This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json) Hash identifier: rpoe5tUQKmUK2WRbA6PIFR4wQUEJv7os+CcepnmE27k= Subject key identifier: B5:43:A4:CF:90:93:83:48:EB:35:B0:06:55:D5:64:59:C4:54:D9:54 Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Certificate serial: 019AF19B7500E7C799B55C3F41B7F717094C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 6CZT7J7srebpzhPH8/i7uSoFuyZIDXuUYoz8wnQhI3o=) 2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:75:00:e7:c7:99:b5:5c:3f:41:b7:f7:17:09:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=b543a4cf90938348eb35b00655d56459c454d954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:74:b5:18:fa:8b:2e:89:ba:a4:0e:d9:6f: 76:6f:41:7f:5d:ac:bc:47:3f:7a:5f:b5:96:80:0f: 94:c2:1f:7c:bd:4e:42:7b:0d:2b:16:81:30:a7:41: 5b:55:a6:ea:3a:02:31:96:32:1a:6d:ec:cb:9c:53: 0f:2b:c6:fe:9f:0a:b3:65:f3:61:ca:b4:bc:e9:52: 6a:01:8a:f3:0a:93:2a:e6:ac:05:92:b5:93:68:8c: e0:12:ea:01:ee:d2:07:a8:c5:c4:2c:87:bd:1a:af: 4b:78:4e:71:20:82:8c:29:01:3b:fb:78:23:c7:81: 0f:10:0a:d7:91:fd:5f:b7:47:7d:87:04:1b:50:3e: 87:6e:bd:14:75:a1:2d:77:e9:7b:11:d1:72:72:5b: 22:b4:ca:11:cc:ce:a0:e3:8f:bc:b7:15:af:78:1b: 1b:12:c6:06:a3:ae:55:24:7e:96:1f:77:81:04:e2: c1:c6:bc:81:ad:77:f3:37:0e:7a:2b:c0:a9:da:66: f3:6d:3b:56:9b:96:3b:eb:4e:be:45:4b:2a:7e:41: 0e:02:f3:49:1c:ac:c4:bf:1a:e9:72:59:c7:4a:20: f0:89:21:5c:aa:e3:e0:3a:9b:07:47:ac:ac:62:ca: 61:6f:04:f9:4c:81:27:ef:95:67:24:c1:25:9c:64: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:A4:CF:90:93:83:48:EB:35:B0:06:55:D5:64:59:C4:54:D9:54 X509v3 Authority Key Identifier: keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:d6:68:be:20:2d:67:c3:3b:14:40:3e:f3:5b:9f:2c:76: 01:e8:9d:0e:5a:86:02:52:56:2a:64:45:02:a2:21:85:31:e1: 73:44:cf:f6:7b:0c:01:6c:82:03:6d:28:e4:97:76:3d:d9:c2: 86:6c:9b:03:e4:9d:93:46:4f:22:97:7c:ab:3f:9a:e6:c7:e7: 8b:fa:c5:33:3b:4f:99:5e:17:4a:e2:d9:6b:62:d6:7f:df:33: 58:9c:ee:00:dc:a1:66:b5:4b:f3:22:f0:67:33:91:70:cc:48: 1b:7c:92:a9:b3:14:9c:96:c3:ef:c2:50:a8:14:aa:e5:f9:88: 5e:24:e7:31:01:a0:1e:17:32:30:16:8a:db:e6:b5:c5:64:cb: b5:77:a3:48:71:c7:c1:e3:a9:5b:4f:a5:7e:e4:ed:b0:99:a7: 41:a5:a7:38:47:c7:d9:6f:b2:b8:e1:17:2d:45:d3:2c:ae:8a: ff:35:cd:bc:d3:f3:d8:2e:3d:c2:96:b3:5f:ee:02:4d:b5:98: f0:03:f0:ac:d7:1a:6a:1d:10:5d:6d:0c:c9:26:bc:c8:98:ef: cc:49:b8:8b:57:f5:e2:59:65:3d:cc:4a:96:15:17:9d:41:59: 79:d2:dd:1d:59:1a:02:24:99:7b:95:f4:e7:4d:3c:51:5e:cb: eb:09:6b:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3UA58eZtVw/Qbf3FwlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz ZGU5NDgwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EyhiNTQzYTRjZjkwOTM4MzQ4ZWIzNWIwMDY1NWQ1NjQ1OWM0NTRkOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk90tRj6iy6JuqQO2W92b0F/Xay8 Rz96X7WWgA+Uwh98vU5Cew0rFoEwp0FbVabqOgIxljIabezLnFMPK8b+nwqzZfNh yrS86VJqAYrzCpMq5qwFkrWTaIzgEuoB7tIHqMXELIe9Gq9LeE5xIIKMKQE7+3gj x4EPEArXkf1ft0d9hwQbUD6Hbr0UdaEtd+l7EdFyclsitMoRzM6g44+8txWveBsb EsYGo65VJH6WH3eBBOLBxryBrXfzNw56K8Cp2mbzbTtWm5Y7606+RUsqfkEOAvNJ HKzEvxrpclnHSiDwiSFcquPgOpsHR6ysYsphbwT5TIEn75VnJMElnGQnxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVDpM+Qk4NI6zWwBlXVZFnEVNlUMB8GA1UdIwQY MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5 LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVPWaL4g LWfDOxRAPvNbnyx2AeidDlqGAlJWKmRFAqIhhTHhc0TP9nsMAWyCA20o5Jd2PdnC hmybA+Sdk0ZPIpd8qz+a5sfni/rFMztPmV4XSuLZa2LWf98zWJzuANyhZrVL8yLw ZzORcMxIG3ySqbMUnJbD78JQqBSq5fmIXiTnMQGgHhcyMBaK2+a1xWTLtXejSHHH weOpW0+lfuTtsJmnQaWnOEfH2W+yuOEXLUXTLK6K/zXNvNPz2C49wpazX+4CTbWY 8APwrNcaah0QXW0MySa8yJjvzEm4i1f14lllPcxKlhUXnUFZedLdHVkaAiSZe5X0 5008UV7L6wlrbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:53 2025 by rpki-client