This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json) Hash identifier: JYbm6Y9Lyk4nGokgtO0dsh0dV85nEDx33UZRmO8Q+3g= Subject key identifier: FC:DA:3B:81:21:E8:31:B3:31:77:13:E8:36:F1:4E:79:C9:D2:42:C9 Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31 Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731 Certificate serial: 019AFD313FA0E4C9486F5A87253816EBFE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft Manifest number: 0AAA Signing time: Mon 08 Dec 2025 09:00:54 +0000 Manifest this update: Mon 08 Dec 2025 09:00:54 +0000 Manifest next update: Tue 09 Dec 2025 09:00:54 +0000 Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: dA/UDFEEYm2n4QnBAO16ha6XGKrmmZ9tbCYjYBGD2Mg=) 2: AAfqajz1lcpewMwtlfBl8TsBH6A.roa (hash: XdFJhIzEc3SMkZ3YWp110E+4v4+9POUyu2FIYDnnnm4=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:31:3f:a0:e4:c9:48:6f:5a:87:25:38:16:eb:fe:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731 Validity Not Before: Dec 8 09:00:54 2025 GMT Not After : Dec 9 09:00:54 2025 GMT Subject: CN=fcda3b8121e831b3317713e836f14e79c9d242c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:99:df:1b:c2:73:a1:6f:0d:9e:36:46:5a: 14:72:d4:db:e6:a5:29:16:c9:3a:89:40:cf:fd:fb: aa:25:9e:4e:44:06:11:d0:74:b5:9a:bf:e1:56:90: 72:9d:dc:00:5a:b7:a9:bd:32:fb:f8:39:c3:6d:9f: df:0d:8f:53:be:ec:82:42:1a:1c:c6:6b:a8:9f:8e: ac:45:ba:e2:22:de:00:8b:d1:1b:21:45:17:bb:3f: 91:2d:eb:6d:42:e7:be:fd:dc:3b:30:73:09:98:c0: 1a:e9:8e:55:d5:f8:bd:77:71:ef:75:8b:42:27:ac: 2e:a1:93:3d:71:aa:2b:50:23:90:6d:66:70:20:c8: b8:3a:5e:d3:77:fe:15:63:a2:45:ff:f4:39:00:81: c2:5a:7d:34:9a:29:1b:8f:b8:71:1e:16:7a:fd:9e: 28:92:ee:3e:16:31:84:14:25:eb:25:ad:e0:c0:38: 74:c6:ba:9e:3e:e5:ff:89:99:1a:2a:47:96:65:a2: fa:5e:d0:29:0f:b8:38:d4:8a:a5:ac:b3:39:bb:4c: 5a:c7:d8:48:68:b3:03:f7:aa:90:79:c2:6c:3a:a0: 1c:bd:ef:29:da:42:0b:00:b9:f9:7f:03:3a:c9:90: 7c:b1:cc:01:46:fe:55:15:95:72:2d:3c:be:9c:ab: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DA:3B:81:21:E8:31:B3:31:77:13:E8:36:F1:4E:79:C9:D2:42:C9 X509v3 Authority Key Identifier: keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5d:2d:f0:9c:1c:68:48:0b:72:56:1b:7a:75:f8:2c:5f:81: a5:23:b2:7e:03:bf:af:43:ca:76:47:58:d2:68:ec:34:70:72: 75:26:8a:c4:26:bb:8a:2a:15:8e:75:cf:c1:49:9a:c1:0f:ce: 6b:88:c7:33:15:40:0c:0f:a4:e6:d4:4e:5b:95:f5:dc:c4:c4: a6:8a:66:e1:58:f8:bd:39:17:f4:98:af:5b:ac:0d:4d:c6:84: a0:9d:36:af:f9:26:f7:24:98:ab:7d:9f:26:6e:fb:60:08:9d: dc:5b:5e:c9:79:4e:4e:cd:ea:f8:41:b8:76:59:46:43:b3:27: 95:48:d6:a4:7a:d1:7f:4d:97:7c:bf:27:aa:80:c1:92:36:69: c7:a1:99:ce:d5:a6:23:4a:b6:b9:bd:9a:e4:7b:dd:c0:6e:c2: f1:d6:3f:71:67:99:db:3b:eb:65:68:28:70:47:e2:6d:df:ea: 63:54:c5:af:2f:17:47:40:28:e2:92:a3:50:63:d6:4b:e8:5e: 89:04:fd:8e:c4:fc:76:30:2b:83:3e:0e:26:c4:46:86:29:5f: 51:51:1b:a5:6f:38:5e:cb:73:7e:8c:01:37:e4:2a:94:97:62: 86:1c:0c:f5:9b:3c:91:eb:aa:13:cd:33:44:1d:69:4b:34:3d: 1b:fc:4d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9MT+g5MlIb1qHJTgW6/5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MzNiMDk0MzBiMDQ4ZjA1MjZlZjZhOTM3Nzc0ZTdmMDYy MDM3MzEwHhcNMjUxMjA4MDkwMDU0WhcNMjUxMjA5MDkwMDU0WjAzMTEwLwYDVQQD EyhmY2RhM2I4MTIxZTgzMWIzMzE3NzEzZTgzNmYxNGU3OWM5ZDI0MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8OZ3xvCc6FvDZ42RloUctTb5qUp Fsk6iUDP/fuqJZ5ORAYR0HS1mr/hVpByndwAWrepvTL7+DnDbZ/fDY9TvuyCQhoc xmuon46sRbriIt4Ai9EbIUUXuz+RLettQue+/dw7MHMJmMAa6Y5V1fi9d3HvdYtC J6wuoZM9caorUCOQbWZwIMi4Ol7Td/4VY6JF//Q5AIHCWn00mikbj7hxHhZ6/Z4o ku4+FjGEFCXrJa3gwDh0xrqePuX/iZkaKkeWZaL6XtApD7g41IqlrLM5u0xax9hI aLMD96qQecJsOqAcve8p2kILALn5fwM6yZB8scwBRv5VFZVyLTy+nKuUMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzaO4Eh6DGzMXcT6DbxTnnJ0kLJMB8GA1UdIwQY MBaAFNUzsJQwsEjwUm72qTd3Tn8GIDcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNTI1ZjgtZDU0OS00OTA5LWI4YzAt ZmYwMTQ5MDBiZThhLzEvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kNTI1ZjgtZDU0OS00OTA5LWI4YzAtZmYwMTQ5MDBiZThh LzEvMVRPd2xEQ3dTUEJTYnZhcE4zZE9md1lnTnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZF0t8Jwc aEgLclYbenX4LF+BpSOyfgO/r0PKdkdY0mjsNHBydSaKxCa7iioVjnXPwUmawQ/O a4jHMxVADA+k5tROW5X13MTEpopm4Vj4vTkX9JivW6wNTcaEoJ02r/km9ySYq32f Jm77YAid3FteyXlOTs3q+EG4dllGQ7MnlUjWpHrRf02XfL8nqoDBkjZpx6GZztWm I0q2ub2a5HvdwG7C8dY/cWeZ2zvrZWgocEfibd/qY1TFry8XR0Ao4pKjUGPWS+he iQT9jsT8djArgz4OJsRGhilfUVEbpW84XstzfowBN+QqlJdihhwM9Zs8keuqE80z RB1pSzQ9G/xN8A== -----END CERTIFICATE-----Generated at Wed Dec 17 22:21:54 2025 by rpki-client