This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json) Hash identifier: F5J9Psw7Z03GOU/HwpEgPpDgDBWnD+24lyEYyx/f8UY= Subject key identifier: AC:61:D5:7B:84:07:0A:50:3C:1B:B3:50:B0:20:36:37:BC:49:2A:F8 Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Certificate serial: 019B3EDA1F42B1BFBBD41402FF2CA0875C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:00:40 +0000 Manifest this update: Sun 21 Dec 2025 03:00:40 +0000 Manifest next update: Mon 22 Dec 2025 03:00:40 +0000 Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: 6J5lu58GzW/W+8KhpexT289Mu/j0Hk8O+kfuX5qV/rQ=) 2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:1f:42:b1:bf:bb:d4:14:02:ff:2c:a0:87:5c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948 Validity Not Before: Dec 21 03:00:40 2025 GMT Not After : Dec 22 03:00:40 2025 GMT Subject: CN=ac61d57b84070a503c1bb350b0203637bc492af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1e:1b:84:b3:0a:f7:85:83:5a:d4:0f:c9:fd: 3b:58:87:f0:69:a9:7b:83:f1:4a:5b:1f:77:c8:d0: c3:1a:7e:b0:bf:de:23:90:ec:93:e6:49:40:ba:0a: 92:79:26:3b:df:62:e7:06:00:00:29:92:1d:4f:a5: 60:5c:d2:82:bd:56:98:29:4c:b0:ad:8a:cc:78:db: b0:66:e6:65:d3:72:a1:58:b7:64:c8:ef:d2:a5:99: f4:11:6a:43:17:b0:7b:67:cc:98:08:df:74:23:99: 78:59:e3:40:82:93:c0:fe:65:d1:76:d2:cf:d0:03: f2:8b:b4:1d:86:50:c5:19:96:3f:3b:ce:fd:e2:fa: 2c:d4:ae:eb:05:8b:f5:82:14:02:9b:66:da:36:db: ab:27:09:6c:c1:c5:ce:fb:be:1f:29:50:7d:f6:05: 17:d6:e5:60:b4:87:dc:a0:2a:37:89:98:5c:ac:d4: 66:3d:43:cf:84:00:30:46:e8:ae:25:e2:20:4a:73: 91:e5:8c:79:b4:52:81:5a:88:95:ec:44:9d:c5:ba: 2f:04:16:00:01:31:d0:34:bd:76:f8:2c:0c:cb:23: 6b:e5:8c:d6:77:be:89:6d:d6:c7:89:58:02:94:0f: 3e:40:0f:4a:af:7b:71:c6:db:d0:26:29:b9:b4:a1: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:61:D5:7B:84:07:0A:50:3C:1B:B3:50:B0:20:36:37:BC:49:2A:F8 X509v3 Authority Key Identifier: keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1e:ee:5b:3e:81:f0:57:cc:f0:e4:85:54:63:13:e2:df:81: 9b:aa:f1:7c:30:9c:54:2c:dc:f9:9a:1f:74:d0:a1:61:52:ad: 14:ec:77:05:d3:14:d8:66:51:bd:60:ff:a0:98:5e:5c:1e:cb: ba:7a:fb:41:3e:e9:6f:7e:87:17:e4:bf:9a:cd:54:b5:e1:b9: 3c:c8:3e:6a:3f:5d:ec:90:74:83:b2:c3:f6:77:e3:ea:40:fd: b0:e2:e4:26:c4:5c:03:4e:2b:cc:58:34:00:a9:45:00:d2:84: 3a:dd:d0:b4:ce:ea:e2:af:7b:e1:09:e7:b7:74:ba:fe:99:3b: f0:82:79:87:ff:a2:2c:a2:f1:46:9d:94:4d:bb:b8:48:21:20: d7:03:0f:d3:dd:cf:30:51:12:aa:46:60:a1:fc:3d:fe:c2:aa: ec:84:32:93:1a:cd:a4:f0:44:61:a7:98:b2:ec:05:aa:1b:70: 6b:81:86:60:60:93:4d:f9:4f:e7:d0:04:37:26:91:b1:38:01: c1:dc:56:37:f9:a1:6f:27:90:29:39:55:89:dd:11:39:64:23: b0:97:46:37:17:c9:74:a0:1d:fa:80:89:8e:5c:f0:01:2c:54: d9:a9:35:85:b9:41:b9:2e:7d:4d:b1:a6:50:c2:57:de:ad:59: 4e:b9:4a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2h9Csb+71BQC/yygh1wCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2YzZjc1ZWY4MzA2YjZjNTkzYTQyM2NkYTE5ODZiZGUz ZGU5NDgwHhcNMjUxMjIxMDMwMDQwWhcNMjUxMjIyMDMwMDQwWjAzMTEwLwYDVQQD EyhhYzYxZDU3Yjg0MDcwYTUwM2MxYmIzNTBiMDIwMzYzN2JjNDkyYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h4bhLMK94WDWtQPyf07WIfwaal7 g/FKWx93yNDDGn6wv94jkOyT5klAugqSeSY732LnBgAAKZIdT6VgXNKCvVaYKUyw rYrMeNuwZuZl03KhWLdkyO/SpZn0EWpDF7B7Z8yYCN90I5l4WeNAgpPA/mXRdtLP 0APyi7QdhlDFGZY/O8794vos1K7rBYv1ghQCm2baNturJwlswcXO+74fKVB99gUX 1uVgtIfcoCo3iZhcrNRmPUPPhAAwRuiuJeIgSnOR5Yx5tFKBWoiV7ESdxbovBBYA ATHQNL12+CwMyyNr5YzWd76JbdbHiVgClA8+QA9Kr3txxtvQJim5tKGUXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxh1XuEBwpQPBuzULAgNje8SSr4MB8GA1UdIwQY MBaAFO7PP3Xvgwa2xZOkI82hmGvePelIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEt MzViNTZjY2NhODQ5LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81ZGYxNmItYmM2Ni00MGRkLWE3MzEtMzViNTZjY2NhODQ5 LzEvN3M4X2RlLURCcmJGazZRanphR1lhOTQ5NlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYR7uWz6B 8FfM8OSFVGMT4t+Bm6rxfDCcVCzc+ZofdNChYVKtFOx3BdMU2GZRvWD/oJheXB7L unr7QT7pb36HF+S/ms1UteG5PMg+aj9d7JB0g7LD9nfj6kD9sOLkJsRcA04rzFg0 AKlFANKEOt3QtM7q4q974Qnnt3S6/pk78IJ5h/+iLKLxRp2UTbu4SCEg1wMP093P MFESqkZgofw9/sKq7IQykxrNpPBEYaeYsuwFqhtwa4GGYGCTTflP59AENyaRsTgB wdxWN/mhbyeQKTlVid0ROWQjsJdGNxfJdKAd+oCJjlzwASxU2ak1hblBuS59TbGm UMJX3q1ZTrlKew== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:01 2025 by rpki-client