This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json) Hash identifier: twsYQDQON6VYNhpuXxvTbra/jXVUYnMQaaEt/KMtH10= Subject key identifier: 2A:BE:7A:79:87:8A:D5:FB:38:06:D1:3A:F3:39:2D:7E:DB:06:EA:1C Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Certificate serial: 019AF3899FCFADF9AF84D5D5EAF4F141C744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft Manifest number: 0307 Signing time: Sat 06 Dec 2025 12:01:14 +0000 Manifest this update: Sat 06 Dec 2025 12:01:14 +0000 Manifest next update: Sun 07 Dec 2025 12:01:14 +0000 Files and hashes: 1: KjyhUoUeuc685PJ3Cydi0XS_e4w.roa (hash: bBm4maZm67K/QAp7YyZEgozC1Euigq+BdUinF8LgCVw=) 2: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: ykduv2hgq3xpGs7lUpDlZboN2wFZaG/w1bDWsCCK9PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9f:cf:ad:f9:af:84:d5:d5:ea:f4:f1:41:c7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1 Validity Not Before: Dec 6 12:01:14 2025 GMT Not After : Dec 7 12:01:14 2025 GMT Subject: CN=2abe7a79878ad5fb3806d13af3392d7edb06ea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:65:d4:78:13:7c:c2:4a:fc:f6:85:5a:1a: 3d:cd:ec:02:aa:ba:97:85:d6:da:fa:97:2c:60:ad: 71:83:15:16:96:6c:d5:5a:80:94:37:26:d0:0d:37: 82:53:1b:bf:31:9e:28:44:4e:fc:22:ed:09:66:76: ce:b3:40:b8:7c:3b:eb:fb:65:83:3a:80:1a:23:32: 62:9d:aa:5b:31:5a:21:11:31:ba:6b:e6:79:98:57: 25:4c:9a:88:ca:77:29:b4:1b:b5:a8:81:67:c0:88: 8f:61:9e:c2:3b:1b:db:7a:b7:66:a8:b2:13:b0:10: f7:d3:33:9b:25:c8:06:f5:42:d3:9b:c6:3d:92:86: 71:a3:d2:08:98:0b:54:ce:aa:95:6b:68:4c:9e:5f: 54:8e:2f:93:3d:0b:76:fd:51:01:0b:7a:ca:0b:ec: 1a:b4:2c:53:8e:1f:3f:7d:ee:eb:e6:a2:cb:8a:2d: f5:90:fe:08:5f:30:e5:be:82:c2:e4:e8:41:b7:50: ce:9f:d0:1f:1c:0f:a1:52:c3:0d:08:4f:d7:f3:01: e7:81:0f:56:37:a6:01:8b:8d:63:f2:b6:af:97:11: cd:ad:fb:cc:3a:f2:33:01:a0:d8:55:35:30:89:68: dd:6c:9e:e7:83:5d:2d:7b:51:82:d2:03:c7:cc:89: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BE:7A:79:87:8A:D5:FB:38:06:D1:3A:F3:39:2D:7E:DB:06:EA:1C X509v3 Authority Key Identifier: keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:20:9c:f8:f2:6a:81:da:f2:cb:89:df:a7:b3:b0:6c:26:9e: 02:c2:e4:21:ed:cf:d4:51:e1:03:f9:95:e6:7c:ca:a8:8e:9c: 69:fb:14:07:f5:51:fc:22:56:7c:10:90:6a:ae:6c:e5:55:b6: c7:29:aa:7e:ae:76:b0:63:d9:40:8a:57:95:93:19:d9:15:88: 18:d6:2f:9c:e6:29:6f:47:a3:4f:af:a1:5a:df:c9:d0:7e:f2: 0d:d4:d8:22:bb:35:a0:0e:cc:1e:84:5a:97:88:44:36:d4:88: 0c:39:5e:28:9a:23:79:9e:f4:dd:d2:a8:6a:c2:18:d8:cd:68: c6:7c:58:6e:ac:7d:a1:17:b9:3a:6c:f5:b4:df:27:f5:a6:ba: e9:ab:c4:1a:b0:ee:6b:65:8c:42:98:3a:3b:a4:8f:f6:c1:6a: 76:fc:1a:5f:41:09:45:60:b1:94:72:60:86:aa:21:d0:c4:92: c0:4d:5c:f4:e6:cc:a5:53:cb:96:b1:6e:eb:19:d7:5e:91:fb: 89:d6:f4:bb:3a:0d:3f:1d:2d:7b:bd:ac:fc:48:d4:81:61:1f: cf:4b:a9:76:2e:01:b1:33:bf:8c:0f:03:b8:fb:27:8e:b4:07: 73:9c:c9:fd:21:e3:ad:a4:ab:f7:c9:08:c2:70:28:62:34:50: 8d:ce:85:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZ/PrfmvhNXV6vTxQcdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOTlmZTE1MmU3NzY0N2EzYmY4ZjA1YWFjYzYwY2JhYjhi MGYzZjEwHhcNMjUxMjA2MTIwMTE0WhcNMjUxMjA3MTIwMTE0WjAzMTEwLwYDVQQD EygyYWJlN2E3OTg3OGFkNWZiMzgwNmQxM2FmMzM5MmQ3ZWRiMDZlYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod1l1HgTfMJK/PaFWho9zewCqrqX hdba+pcsYK1xgxUWlmzVWoCUNybQDTeCUxu/MZ4oRE78Iu0JZnbOs0C4fDvr+2WD OoAaIzJinapbMVohETG6a+Z5mFclTJqIyncptBu1qIFnwIiPYZ7COxvberdmqLIT sBD30zObJcgG9ULTm8Y9koZxo9IImAtUzqqVa2hMnl9Uji+TPQt2/VEBC3rKC+wa tCxTjh8/fe7r5qLLii31kP4IXzDlvoLC5OhBt1DOn9AfHA+hUsMNCE/X8wHngQ9W N6YBi41j8ravlxHNrfvMOvIzAaDYVTUwiWjdbJ7ng10te1GC0gPHzInXZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq+enmHitX7OAbROvM5LX7bBuocMB8GA1UdIwQY MBaAFICZ/hUud2R6O/jwWqzGDLq4sPPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYt NWJhZWYzZmMyOTVkLzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYtNWJhZWYzZmMyOTVk LzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSCc+PJq gdryy4nfp7OwbCaeAsLkIe3P1FHhA/mV5nzKqI6cafsUB/VR/CJWfBCQaq5s5VW2 xymqfq52sGPZQIpXlZMZ2RWIGNYvnOYpb0ejT6+hWt/J0H7yDdTYIrs1oA7MHoRa l4hENtSIDDleKJojeZ703dKoasIY2M1oxnxYbqx9oRe5Omz1tN8n9aa66avEGrDu a2WMQpg6O6SP9sFqdvwaX0EJRWCxlHJghqoh0MSSwE1c9ObMpVPLlrFu6xnXXpH7 idb0uzoNPx0te72s/EjUgWEfz0updi4BsTO/jA8DuPsnjrQHc5zJ/SHjraSr98kI wnAoYjRQjc6FOw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:17 2025 by rpki-client