This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json) Hash identifier: OqYxc6omsMVdfgEIHUHtKcaTSpPeRk4r/VlAothWPEM= Subject key identifier: C7:D9:E1:E5:24:7A:01:FD:E6:84:40:63:E3:C6:06:7A:9E:D4:69:EE Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Certificate serial: 019B4E4DC13EAC4C4493EBFC60BE81438050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 03:01:16 +0000 Manifest this update: Wed 24 Dec 2025 03:01:16 +0000 Manifest next update: Thu 25 Dec 2025 03:01:16 +0000 Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: bhPszf69xtjobND7iyzmAcfJI+iG5PlHXC2d+5fQmwQ=) 2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:c1:3e:ac:4c:44:93:eb:fc:60:be:81:43:80:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Validity Not Before: Dec 24 03:01:16 2025 GMT Not After : Dec 25 03:01:16 2025 GMT Subject: CN=c7d9e1e5247a01fde6844063e3c6067a9ed469ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:e4:36:a1:b9:a2:99:42:15:30:5a:2b:41: c9:c4:98:6b:a2:62:d9:b7:25:e9:f5:0a:3f:41:10: 39:15:56:7a:a8:49:e6:90:51:27:c9:11:55:f7:1b: 2e:f0:da:20:9a:95:f7:53:81:aa:62:c0:97:0c:cc: ef:6f:63:93:04:6e:23:48:46:a7:7e:c1:25:13:f4: 60:45:33:5e:bb:03:a4:34:10:4f:72:64:01:78:2b: 7d:c7:b1:7d:99:50:d4:ed:f7:63:0c:1d:29:d6:6e: ba:7f:bb:da:15:84:94:75:04:1c:10:4b:f7:2f:9e: 57:cd:09:96:8c:70:37:a6:ef:d5:20:bd:43:8e:e8: 63:30:5b:3d:7d:26:55:15:5b:8f:38:dc:f9:ff:af: 58:eb:60:35:76:9b:06:7b:86:0d:26:40:94:71:05: 4c:b0:57:45:9f:bb:33:47:a2:29:3c:d7:f4:c6:a2: 5b:d1:1b:69:1c:a4:5d:9e:ad:09:4c:3e:0a:ed:f4: 66:42:97:d1:1c:d2:ec:70:8a:1d:90:5c:02:da:e8: 56:bd:04:e6:b9:20:8e:d2:30:3b:43:d2:ec:40:7b: 76:6f:f3:17:19:24:51:3b:64:7c:c4:15:0c:7f:f2: 7f:10:74:f0:1d:c0:13:f9:66:f5:98:e5:8c:e9:92: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D9:E1:E5:24:7A:01:FD:E6:84:40:63:E3:C6:06:7A:9E:D4:69:EE X509v3 Authority Key Identifier: keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:97:a7:8d:d4:eb:c1:2a:5d:a9:4d:f1:ac:95:cb:5c:7d:88: 62:76:56:7a:04:14:99:4f:31:fd:1c:48:4f:02:75:50:ef:6f: c7:38:cc:c2:af:ff:e2:6f:5b:b3:1a:f6:8b:4e:a8:a5:1b:ca: 40:ba:7b:d6:e2:dd:a8:79:5d:da:dc:ac:1d:8e:85:8c:4d:ab: 93:fd:ae:76:80:f3:e8:bd:07:bf:b2:cf:e3:c8:29:85:1b:02: a0:23:68:67:f1:5d:eb:93:e2:0f:0a:24:de:06:63:1a:c8:b5: ab:ca:67:06:d1:d0:8d:6a:e9:84:2f:7d:49:37:63:0e:3a:6a: 37:62:7b:f0:90:81:8b:a0:2f:6f:04:0e:e0:87:5f:69:85:79: 75:8f:66:83:c5:95:a2:7f:e7:29:9d:dc:7b:dd:1c:07:58:67: ec:53:94:fb:7a:3d:bf:c0:dc:bd:fe:00:7f:2f:45:ae:25:96: a8:39:09:ac:e7:14:84:63:02:cf:fb:6f:88:2b:a4:00:f2:90: d7:9d:72:02:88:01:ac:74:3b:9a:0d:28:44:a8:74:e7:46:e4: 55:c0:84:e5:db:8e:1b:68:67:87:31:7c:4f:3c:41:85:0d:d4: 0b:3e:23:6d:c4:1a:bf:62:91:37:85:c0:9b:f3:da:4f:d7:66: 29:09:bf:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTcE+rExEk+v8YL6BQ4BQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz ZGU5NDgwHhcNMjUxMjI0MDMwMTE2WhcNMjUxMjI1MDMwMTE2WjAzMTEwLwYDVQQD EyhjN2Q5ZTFlNTI0N2EwMWZkZTY4NDQwNjNlM2M2MDY3YTllZDQ2OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkXkNqG5oplCFTBaK0HJxJhromLZ tyXp9Qo/QRA5FVZ6qEnmkFEnyRFV9xsu8NogmpX3U4GqYsCXDMzvb2OTBG4jSEan fsElE/RgRTNeuwOkNBBPcmQBeCt9x7F9mVDU7fdjDB0p1m66f7vaFYSUdQQcEEv3 L55XzQmWjHA3pu/VIL1DjuhjMFs9fSZVFVuPONz5/69Y62A1dpsGe4YNJkCUcQVM sFdFn7szR6IpPNf0xqJb0RtpHKRdnq0JTD4K7fRmQpfRHNLscIodkFwC2uhWvQTm uSCO0jA7Q9LsQHt2b/MXGSRRO2R8xBUMf/J/EHTwHcAT+Wb1mOWM6ZL9TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfZ4eUkegH95oRAY+PGBnqe1GnuMB8GA1UdIwQY MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5 LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpenjdTr wSpdqU3xrJXLXH2IYnZWegQUmU8x/RxITwJ1UO9vxzjMwq//4m9bsxr2i06opRvK QLp71uLdqHld2tysHY6FjE2rk/2udoDz6L0Hv7LP48gphRsCoCNoZ/Fd65PiDwok 3gZjGsi1q8pnBtHQjWrphC99STdjDjpqN2J78JCBi6AvbwQO4IdfaYV5dY9mg8WV on/nKZ3ce90cB1hn7FOU+3o9v8Dcvf4Afy9FriWWqDkJrOcUhGMCz/tviCukAPKQ 151yAogBrHQ7mg0oRKh050bkVcCE5duOG2hnhzF8TzxBhQ3UCz4jbcQav2KRN4XA m/PaT9dmKQm/YA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:40:07 2025 by rpki-client