This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json) Hash identifier: x3S9BWZV1FSgJ50QeURiqIf5dWu14WCFRPXvCpF0X9U= Subject key identifier: 31:F2:44:C4:0B:59:E1:01:25:C8:E7:21:39:51:28:2A:F0:37:B0:64 Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93 Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293 Certificate serial: 019B3EA311B99220E459A0B9CCD0BBFB41D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:00:32 +0000 Manifest this update: Sun 21 Dec 2025 02:00:32 +0000 Manifest next update: Mon 22 Dec 2025 02:00:32 +0000 Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: ZQE3+uF8NVm9AbABSVP+Ya+8PYbs3S0krNYirZbs6po=) 2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:11:b9:92:20:e4:59:a0:b9:cc:d0:bb:fb:41:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293 Validity Not Before: Dec 21 02:00:32 2025 GMT Not After : Dec 22 02:00:32 2025 GMT Subject: CN=31f244c40b59e10125c8e7213951282af037b064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:22:57:22:79:fb:a8:20:0e:b3:8b:42:25: 36:60:56:eb:79:db:ea:c8:e9:34:e9:b3:00:4c:e4: e7:82:2b:12:1d:57:16:de:58:f4:98:2a:e2:da:31: 16:78:12:d2:f0:10:bc:13:bb:bf:c4:1f:f6:af:15: 9e:1f:6d:d4:b7:1a:eb:df:c3:76:c4:c5:1f:bc:bf: 0d:ef:c2:3b:d5:44:d1:ea:80:a7:e1:9f:12:c9:03: b3:0b:e7:fd:18:04:53:97:5f:ba:a7:0a:6c:1a:67: 60:01:1e:56:43:ab:9d:93:f9:c7:c7:a7:2e:a0:7c: 3d:da:51:30:c7:d1:bb:8a:90:9a:9f:f0:d8:27:e5: 4d:29:4c:f5:9d:39:df:21:90:20:d0:32:ed:de:04: c3:fc:a1:3b:59:a1:cb:53:42:a4:a0:d4:fc:09:f3: 1a:e8:92:37:b7:db:a4:44:73:64:bf:4d:3f:ab:1e: 44:92:33:92:17:28:77:8f:f1:c7:8f:15:5e:4b:b9: 44:56:5f:04:e4:49:88:11:54:e6:50:6c:56:13:76: 57:0b:ef:81:64:10:9f:09:fa:ca:eb:d4:1a:a4:e6: a2:d6:b5:d4:64:4b:24:f1:f3:94:5b:8b:4d:51:81: 81:69:17:7e:e8:81:6d:c6:8d:2d:4f:a1:52:cf:6c: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F2:44:C4:0B:59:E1:01:25:C8:E7:21:39:51:28:2A:F0:37:B0:64 X509v3 Authority Key Identifier: keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e1:67:9c:e8:a8:46:e8:ac:94:f8:54:c0:97:75:df:3c:4b: 9d:54:63:84:ec:23:99:20:49:cd:b6:0c:ac:e7:b9:5a:51:bf: c9:db:5e:a3:2d:9d:4d:93:32:fe:93:f5:59:eb:ed:83:1a:98: c8:cf:2d:42:6a:f9:0f:bf:80:04:e4:ed:bb:a7:fe:c1:62:29: 38:bd:40:cc:34:5b:2a:60:55:a0:a5:f1:bb:dc:f1:a5:06:15: fd:6e:f3:27:76:07:d4:38:7c:36:ea:33:10:61:93:bc:ab:53: 2b:97:6e:a1:dd:d2:f0:cb:47:08:ab:af:ac:c7:89:17:9b:c3: 2f:7c:25:66:7d:8e:83:49:e5:3d:d2:e5:14:c6:2e:63:68:c2: 49:74:a1:67:45:fa:b3:1a:9c:98:76:36:7d:15:25:31:bc:bf: c1:22:2f:e9:bb:cc:fb:fd:76:15:8d:86:74:78:cd:cb:53:2e: 2e:a6:2e:77:33:8b:b0:0f:d2:ce:71:c6:e0:fe:87:8e:b2:dd: 45:15:70:32:cb:63:6d:e6:00:bb:4a:d6:dd:5c:cb:19:62:b1: 2e:12:42:10:f6:54:67:f0:43:57:10:3c:f6:89:d9:ab:7b:bf: c7:c7:78:c9:ca:78:f9:c9:d5:c1:7d:e5:3a:3b:bc:70:98:03: 79:a3:46:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxG5kiDkWaC5zNC7+0HWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNGY5OTVmNDE5MjIwZjU4NzQyNjdkNjhjYzE0MzcyZjBj ZGYyOTMwHhcNMjUxMjIxMDIwMDMyWhcNMjUxMjIyMDIwMDMyWjAzMTEwLwYDVQQD EygzMWYyNDRjNDBiNTllMTAxMjVjOGU3MjEzOTUxMjgyYWYwMzdiMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmUiVyJ5+6ggDrOLQiU2YFbredvq yOk06bMATOTngisSHVcW3lj0mCri2jEWeBLS8BC8E7u/xB/2rxWeH23Utxrr38N2 xMUfvL8N78I71UTR6oCn4Z8SyQOzC+f9GARTl1+6pwpsGmdgAR5WQ6udk/nHx6cu oHw92lEwx9G7ipCan/DYJ+VNKUz1nTnfIZAg0DLt3gTD/KE7WaHLU0KkoNT8CfMa 6JI3t9ukRHNkv00/qx5EkjOSFyh3j/HHjxVeS7lEVl8E5EmIEVTmUGxWE3ZXC++B ZBCfCfrK69QapOai1rXUZEsk8fOUW4tNUYGBaRd+6IFtxo0tT6FSz2y0zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHyRMQLWeEBJcjnITlRKCrwN7BkMB8GA1UdIwQY MBaAFAxPmV9BkiD1h0Jn1ozBQ3LwzfKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEt MjY0Y2M0MjcyNTRlLzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEtMjY0Y2M0MjcyNTRl LzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuFnnOio RuislPhUwJd13zxLnVRjhOwjmSBJzbYMrOe5WlG/ydteoy2dTZMy/pP1WevtgxqY yM8tQmr5D7+ABOTtu6f+wWIpOL1AzDRbKmBVoKXxu9zxpQYV/W7zJ3YH1Dh8Nuoz EGGTvKtTK5duod3S8MtHCKuvrMeJF5vDL3wlZn2Og0nlPdLlFMYuY2jCSXShZ0X6 sxqcmHY2fRUlMby/wSIv6bvM+/12FY2GdHjNy1MuLqYudzOLsA/SznHG4P6HjrLd RRVwMstjbeYAu0rW3VzLGWKxLhJCEPZUZ/BDVxA89onZq3u/x8d4ycp4+cnVwX3l Oju8cJgDeaNGXA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:48:26 2025 by rpki-client