This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File: gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier: l53sC5VWHgYeyJ+kknvVL4mG1SX9LXqDztSbY8TeRco=
Subject key identifier: 86:5A:5C:6B:B6:F2:E5:F6:1B:6E:92:E7:64:9D:E2:CF:FC:3A:B5:15
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer: /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial: 019BE292DBF445463779BEA404883E0C3EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number: 0383
Signing time: Wed 21 Jan 2026 22:00:33 +0000
Manifest this update: Wed 21 Jan 2026 22:00:33 +0000
Manifest next update: Thu 22 Jan 2026 22:00:33 +0000
Files and hashes: 1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: 4+6wt5GEKy1VtM3LtI6AmFqfVccFeYENrosTbuhsmKM=)
2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e2:92:db:f4:45:46:37:79:be:a4:04:88:3e:0c:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Validity
Not Before: Jan 21 22:00:33 2026 GMT
Not After : Jan 22 22:00:33 2026 GMT
Subject: CN=865a5c6bb6f2e5f61b6e92e7649de2cffc3ab515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:55:bb:2d:b7:97:72:28:29:c8:18:bd:d5:
a4:e7:0b:23:94:db:98:51:fe:af:f5:3e:77:0a:e4:
f1:61:9b:ad:c9:26:cc:0e:c4:bf:fb:ae:cd:ca:aa:
43:69:8b:25:89:06:a3:4d:f5:e9:70:98:be:6c:37:
0f:fe:34:79:ea:d2:fc:d9:e5:bc:4b:29:05:7e:ef:
01:be:ea:aa:09:c1:6f:6f:d9:1d:65:fe:d8:eb:ab:
26:41:f4:7e:e1:51:b3:ac:d9:af:27:3d:ad:4a:4d:
dd:0b:a6:1c:48:1f:74:1f:fa:36:57:a3:81:6d:af:
97:fb:d8:6b:97:ae:18:29:38:78:c4:27:0c:5c:d6:
95:d8:bb:8c:a7:31:06:a0:51:df:68:f8:09:fb:ef:
2a:f4:5e:15:1c:17:aa:89:96:46:c4:27:d6:1a:aa:
3d:f4:41:61:b8:e3:9c:31:fa:c8:9c:53:4b:49:9f:
24:d5:15:3c:9b:a7:a0:13:7f:4e:a5:af:fb:53:ed:
cb:97:8f:89:df:ce:7b:1b:88:e5:5c:88:29:2a:7c:
79:19:fc:3c:c8:02:40:7c:1f:50:6b:b4:87:6c:2e:
de:db:f6:e3:15:5a:f2:6e:12:f8:78:74:18:c4:4f:
fa:74:de:90:37:27:4f:3a:dd:6a:13:66:39:17:a3:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:5C:6B:B6:F2:E5:F6:1B:6E:92:E7:64:9D:E2:CF:FC:3A:B5:15
X509v3 Authority Key Identifier:
keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9c:6a:cb:e5:8d:d0:a0:65:5e:f0:8e:25:fd:e1:3f:97:f4:
6c:e2:69:74:12:ee:97:6a:37:be:46:e0:2a:13:8a:ea:3f:28:
8d:52:41:7e:ee:27:17:b6:b5:f0:8a:b0:87:c9:60:f4:8b:d5:
bd:e4:3b:bf:a3:78:ff:f3:bf:a3:a1:22:46:a5:39:46:13:aa:
9f:da:ae:e0:f2:f4:4e:11:75:40:04:2c:d5:d0:32:ca:94:8b:
ce:2f:6f:e7:5d:92:f0:8d:07:89:ff:5d:58:e4:7a:18:1a:c3:
04:9e:10:b3:c0:ff:48:7b:28:e2:cf:61:62:cc:d0:44:a8:8a:
15:a1:97:ef:77:69:2b:90:e5:db:ab:8d:e3:44:3b:f2:87:0e:
19:87:98:30:0a:ba:9b:52:d3:95:41:e7:65:86:48:2d:ce:b0:
5c:7b:45:46:61:41:90:69:2e:d5:b3:04:0d:b2:c2:c9:9c:79:
ab:08:14:a3:50:1d:7e:9b:91:ba:70:b7:dd:57:8b:30:0d:97:
4a:e7:69:e8:2d:64:72:1e:7c:d8:90:ba:33:c9:31:ed:45:18:
40:63:22:5b:bb:0c:94:b1:ca:e4:fd:c0:0e:1f:11:86:53:66:
94:ce:4c:ce:23:00:ab:3d:3e:b1:41:a2:27:ef:56:4c:91:7e:
78:68:34:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZviktv0RUY3eb6kBIg+DD6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOTlmZTE1MmU3NzY0N2EzYmY4ZjA1YWFjYzYwY2JhYjhi
MGYzZjEwHhcNMjYwMTIxMjIwMDMzWhcNMjYwMTIyMjIwMDMzWjAzMTEwLwYDVQQD
Eyg4NjVhNWM2YmI2ZjJlNWY2MWI2ZTkyZTc2NDlkZTJjZmZjM2FiNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngdVuy23l3IoKcgYvdWk5wsjlNuY
Uf6v9T53CuTxYZutySbMDsS/+67NyqpDaYsliQajTfXpcJi+bDcP/jR56tL82eW8
SykFfu8BvuqqCcFvb9kdZf7Y66smQfR+4VGzrNmvJz2tSk3dC6YcSB90H/o2V6OB
ba+X+9hrl64YKTh4xCcMXNaV2LuMpzEGoFHfaPgJ++8q9F4VHBeqiZZGxCfWGqo9
9EFhuOOcMfrInFNLSZ8k1RU8m6egE39Opa/7U+3Ll4+J3857G4jlXIgpKnx5Gfw8
yAJAfB9Qa7SHbC7e2/bjFVrybhL4eHQYxE/6dN6QNydPOt1qE2Y5F6MF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZaXGu28uX2G26S52Sd4s/8OrUVMB8GA1UdIwQY
MBaAFICZ/hUud2R6O/jwWqzGDLq4sPPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYt
NWJhZWYzZmMyOTVkLzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYtNWJhZWYzZmMyOTVk
LzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJxqy+WN
0KBlXvCOJf3hP5f0bOJpdBLul2o3vkbgKhOK6j8ojVJBfu4nF7a18Iqwh8lg9IvV
veQ7v6N4//O/o6EiRqU5RhOqn9qu4PL0ThF1QAQs1dAyypSLzi9v512S8I0Hif9d
WOR6GBrDBJ4Qs8D/SHso4s9hYszQRKiKFaGX73dpK5Dl26uN40Q78ocOGYeYMAq6
m1LTlUHnZYZILc6wXHtFRmFBkGku1bMEDbLCyZx5qwgUo1AdfpuRunC33VeLMA2X
Sudp6C1kch582JC6M8kx7UUYQGMiW7sMlLHK5P3ADh8RhlNmlM5MziMAqz0+sUGi
J+9WTJF+eGg03A==
-----END CERTIFICATE-----
Generated at Thu Jan 22 09:07:17 2026 by rpki-client