This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft File: oTRxtQAqTrZJYSXPWHN_Deutrns.mft (raw, json) Hash identifier: 4Z1wApitbPUdaYLezSLUJRTbkaU1QSE/sEzvYq03VRw= Subject key identifier: EE:26:8D:7E:66:7B:E6:2D:45:7D:73:A6:C7:B0:63:77:8D:72:73:31 Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B Certificate issuer: /CN=a13471b5002a4eb6496125cf58737f0debadae7b Certificate serial: 019B3C7DE3115C4BDF8397118B24784FD51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft Manifest number: 070D Signing time: Sat 20 Dec 2025 16:00:41 +0000 Manifest this update: Sat 20 Dec 2025 16:00:41 +0000 Manifest next update: Sun 21 Dec 2025 16:00:41 +0000 Files and hashes: 1: oFklvX9KlU1NM_bVTSTtZ1s8fa8.roa (hash: 4FiRkOjDg+qr7WljZjcDh3AhahDm0psFF2Z877w08JM=) 2: oTRxtQAqTrZJYSXPWHN_Deutrns.crl (hash: MfCgZDs7YGjRhrJO8n8YxP3I4Od6YKppGzUReNu1ZCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e3:11:5c:4b:df:83:97:11:8b:24:78:4f:d5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b Validity Not Before: Dec 20 16:00:41 2025 GMT Not After : Dec 21 16:00:41 2025 GMT Subject: CN=ee268d7e667be62d457d73a6c7b063778d727331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:86:12:12:7f:fe:72:86:c9:f0:39:66:2d: cb:37:05:cc:f5:c3:72:09:d3:fc:ef:45:56:37:3c: 29:7b:b1:13:f8:78:01:9e:9d:d9:0f:11:3e:d5:c8: 93:4f:75:dd:ab:13:ea:a1:b1:b9:46:0c:d2:59:0c: 26:26:a4:9e:d1:e2:13:eb:ca:5f:3f:c8:42:1c:2c: 36:77:a2:f7:10:3e:fb:49:e2:8b:a1:cd:64:7c:ef: ee:4e:05:b8:82:bb:9d:0f:c0:b6:e9:c6:5a:94:9b: 7c:de:8a:76:4f:0f:56:cb:29:59:5f:4a:c0:d9:61: 72:9b:98:b8:ea:ef:5d:72:e5:74:8f:df:a4:bd:e2: 6a:56:dc:e5:d6:cb:c2:d5:39:d5:20:e3:6c:e2:98: 7b:d7:ab:04:82:c9:79:e1:9d:b8:8d:a9:90:98:dd: 64:79:a5:83:49:9e:51:bf:16:c3:bb:e1:68:4f:bb: fd:64:8b:e2:3e:e3:1a:00:e7:54:fa:a3:69:a1:33: 69:2a:b5:e3:a0:1d:7b:15:01:8f:98:46:bc:b5:75: 70:a3:23:2b:9e:6f:68:35:e9:f6:27:49:7b:99:ea: 67:ff:44:e3:30:b3:21:55:8f:8d:0b:3f:9f:97:e5: 96:fd:eb:b9:d1:06:97:2b:04:1b:d4:1a:af:67:e7: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:26:8D:7E:66:7B:E6:2D:45:7D:73:A6:C7:B0:63:77:8D:72:73:31 X509v3 Authority Key Identifier: keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fd:15:0d:f5:29:3a:6d:9d:cf:f2:ac:f6:d3:e7:16:c6:7d: 12:a7:b0:03:00:59:ff:4b:ce:10:9a:fc:cc:86:69:d0:f0:08: d2:f7:e0:e0:2f:d1:8c:b0:b7:4a:50:1a:70:4d:5c:f8:16:24: 95:34:3e:2d:18:02:dd:56:5b:2e:da:68:2c:90:f3:9a:0e:ac: fe:46:54:d8:bc:7e:40:16:1d:df:b9:77:e9:59:c6:5c:d5:f4: 39:13:89:86:84:29:05:7c:e6:04:d6:5d:04:a4:ca:2a:0a:2f: 65:5d:01:43:cb:ac:0d:7e:2d:78:72:4f:fc:7d:30:35:eb:4c: b9:77:d7:46:d3:9e:98:b2:4b:57:36:12:99:51:b7:0e:bf:2f: fa:2c:2c:8a:01:44:ff:b3:35:90:6e:ed:16:df:e5:24:f4:26: 8e:28:d1:83:7f:04:c6:77:4b:f3:0a:54:88:d0:17:2d:2c:85: fa:66:fb:6c:d0:2a:2e:9f:33:0d:0e:ba:bc:84:fa:42:94:f8: e2:73:ce:38:0b:2f:dd:79:58:4e:78:8a:98:73:4d:9f:24:d2: 07:7b:b5:9e:8a:ef:04:2a:bf:45:5a:3f:49:10:f9:3d:0e:2c: 89:1f:ff:59:b0:ad:a0:32:4f:aa:24:76:0e:48:2f:f0:8b:d1: 45:1c:d9:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feMRXEvfg5cRiyR4T9UfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh ZGFlN2IwHhcNMjUxMjIwMTYwMDQxWhcNMjUxMjIxMTYwMDQxWjAzMTEwLwYDVQQD EyhlZTI2OGQ3ZTY2N2JlNjJkNDU3ZDczYTZjN2IwNjM3NzhkNzI3MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQOGEhJ//nKGyfA5Zi3LNwXM9cNy CdP870VWNzwpe7ET+HgBnp3ZDxE+1ciTT3XdqxPqobG5RgzSWQwmJqSe0eIT68pf P8hCHCw2d6L3ED77SeKLoc1kfO/uTgW4grudD8C26cZalJt83op2Tw9WyylZX0rA 2WFym5i46u9dcuV0j9+kveJqVtzl1svC1TnVIONs4ph716sEgsl54Z24jamQmN1k eaWDSZ5RvxbDu+FoT7v9ZIviPuMaAOdU+qNpoTNpKrXjoB17FQGPmEa8tXVwoyMr nm9oNen2J0l7mepn/0TjMLMhVY+NCz+fl+WW/eu50QaXKwQb1BqvZ+eyeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4mjX5me+YtRX1zpsewY3eNcnMxMB8GA1UdIwQY MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt ZDY5MTBiMjFhYjQyLzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcf0VDfUp Om2dz/Ks9tPnFsZ9EqewAwBZ/0vOEJr8zIZp0PAI0vfg4C/RjLC3SlAacE1c+BYk lTQ+LRgC3VZbLtpoLJDzmg6s/kZU2Lx+QBYd37l36VnGXNX0OROJhoQpBXzmBNZd BKTKKgovZV0BQ8usDX4teHJP/H0wNetMuXfXRtOemLJLVzYSmVG3Dr8v+iwsigFE /7M1kG7tFt/lJPQmjijRg38ExndL8wpUiNAXLSyF+mb7bNAqLp8zDQ66vIT6QpT4 4nPOOAsv3XlYTniKmHNNnyTSB3u1norvBCq/RVo/SRD5PQ4siR//WbCtoDJPqiR2 Dkgv8IvRRRzZ1g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:42 2025 by rpki-client