This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json) Hash identifier: Iw7W4bxRnYtcGSOwG3nwSSHfOUh3GWmNQFjoW51bMkw= Subject key identifier: 84:BE:38:CC:57:C3:14:F9:71:20:9E:A7:C7:73:34:3B:22:D6:25:01 Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Certificate serial: 019BF5E2FFAF24EC402E320DF59D7336C892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft Manifest number: 038D Signing time: Sun 25 Jan 2026 16:00:53 +0000 Manifest this update: Sun 25 Jan 2026 16:00:53 +0000 Manifest next update: Mon 26 Jan 2026 16:00:53 +0000 Files and hashes: 1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: NaSPlyCWcExmu4mgmZTbeF6fRoqPP71i83KnLZcrVHU=) 2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:ff:af:24:ec:40:2e:32:0d:f5:9d:73:36:c8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Validity Not Before: Jan 25 16:00:53 2026 GMT Not After : Jan 26 16:00:53 2026 GMT Subject: CN=84be38cc57c314f971209ea7c773343b22d62501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:28:4e:d5:75:a9:e3:45:8d:be:bb:f4:8b: 48:bc:05:54:6d:35:68:34:e6:5f:b3:56:a2:5b:08: d6:bf:8a:c0:8e:a6:cd:ce:77:ac:fe:05:f7:15:99: 2c:97:7d:d5:a8:95:23:9d:88:09:6e:90:09:ae:f7: 32:fe:d1:18:36:21:e0:99:fd:bb:a5:f5:07:0f:50: 5a:b0:fa:59:3e:c0:8b:49:9e:16:53:28:47:df:7d: 91:7c:ae:90:9f:36:04:3d:23:ae:a9:8d:09:7f:69: ac:e4:5a:3a:8d:a8:aa:4e:0f:ea:80:52:8a:4c:26: 42:1c:3f:02:fd:21:8e:49:85:b4:1b:9d:57:df:e2: 76:73:ba:16:25:41:f7:32:8c:8f:d7:98:91:d7:af: 64:55:e1:5a:db:0f:8c:2e:0c:6a:b6:ba:44:dd:2f: 74:2b:c9:a5:7a:67:89:bb:67:0f:72:91:29:99:f3: 83:40:04:a3:71:e2:77:ed:ae:49:0d:b0:88:98:c2: 49:df:14:b7:7e:5f:78:5d:7f:3c:c6:89:6a:41:31: 6f:16:9b:24:e6:64:fb:cc:1c:af:98:2a:43:c0:3b: 44:c2:93:6f:ec:1c:6d:ae:6b:ae:ee:2e:64:b4:8b: e9:7c:10:24:15:cb:f3:af:c7:a2:b5:6e:9c:aa:d2: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BE:38:CC:57:C3:14:F9:71:20:9E:A7:C7:73:34:3B:22:D6:25:01 X509v3 Authority Key Identifier: keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6c:6c:f9:7c:d1:66:21:fe:f0:9d:4a:ef:4e:91:58:cc:c1: d9:3e:f0:9d:08:55:7c:b3:e5:51:17:9f:81:ad:f5:8a:d1:80: 7c:7a:ee:8c:7e:c5:cf:66:79:5f:cc:97:e3:c4:97:46:2d:bb: 71:bd:8d:8f:18:ca:ea:3e:92:fb:f9:6d:ae:f0:f3:71:a3:6b: a6:ef:ce:22:49:91:30:04:88:10:15:42:ab:95:0f:cd:88:68: 00:1c:a1:1b:a5:86:00:8c:1b:61:97:10:a9:ca:20:8d:81:07: 4b:eb:d5:62:1b:b3:18:2f:12:8a:a0:77:58:dd:8d:97:d4:ad: 91:6f:ad:f2:29:69:f9:c7:38:5c:af:a8:1d:57:07:7c:ff:73: f2:0d:ac:36:a6:02:bc:30:fe:6b:26:5e:50:4d:f6:2a:31:b6: 5e:65:84:cd:f2:06:d0:ae:ec:ae:86:50:34:49:da:9b:8e:22: d9:b2:68:51:bc:f4:8c:71:01:e5:d5:01:eb:d9:b3:be:91:8b: dc:5e:d5:7f:65:61:25:e8:b0:8d:0e:43:e4:1d:37:d5:a3:f9: 79:99:67:67:08:c6:cc:d3:18:55:51:23:a2:ed:c0:fd:26:f6: 09:37:bf:6e:81:22:60:d6:92:92:75:b7:ec:c4:ea:e3:26:06: d4:0e:16:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14v+vJOxALjIN9Z1zNsiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOTlmZTE1MmU3NzY0N2EzYmY4ZjA1YWFjYzYwY2JhYjhi MGYzZjEwHhcNMjYwMTI1MTYwMDUzWhcNMjYwMTI2MTYwMDUzWjAzMTEwLwYDVQQD Eyg4NGJlMzhjYzU3YzMxNGY5NzEyMDllYTdjNzczMzQzYjIyZDYyNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMooTtV1qeNFjb679ItIvAVUbTVo NOZfs1aiWwjWv4rAjqbNznes/gX3FZksl33VqJUjnYgJbpAJrvcy/tEYNiHgmf27 pfUHD1BasPpZPsCLSZ4WUyhH332RfK6QnzYEPSOuqY0Jf2ms5Fo6jaiqTg/qgFKK TCZCHD8C/SGOSYW0G51X3+J2c7oWJUH3MoyP15iR169kVeFa2w+MLgxqtrpE3S90 K8mlemeJu2cPcpEpmfODQASjceJ37a5JDbCImMJJ3xS3fl94XX88xolqQTFvFpsk 5mT7zByvmCpDwDtEwpNv7Bxtrmuu7i5ktIvpfBAkFcvzr8eitW6cqtKgVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS+OMxXwxT5cSCep8dzNDsi1iUBMB8GA1UdIwQY MBaAFICZ/hUud2R6O/jwWqzGDLq4sPPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYt NWJhZWYzZmMyOTVkLzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYtNWJhZWYzZmMyOTVk LzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWxs+XzR ZiH+8J1K706RWMzB2T7wnQhVfLPlURefga31itGAfHrujH7Fz2Z5X8yX48SXRi27 cb2NjxjK6j6S+/ltrvDzcaNrpu/OIkmRMASIEBVCq5UPzYhoAByhG6WGAIwbYZcQ qcogjYEHS+vVYhuzGC8SiqB3WN2Nl9StkW+t8ilp+cc4XK+oHVcHfP9z8g2sNqYC vDD+ayZeUE32KjG2XmWEzfIG0K7sroZQNEnam44i2bJoUbz0jHEB5dUB69mzvpGL 3F7Vf2VhJeiwjQ5D5B031aP5eZlnZwjGzNMYVVEjou3A/Sb2CTe/boEiYNaSknW3 7MTq4yYG1A4WSQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:18 2026 by rpki-client