This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json) Hash identifier: 7cZo2koamSKtHhbUdXqdTODzPQsbuIhNzFcx7KSwrak= Subject key identifier: 58:B6:EE:D2:EE:1A:AB:9B:07:60:07:25:F4:45:D7:19:6E:C4:BA:62 Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93 Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293 Certificate serial: 019B7892E61207FBD7C06A3A675C663B6150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 08:00:51 +0000 Manifest this update: Thu 01 Jan 2026 08:00:51 +0000 Manifest next update: Fri 02 Jan 2026 08:00:51 +0000 Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: hb/qBMbFODGPKggF39rV0LR1bZccZGt5PcsVfgGCNnw=) 2: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (hash: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:92:e6:12:07:fb:d7:c0:6a:3a:67:5c:66:3b:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293 Validity Not Before: Jan 1 08:00:51 2026 GMT Not After : Jan 2 08:00:51 2026 GMT Subject: CN=58b6eed2ee1aab9b07600725f445d7196ec4ba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:27:8e:bb:27:00:a2:e5:58:ce:58:fa:1c: 93:f2:f3:1c:b0:f5:20:3a:8c:eb:7b:c3:03:c3:a6: 59:45:c6:75:b3:9c:d0:26:6a:66:c2:ac:25:b6:cc: eb:e3:51:3d:e8:1b:fe:e5:35:d2:f5:b7:b2:d2:56: 8f:2c:20:73:67:ee:41:18:b5:39:e6:9d:71:17:07: 87:c7:c4:33:cb:89:11:28:bb:3b:02:2b:1b:a4:c3: c4:bc:40:83:00:fd:2a:72:26:fd:af:2c:f4:2d:f4: b6:3c:cc:2d:a8:ea:2d:2f:09:5c:3a:c6:e5:05:c6: 27:a1:e8:a7:b5:2e:2d:08:2d:c0:73:34:c6:9d:55: 6a:76:f1:84:26:65:37:43:94:81:bf:ed:41:4f:d1: ed:09:79:92:43:99:8a:2b:4b:10:b9:2b:09:66:cb: 97:d4:6b:eb:f2:80:5b:98:c0:db:e9:6b:f9:cc:ab: fc:7f:70:9d:d7:2a:e3:a0:80:6b:77:e5:03:d0:ff: 91:e9:f1:00:3d:b1:a8:16:80:51:fd:31:6f:3d:46: 3d:b8:08:29:69:6e:14:6a:60:d1:3e:a4:8c:00:66: 3f:b2:06:1e:9e:21:6c:5e:b0:09:c3:de:11:ff:d7: a2:a3:f8:5f:d3:38:bd:4f:32:9a:c4:59:76:fc:e9: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B6:EE:D2:EE:1A:AB:9B:07:60:07:25:F4:45:D7:19:6E:C4:BA:62 X509v3 Authority Key Identifier: keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ce:92:fe:5d:fb:76:23:86:c0:29:48:bf:70:27:d0:59:0c: 8f:55:3f:f2:b0:fd:06:80:12:33:f6:15:21:38:eb:b1:88:7d: cb:b2:ab:f4:3d:7a:54:8f:5f:ff:8b:5a:0b:e2:68:75:27:2a: 98:9e:ad:f5:ba:4d:7a:1c:a8:1d:09:cc:f3:a6:46:bc:fb:77: a2:e0:fe:31:2e:57:a5:c3:94:a6:d1:b9:79:91:20:e6:7b:6c: 53:65:5b:e3:b1:35:d9:28:8c:72:4f:94:7a:4a:e5:68:26:37: d8:10:d3:f3:16:ed:c9:5a:5d:b7:fe:89:61:62:d1:87:1f:4a: 9f:22:ba:64:fc:9a:14:ac:6f:66:50:c0:2c:fd:fd:cd:7a:3f: f3:64:0e:1c:09:e6:16:f6:0a:07:90:4a:7b:49:2c:17:bf:a6: 9c:87:87:a2:c8:23:64:21:2b:d7:f3:c0:ea:52:b8:07:9d:3e: 0b:44:94:57:db:af:c4:0c:ca:bd:07:b1:e4:a9:b3:63:09:2e: f9:77:16:ae:ed:ef:2c:2c:fd:8b:a7:7b:af:7f:a0:da:7e:c1: 35:a3:aa:f5:ea:4a:54:c3:bd:03:72:7d:ba:a7:84:7b:d2:ff: ad:e6:57:9f:4b:90:29:10:07:1d:e8:0d:f5:1d:e3:e4:52:6a: 16:12:c4:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4kuYSB/vXwGo6Z1xmO2FQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNGY5OTVmNDE5MjIwZjU4NzQyNjdkNjhjYzE0MzcyZjBj ZGYyOTMwHhcNMjYwMTAxMDgwMDUxWhcNMjYwMTAyMDgwMDUxWjAzMTEwLwYDVQQD Eyg1OGI2ZWVkMmVlMWFhYjliMDc2MDA3MjVmNDQ1ZDcxOTZlYzRiYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsknjrsnAKLlWM5Y+hyT8vMcsPUg Oozre8MDw6ZZRcZ1s5zQJmpmwqwltszr41E96Bv+5TXS9bey0laPLCBzZ+5BGLU5 5p1xFweHx8Qzy4kRKLs7AisbpMPEvECDAP0qcib9ryz0LfS2PMwtqOotLwlcOsbl BcYnoeintS4tCC3AczTGnVVqdvGEJmU3Q5SBv+1BT9HtCXmSQ5mKK0sQuSsJZsuX 1Gvr8oBbmMDb6Wv5zKv8f3Cd1yrjoIBrd+UD0P+R6fEAPbGoFoBR/TFvPUY9uAgp aW4UamDRPqSMAGY/sgYeniFsXrAJw94R/9eio/hf0zi9TzKaxFl2/OmqYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFi27tLuGqubB2AHJfRF1xluxLpiMB8GA1UdIwQY MBaAFAxPmV9BkiD1h0Jn1ozBQ3LwzfKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEt MjY0Y2M0MjcyNTRlLzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83Mjg3Y2ItOTA1MS00NTFhLWIzNGEtMjY0Y2M0MjcyNTRl LzEvREUtWlgwR1NJUFdIUW1mV2pNRkRjdkROOHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASM6S/l37 diOGwClIv3An0FkMj1U/8rD9BoASM/YVITjrsYh9y7Kr9D16VI9f/4taC+JodScq mJ6t9bpNehyoHQnM86ZGvPt3ouD+MS5XpcOUptG5eZEg5ntsU2Vb47E12SiMck+U ekrlaCY32BDT8xbtyVpdt/6JYWLRhx9KnyK6ZPyaFKxvZlDALP39zXo/82QOHAnm FvYKB5BKe0ksF7+mnIeHosgjZCEr1/PA6lK4B50+C0SUV9uvxAzKvQex5KmzYwku +XcWru3vLCz9i6d7r3+g2n7BNaOq9epKVMO9A3J9uqeEe9L/reZXn0uQKRAHHegN 9R3j5FJqFhLE8w== -----END CERTIFICATE-----Generated at Thu Jan 1 14:23:58 2026 by rpki-client