This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json) Hash identifier: k47gWE9XoFsE+ADTPzz/no4JhBwrAuXXZrHvElkxy2A= Subject key identifier: 96:DD:27:9D:61:24:73:05:65:69:5D:42:25:A0:03:04:D2:89:33:C4 Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d Certificate serial: 019B33441DEEE9E9B8453E0C314ACEF36252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 21:01:00 +0000 Manifest this update: Thu 18 Dec 2025 21:01:00 +0000 Manifest next update: Fri 19 Dec 2025 21:01:00 +0000 Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: 8/DdJmeiyasJFu4brLGgP8jhToeKk5qJWWyvbOAUYWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:1d:ee:e9:e9:b8:45:3e:0c:31:4a:ce:f3:62:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d Validity Not Before: Dec 18 21:01:00 2025 GMT Not After : Dec 19 21:01:00 2025 GMT Subject: CN=96dd279d6124730565695d4225a00304d28933c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:2d:5e:67:4d:ab:f4:4c:51:ea:f1:ba:17: 73:7a:17:44:b5:fe:d1:5a:b5:a8:e5:97:76:7e:22: cc:c9:ec:20:d3:e0:51:3b:4b:35:65:b9:34:52:de: 15:86:03:18:35:03:16:4a:8e:18:df:30:33:97:c4: f1:53:80:49:c4:19:0b:02:6a:3d:bb:f0:1c:9a:3f: bb:32:ff:b8:d2:f0:fa:81:7b:7e:11:85:5a:d9:24: 27:9f:8d:38:0a:71:a1:d3:dc:cd:d2:a2:b9:6a:99: 2b:8e:a6:03:73:5d:63:1e:e9:85:09:3c:39:e6:e7: be:fb:51:6c:12:a7:0b:f4:30:2d:b5:bd:86:74:37: 57:a9:24:9d:9c:28:4c:c7:0d:e7:b6:fc:92:1a:9f: 16:2a:cf:68:cc:d6:16:8d:d1:25:ad:68:7b:2d:7f: 27:13:2c:cf:75:64:43:32:b4:55:d6:09:1f:46:05: bc:39:3e:0f:7b:f7:3f:a8:d0:58:38:78:c4:87:29: 01:d4:7e:f2:39:af:df:e4:c0:4c:18:b9:f0:fd:fc: ff:fb:4b:7b:a2:cf:e0:b2:2b:58:ad:10:e9:e4:7c: 43:26:fd:28:71:80:de:3c:d5:90:d2:08:ad:f4:e8: 8a:72:bd:cb:fa:0a:65:ac:cb:0a:68:66:55:19:2a: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:27:9D:61:24:73:05:65:69:5D:42:25:A0:03:04:D2:89:33:C4 X509v3 Authority Key Identifier: keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a3:64:ab:7b:2a:27:7a:b4:ef:f1:20:de:13:e2:d3:47:74: e6:67:f8:c0:e2:cf:22:6c:69:a7:ce:9c:d6:a2:61:ef:c4:29: ee:c1:ea:e6:24:de:74:72:0f:95:1b:0f:fa:12:5b:44:2f:b3: f5:2d:dd:4e:d9:16:63:88:d4:5c:32:8f:27:24:56:e6:38:21: 1e:5f:c8:2d:58:0e:34:3f:28:70:f6:e8:62:76:10:6f:78:34: 3f:de:a8:98:1b:3f:e1:ef:8e:5e:94:05:b8:5f:79:b8:82:9e: aa:e5:bc:3b:59:72:f1:ca:35:13:a5:62:ce:31:47:07:93:1b: dd:a7:24:1e:64:8b:a6:ff:81:c9:e6:1c:ed:e1:a0:28:8d:c2: 9b:a1:06:28:fc:c8:e9:39:43:4c:03:8c:d8:2f:4c:37:0f:a5: d9:d3:36:39:e3:9b:aa:65:60:6b:cf:be:c9:53:36:cd:7b:57: 50:c0:22:8c:e8:a0:b1:be:42:3c:54:4f:f2:ff:df:f1:a3:01: 13:e7:8c:1a:1c:fc:76:ed:c1:db:c3:bb:eb:14:ec:c9:5d:c8: ff:8f:28:f3:df:e1:b3:33:c5:41:49:1d:93:7d:e4:64:df:9e: 88:d9:da:f4:d2:97:77:f0:3c:de:ed:5a:50:4b:00:01:54:81: b0:1d:32:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRB3u6em4RT4MMUrO82JSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTNiMGJkM2Q2MjQxODAzMjlkMjFhM2VjZGNjYTFiMmZi ZWRlNmQwHhcNMjUxMjE4MjEwMTAwWhcNMjUxMjE5MjEwMTAwWjAzMTEwLwYDVQQD Eyg5NmRkMjc5ZDYxMjQ3MzA1NjU2OTVkNDIyNWEwMDMwNGQyODkzM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsMtXmdNq/RMUerxuhdzehdEtf7R WrWo5Zd2fiLMyewg0+BRO0s1Zbk0Ut4VhgMYNQMWSo4Y3zAzl8TxU4BJxBkLAmo9 u/Acmj+7Mv+40vD6gXt+EYVa2SQnn404CnGh09zN0qK5apkrjqYDc11jHumFCTw5 5ue++1FsEqcL9DAttb2GdDdXqSSdnChMxw3ntvySGp8WKs9ozNYWjdElrWh7LX8n EyzPdWRDMrRV1gkfRgW8OT4Pe/c/qNBYOHjEhykB1H7yOa/f5MBMGLnw/fz/+0t7 os/gsitYrRDp5HxDJv0ocYDePNWQ0git9OiKcr3L+gplrMsKaGZVGSru3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbdJ51hJHMFZWldQiWgAwTSiTPEMB8GA1UdIwQY MBaAFKdTsL09YkGAMp0ho+zcyhsvvt5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMt OWEyNjJmZjQ2MjZjLzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMtOWEyNjJmZjQ2MjZj LzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqNkq3sq J3q07/Eg3hPi00d05mf4wOLPImxpp86c1qJh78Qp7sHq5iTedHIPlRsP+hJbRC+z 9S3dTtkWY4jUXDKPJyRW5jghHl/ILVgOND8ocPboYnYQb3g0P96omBs/4e+OXpQF uF95uIKequW8O1ly8co1E6VizjFHB5Mb3ackHmSLpv+ByeYc7eGgKI3Cm6EGKPzI 6TlDTAOM2C9MNw+l2dM2OeObqmVga8++yVM2zXtXUMAijOigsb5CPFRP8v/f8aMB E+eMGhz8du3B28O76xTsyV3I/48o89/hszPFQUkdk33kZN+eiNna9NKXd/A83u1a UEsAAVSBsB0yWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:05 2025 by rpki-client