9mP9SdOk3LBiXCTVnEGID9HXmzBofBxNj1nk1 ie6cVP/W4lrZ4LzfDUq/hLC2qnUKbKpEOA/dS01uSrLOiIX8ZEA1RSd3xuDKc6JA /YnlR9HYRua+MLXj7tEOb4mZFWNLymvmJ+NXN/PUeaYVbY8hXO6JySEkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXfL/P4DDTPVI4QL/ZQTTOQkROoMB8GA1UdIwQY MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE18HIgqa q9acoPWsPoGrhhw4kCipHZObUyUGMK5WFSlZulb36OkSW5bHMZGXl4JD/iAsF4ti mZQmioLI13cYI5nr7qI6jYPZw0zK5AJVTG70aEFeCf2FOiL15SgTSKC91vk218xU QLw0iZJ1Tjw1a+W2rjEI5Q8r3M8I+e0ZT3Q2NCOqenE3Y/479JBt3zvFPV7/LSLb oobzvHMouJ4hejuCt1eF1ICVhdcVqpf8aTZwz+V2Y+SB0uAZv1ZqsI6K+OZFl7eu h6hgtzYfcGGv3/fhUnPvzYJ0UHeou4yRh3dl+fXJiJndLxe511wGkwy8SeLbEBLj EWpqLQQUXAREjA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:38:30 2025 by rpki-client