This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json) Hash identifier: shsKLi1OdQ+LqMI3N4qJtS9KVJ/PyKtgm5f8U28hsBo= Subject key identifier: 57:1A:D0:18:19:80:08:16:C7:A8:56:9B:64:84:29:E7:AE:24:8C:31 Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31 Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731 Certificate serial: 019AF19AE45B7CA57BFDFFF5D0F1E1BA3C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft Manifest number: 0AA4 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: e2dI6p9wwXYhH16wShaWSYv8iAFuJrTs3rHMrzf+yVM=) 2: AAfqajz1lcpewMwtlfBl8TsBH6A.roa (hash: XdFJhIzEc3SMkZ3YWp110E+4v4+9POUyu2FIYDnnnm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e4:5b:7c:a5:7b:fd:ff:f5:d0:f1:e1:ba:3c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=571ad01819800816c7a8569b648429e7ae248c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f1:d2:b8:10:55:60:ad:1b:4e:2d:ae:24:15: 2c:24:86:eb:b9:95:7e:ea:03:77:e3:33:d1:fc:7d: 42:d3:22:9e:f7:37:79:8d:fa:0a:9e:dc:c9:4f:d9: 04:45:33:90:64:1d:e2:ca:84:7d:eb:e1:60:83:14: 09:d5:8f:9e:61:27:79:e2:2d:13:99:7c:43:51:38: c2:ac:b7:0b:31:b9:3c:2d:c1:ee:5d:94:51:13:88: 65:a4:be:31:b9:5d:ac:38:2d:ea:a3:da:ee:a4:72: 1f:82:00:c0:f5:c4:4e:87:38:c5:27:54:08:59:01: 61:e8:ef:ff:a5:0f:ac:e3:c5:20:37:9e:aa:36:09: 8f:7c:ef:b7:f7:74:cd:b1:be:36:79:16:59:12:83: fb:83:f4:0a:17:e1:05:23:b9:42:8e:ab:f1:8d:8b: 89:d9:ae:d6:dc:2a:30:e3:0d:26:50:5f:6e:0f:f7: 4f:ce:bb:53:0e:08:a4:7c:4c:83:0b:02:98:0a:c7: 0f:fa:51:94:23:3c:ea:85:46:fa:99:2d:b5:fa:c8: b3:2c:2e:1c:df:4c:13:ed:7e:9f:ae:63:d7:99:51: 45:78:64:c3:37:c4:36:87:e5:bc:bc:9a:5d:3f:ae: 19:0c:6e:b7:05:eb:22:fb:cd:94:a8:b1:85:f3:ff: 4f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:D0:18:19:80:08:16:C7:A8:56:9B:64:84:29:E7:AE:24:8C:31 X509v3 Authority Key Identifier: keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:ea:b7:49:81:f4:52:50:95:e0:db:0c:49:22:af:e4:61: 30:10:df:ef:4c:61:57:11:c4:8d:13:19:32:89:b0:13:39:7e: 6b:e5:af:3e:6b:96:85:c6:b9:cc:37:0a:8f:d3:02:c8:ee:77: c6:4e:59:e4:8d:f1:72:3c:75:ae:c0:e0:e3:a4:ee:d4:0f:a7: 2b:58:5d:2d:5b:e7:8f:bf:dd:3f:2a:34:6d:fb:0f:42:6f:4a: a9:e5:d5:72:92:6b:9a:75:97:79:42:9c:12:2e:80:13:e7:6c: 87:2e:3a:8a:23:96:da:53:3e:80:69:08:89:32:97:c7:54:7c: 1f:8b:a7:d5:31:9e:b7:d2:88:c1:14:6e:63:7b:35:d5:83:56: 0b:2a:e7:7d:3c:97:ae:c6:ef:8b:c6:14:ce:6c:1a:09:c8:e2: 7b:b5:f0:3c:33:12:c6:bf:b3:f6:f0:35:3d:df:58:86:63:6b: 44:13:fd:4f:0b:56:8c:26:8b:c6:54:82:25:c2:37:30:a0:78: d6:13:0d:af:ba:96:06:5f:2f:00:39:a5:92:5b:97:48:70:4f: af:7d:a6:0d:fc:d8:11:23:03:2e:b3:8a:bb:93:a3:6a:fc:cd: 69:f6:6a:0f:8c:76:54:6f:09:ab:c1:1c:f5:4b:55:34:3f:42: bf:5f:03:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuRbfKV7/f/10PHhujyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzNiMDk0MzBiMDQ4ZjA1MjZlZjZhOTM3Nzc0ZTdmMDYy MDM3MzEwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg1NzFhZDAxODE5ODAwODE2YzdhODU2OWI2NDg0MjllN2FlMjQ4YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/HSuBBVYK0bTi2uJBUsJIbruZV+ 6gN34zPR/H1C0yKe9zd5jfoKntzJT9kERTOQZB3iyoR96+FggxQJ1Y+eYSd54i0T mXxDUTjCrLcLMbk8LcHuXZRRE4hlpL4xuV2sOC3qo9rupHIfggDA9cROhzjFJ1QI WQFh6O//pQ+s48UgN56qNgmPfO+393TNsb42eRZZEoP7g/QKF+EFI7lCjqvxjYuJ 2a7W3Cow4w0mUF9uD/dPzrtTDgikfEyDCwKYCscP+lGUIzzqhUb6mS21+sizLC4c 30wT7X6frmPXmVFFeGTDN8Q2h+W8vJpdP64ZDG63Besi+82UqLGF8/9PeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFca0BgZgAgWx6hWm2SEKeeuJIwxMB8GA1UdIwQY MBaAFNUzsJQwsEjwUm72qTd3Tn8GIDcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNTI1ZjgtZDU0OS00OTA5LWI4YzAt ZmYwMTQ5MDBiZThhLzEvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kNTI1ZjgtZDU0OS00OTA5LWI4YzAtZmYwMTQ5MDBiZThh LzEvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDXqt0mB 9FJQleDbDEkir+RhMBDf70xhVxHEjRMZMomwEzl+a+WvPmuWhca5zDcKj9MCyO53 xk5Z5I3xcjx1rsDg46Tu1A+nK1hdLVvnj7/dPyo0bfsPQm9KqeXVcpJrmnWXeUKc Ei6AE+dshy46iiOW2lM+gGkIiTKXx1R8H4un1TGet9KIwRRuY3s11YNWCyrnfTyX rsbvi8YUzmwaCcjie7XwPDMSxr+z9vA1Pd9YhmNrRBP9TwtWjCaLxlSCJcI3MKB4 1hMNr7qWBl8vADmlkluXSHBPr32mDfzYESMDLrOKu5OjavzNafZqD4x2VG8Jq8Ec 9UtVND9Cv18Ddg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:23 2025 by rpki-client