This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json) Hash identifier: wLRrnK9DA2Y8zfujMyUH9hlw4PVRJdkTJJbwP41FrqA= Subject key identifier: 6C:25:DA:EF:7B:B4:65:09:27:9D:C8:E8:F8:7F:BC:C8:85:7D:A3:D9 Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31 Certificate serial: 019B3B6B34C21AD319D708D8CD03AA6E4B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft Manifest number: 16C7 Signing time: Sat 20 Dec 2025 11:00:40 +0000 Manifest this update: Sat 20 Dec 2025 11:00:40 +0000 Manifest next update: Sun 21 Dec 2025 11:00:40 +0000 Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: oqhA5/2nIbdfXW+HwI9tmQJO/QVNSyrYX8kDf0e7X38=) 2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:34:c2:1a:d3:19:d7:08:d8:cd:03:aa:6e:4b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31 Validity Not Before: Dec 20 11:00:40 2025 GMT Not After : Dec 21 11:00:40 2025 GMT Subject: CN=6c25daef7bb46509279dc8e8f87fbcc8857da3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:11:9f:0f:88:6b:7c:e4:84:0c:ac:0c:4e:41: a3:ba:f7:02:ef:ed:8c:3e:ee:7e:9c:48:04:ad:98: f5:1c:97:24:50:b6:c3:2e:cc:a0:4e:d7:ff:6c:07: c8:e2:f8:f8:99:4c:4c:37:d2:42:21:3f:88:45:9c: 74:5b:8d:96:4c:af:cd:c1:65:e8:17:8c:c9:84:e2: 0f:06:48:cb:a6:85:a6:1c:8f:b7:8a:3e:f3:d4:b9: 49:99:1c:00:06:98:32:fb:8a:91:02:36:34:42:38: c4:1c:99:49:1f:44:a3:70:e5:07:4b:94:8e:89:15: c6:19:b4:4f:13:8f:c7:0a:21:e8:c0:f5:f9:44:91: ab:0f:80:b1:c7:f6:06:e2:cd:7c:66:28:f0:ec:4f: 59:6c:b9:35:6d:e4:6e:48:3b:40:dc:84:f3:48:cf: d6:5c:f5:f0:9b:ed:d6:c1:19:ce:49:2e:b8:ec:6b: b9:ac:05:0b:7b:43:4d:5a:de:10:a1:40:9d:de:81: 9f:4d:54:57:ce:6f:3f:04:7a:34:68:64:3e:3a:af: c4:7e:17:ef:a1:b0:96:9a:a9:9f:4f:8f:4a:b0:7a: f4:79:2d:b6:ef:cc:77:b6:e2:f6:7e:b9:72:5d:6e: 04:10:ff:7f:ce:b6:70:5d:22:98:59:9f:ab:71:94: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:25:DA:EF:7B:B4:65:09:27:9D:C8:E8:F8:7F:BC:C8:85:7D:A3:D9 X509v3 Authority Key Identifier: keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cc:56:25:33:20:1c:92:38:5d:4d:7f:50:89:02:38:20:f0: 84:ca:e6:04:10:7c:75:f7:dc:eb:ed:13:f0:8d:ca:2c:51:6e: ef:87:40:34:c9:e8:74:ea:e1:96:5b:8e:2f:73:a7:05:b1:6d: 28:e6:a2:e2:41:3b:a8:b5:73:ad:d4:d9:4c:69:94:da:aa:b2: 34:31:e2:d8:f8:c4:77:ea:4a:7a:6e:fd:7d:79:e7:76:92:3b: 39:72:8f:4f:0a:ad:b9:0a:6a:0c:8d:87:22:ef:6f:c0:d0:a8: c0:a2:97:d0:6e:0b:85:62:76:e4:a2:97:76:04:c2:a2:11:c4: b1:48:66:92:e8:08:58:0b:cf:c0:a7:76:6b:a8:f4:92:c7:bc: c5:7c:39:5c:2a:bd:8a:3f:f2:4a:da:29:76:f1:fb:22:d0:cb: 04:5e:65:95:7f:58:eb:09:19:6a:e2:59:46:37:4c:c3:3e:cf: 95:c2:fc:f6:6f:c4:fb:ea:8c:c7:3f:2f:56:09:92:0c:52:10: 41:af:a6:f3:07:6c:2b:1a:87:76:44:7f:8f:c2:d4:1a:84:07: fd:b6:b8:0a:ed:9d:b6:c3:43:30:f1:48:66:8e:17:5c:12:cc: af:04:29:35:b9:ce:0b:31:9b:da:bc:f0:9c:e2:c4:06:b1:39: 7f:29:69:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azTCGtMZ1wjYzQOqbksHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI3MDJkMWEwNzI2MTc1ZTM5YWYxNjk3NGU1Mzc1ZGNh ZWZjMzEwHhcNMjUxMjIwMTEwMDQwWhcNMjUxMjIxMTEwMDQwWjAzMTEwLwYDVQQD Eyg2YzI1ZGFlZjdiYjQ2NTA5Mjc5ZGM4ZThmODdmYmNjODg1N2RhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xGfD4hrfOSEDKwMTkGjuvcC7+2M Pu5+nEgErZj1HJckULbDLsygTtf/bAfI4vj4mUxMN9JCIT+IRZx0W42WTK/NwWXo F4zJhOIPBkjLpoWmHI+3ij7z1LlJmRwABpgy+4qRAjY0QjjEHJlJH0SjcOUHS5SO iRXGGbRPE4/HCiHowPX5RJGrD4Cxx/YG4s18Zijw7E9ZbLk1beRuSDtA3ITzSM/W XPXwm+3WwRnOSS647Gu5rAULe0NNWt4QoUCd3oGfTVRXzm8/BHo0aGQ+Oq/Efhfv obCWmqmfT49KsHr0eS2278x3tuL2frlyXW4EEP9/zrZwXSKYWZ+rcZTzJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwl2u97tGUJJ53I6Ph/vMiFfaPZMB8GA1UdIwQY MBaAFEnycC0aByYXXjmvFpdOU3XcrvwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgt M2QxYTBlYmQwZjU5LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgtM2QxYTBlYmQwZjU5 LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcxWJTMg HJI4XU1/UIkCOCDwhMrmBBB8dffc6+0T8I3KLFFu74dANMnodOrhlluOL3OnBbFt KOai4kE7qLVzrdTZTGmU2qqyNDHi2PjEd+pKem79fXnndpI7OXKPTwqtuQpqDI2H Iu9vwNCowKKX0G4LhWJ25KKXdgTCohHEsUhmkugIWAvPwKd2a6j0kse8xXw5XCq9 ij/yStopdvH7ItDLBF5llX9Y6wkZauJZRjdMwz7PlcL89m/E++qMxz8vVgmSDFIQ Qa+m8wdsKxqHdkR/j8LUGoQH/ba4Cu2dtsNDMPFIZo4XXBLMrwQpNbnOCzGb2rzw nOLEBrE5fylpNQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:33:44 2025 by rpki-client