This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json) Hash identifier: c2syMYtyeaMkuj9wVgXhMC0QLYbp7crfE63Xn8CzATI= Subject key identifier: F9:01:4E:97:6C:FE:EA:78:81:E1:49:EE:84:5B:0F:B4:80:A6:CD:23 Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Certificate serial: 019B3AFE00FD2E11CDA180D8BA608E35F6BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft Manifest number: 032C Signing time: Sat 20 Dec 2025 09:01:23 +0000 Manifest this update: Sat 20 Dec 2025 09:01:23 +0000 Manifest next update: Sun 21 Dec 2025 09:01:23 +0000 Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=) 2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: S/Jc+ZY53nqk8Fb4KfXb+SzfZQUOdwY4ah52js58FtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:00:fd:2e:11:cd:a1:80:d8:ba:60:8e:35:f6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Validity Not Before: Dec 20 09:01:23 2025 GMT Not After : Dec 21 09:01:23 2025 GMT Subject: CN=f9014e976cfeea7881e149ee845b0fb480a6cd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:a7:6d:09:eb:ca:65:e6:e7:d0:9e:82:61: d9:75:8f:6e:4b:cf:17:28:29:f5:d6:d5:a5:45:17: 54:84:ed:bc:a8:1a:92:70:2c:fb:ac:19:3a:50:ea: 9c:24:fa:62:6b:02:7b:bd:63:0a:89:6b:3b:e9:0c: 73:01:62:ad:22:e2:17:4b:0f:b6:8d:bd:fd:84:2a: 92:ab:9d:8e:2c:0f:bb:5f:25:14:7d:0c:6c:64:ee: f4:1e:fa:be:42:74:fd:95:2f:1d:4e:42:44:bc:24: 4e:09:3e:ed:87:87:52:cb:47:db:7b:95:38:f5:11: c0:8b:38:2f:0a:d9:d0:c9:74:5f:c6:02:94:d4:cd: 01:b8:ec:eb:a5:53:f2:37:32:f9:5b:22:8f:12:c0: 11:65:52:d6:11:af:86:72:58:d7:a5:03:f5:b0:ac: d6:51:05:34:c2:c3:d3:70:cc:e2:77:cf:a6:d5:c8: 62:30:7f:f6:0f:fd:85:75:44:50:34:3d:51:39:b8: f7:0a:6e:e3:1d:e6:3d:74:94:9d:a2:4c:1c:16:16: cd:e6:b7:47:9c:3d:36:09:53:a5:b8:ec:a1:82:ab: 23:67:e9:96:3c:b6:b9:1b:99:86:62:f9:b9:75:db: ca:7f:ca:3c:15:80:c3:70:6a:5b:8c:bc:0a:33:ad: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:01:4E:97:6C:FE:EA:78:81:E1:49:EE:84:5B:0F:B4:80:A6:CD:23 X509v3 Authority Key Identifier: keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1f:cf:e6:22:5e:1e:b9:16:a5:d5:88:5a:50:90:6a:8a:5c: d0:2d:73:fa:26:14:3d:3f:55:50:c7:cd:7a:1d:78:cf:ad:21: ea:90:11:da:a5:47:f1:9b:bb:b2:bb:0d:9d:38:d0:bf:97:ee: 2a:b7:65:bc:d2:2c:08:53:8c:e5:b7:8c:0b:ff:68:64:ed:ca: fc:66:05:60:4b:3b:fe:11:42:c6:da:c4:d6:c9:24:76:dd:cf: 1a:f1:85:ed:26:9e:44:0e:df:bf:3a:ea:95:5d:d9:2b:33:e1: ea:13:0b:57:ae:2d:86:7e:30:bb:f8:13:2a:a0:cb:4a:8f:6b: 40:0f:b4:f9:c1:96:81:91:c2:28:dc:a3:a2:fc:f1:4a:eb:f8: d1:a6:50:b3:53:c5:52:2b:95:cc:9c:44:11:99:4c:fb:30:13: 62:3a:ae:21:9b:1d:03:26:99:04:8d:6e:f4:4e:ff:d0:98:1b: 3e:72:10:c2:6d:ad:ef:18:0d:28:b2:bf:ab:18:aa:e9:7a:a4: 63:78:43:21:4a:9e:47:cc:9b:e7:50:f7:76:03:05:ac:c0:21: 9a:6b:da:af:2e:ff:f1:01:93:47:ec:05:38:54:f8:51:ab:96: 4e:eb:3d:f2:b2:3c:0f:87:68:29:3f:8a:ff:06:d1:b9:7b:21: ba:95:53:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/gD9LhHNoYDYumCONfa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOTlmZTE1MmU3NzY0N2EzYmY4ZjA1YWFjYzYwY2JhYjhi MGYzZjEwHhcNMjUxMjIwMDkwMTIzWhcNMjUxMjIxMDkwMTIzWjAzMTEwLwYDVQQD EyhmOTAxNGU5NzZjZmVlYTc4ODFlMTQ5ZWU4NDViMGZiNDgwYTZjZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrenbQnrymXm59CegmHZdY9uS88X KCn11tWlRRdUhO28qBqScCz7rBk6UOqcJPpiawJ7vWMKiWs76QxzAWKtIuIXSw+2 jb39hCqSq52OLA+7XyUUfQxsZO70Hvq+QnT9lS8dTkJEvCROCT7th4dSy0fbe5U4 9RHAizgvCtnQyXRfxgKU1M0BuOzrpVPyNzL5WyKPEsARZVLWEa+GcljXpQP1sKzW UQU0wsPTcMzid8+m1chiMH/2D/2FdURQND1RObj3Cm7jHeY9dJSdokwcFhbN5rdH nD02CVOluOyhgqsjZ+mWPLa5G5mGYvm5ddvKf8o8FYDDcGpbjLwKM61rkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkBTpds/up4geFJ7oRbD7SAps0jMB8GA1UdIwQY MBaAFICZ/hUud2R6O/jwWqzGDLq4sPPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYt NWJhZWYzZmMyOTVkLzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYtNWJhZWYzZmMyOTVk LzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgx/P5iJe HrkWpdWIWlCQaopc0C1z+iYUPT9VUMfNeh14z60h6pAR2qVH8Zu7srsNnTjQv5fu KrdlvNIsCFOM5beMC/9oZO3K/GYFYEs7/hFCxtrE1skkdt3PGvGF7SaeRA7fvzrq lV3ZKzPh6hMLV64thn4wu/gTKqDLSo9rQA+0+cGWgZHCKNyjovzxSuv40aZQs1PF UiuVzJxEEZlM+zATYjquIZsdAyaZBI1u9E7/0JgbPnIQwm2t7xgNKLK/qxiq6Xqk Y3hDIUqeR8yb51D3dgMFrMAhmmvary7/8QGTR+wFOFT4UauWTus98rI8D4doKT+K /wbRuXshupVTYw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:55:14 2025 by rpki-client