This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json) Hash identifier: GTp01+lXnvoMTUNCn3DhMI1LHHlNHMWxQbt1xjbDB6g= Subject key identifier: 9A:6F:E3:1D:2A:60:34:BC:FF:4A:06:7F:68:26:D6:DA:99:4F:7A:44 Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Certificate serial: 019B364580E7383AE20C4A465E23B66CE895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 11:01:23 +0000 Manifest this update: Fri 19 Dec 2025 11:01:23 +0000 Manifest next update: Sat 20 Dec 2025 11:01:23 +0000 Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: SLB9J+QJHkL3p30bet2UZzeUCq4YXXzviqd/Dsy5+oQ=) 2: m9vPm-d9Bn3AvjU_sT4O0RluO24.roa (hash: PrKxYqblNncLjZ55IZv6YJdkcJQzYP8xUBPb8KCfnvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:80:e7:38:3a:e2:0c:4a:46:5e:23:b6:6c:e8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Validity Not Before: Dec 19 11:01:23 2025 GMT Not After : Dec 20 11:01:23 2025 GMT Subject: CN=9a6fe31d2a6034bcff4a067f6826d6da994f7a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:14:b7:eb:9e:c1:97:9d:41:f7:18:9c:d6:63: ee:3d:d5:eb:6c:71:ba:7a:5f:33:0b:5b:56:b8:72: eb:3a:45:c0:ea:7d:c3:29:1a:a5:fb:e1:56:b3:eb: bf:b1:95:52:89:1b:79:b3:08:60:46:5b:bc:75:b9: ae:fa:ab:31:42:b1:d7:a6:48:61:ee:dd:34:cf:73: 09:91:4b:a8:7b:1e:6f:fe:d5:49:0f:12:7e:0e:38: cf:81:14:c0:2d:74:5f:2b:4a:d6:c1:10:fb:49:f6: fc:cf:51:2f:36:2a:76:42:14:74:e0:55:9d:3e:1b: 63:83:17:f9:d4:af:34:9f:65:af:6f:1b:33:dd:85: 7b:e2:8e:10:e0:74:cf:6b:f9:76:e1:08:44:56:3e: e9:b2:e7:ec:59:f3:92:be:20:0a:28:90:f4:86:de: e0:de:74:1c:27:00:2a:df:21:d2:58:56:59:b3:d1: 5f:9a:5b:d3:3f:2a:31:13:66:c6:f0:89:57:fb:fa: 2a:a0:3e:09:de:af:f8:8e:4b:da:bb:3f:67:6a:9a: a7:d4:dd:c0:f2:2d:0a:b5:3a:26:df:50:2b:73:0d: 8f:1e:e0:68:9d:f6:d0:94:2f:3a:53:80:9d:f8:02: 4a:21:3d:d0:d1:d5:4f:ca:d3:5a:42:0c:ea:f2:4a: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6F:E3:1D:2A:60:34:BC:FF:4A:06:7F:68:26:D6:DA:99:4F:7A:44 X509v3 Authority Key Identifier: keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2e:86:db:fb:bb:03:3a:02:7f:ea:fe:87:ca:34:fd:53:04: dd:05:dc:e6:74:e0:f3:b6:b8:21:ea:ea:0a:cc:34:5b:95:40: 5e:11:55:66:2b:b5:c9:84:22:60:3d:9a:3e:24:ce:37:12:1c: ce:78:74:b8:41:ca:b5:84:ed:a7:bb:09:29:30:72:4b:7f:66: ba:af:f6:ce:bc:b2:97:a6:02:03:c0:7f:a2:31:03:a2:4e:cd: 3a:c8:6a:d1:bf:f5:eb:28:bb:44:ba:b8:70:30:d2:11:67:7e: 3c:2a:a7:44:a1:61:69:c3:0c:55:94:fb:01:20:a9:3f:2c:1a: d6:2e:46:ef:51:9c:5a:7b:8c:ed:4d:60:24:4e:1f:9a:5f:7b: 4b:9f:34:cd:f3:6d:6c:e2:39:4e:56:45:85:db:2e:a9:b0:55: 25:2b:e3:32:d6:9f:3f:cf:29:c9:09:44:de:6c:90:1b:81:68: bd:74:3c:bc:6c:9c:39:42:24:3b:64:01:50:5e:c2:4a:62:7b: f8:d8:7b:3c:62:ae:43:0e:b2:78:8d:bd:58:30:83:bc:12:2a: 89:97:b5:aa:8b:ad:09:d8:e9:3e:ee:a3:9b:d0:6d:9b:87:65: 7a:01:31:ff:f2:30:b8:0c:ea:cc:28:11:bf:f0:33:44:26:5c: da:07:6b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RYDnODriDEpGXiO2bOiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTRlYTNjZWQ0ZjEzNzEwZDM0MDQ0Y2ZjYjNkMWQ1NmM1 NTA4NjIwHhcNMjUxMjE5MTEwMTIzWhcNMjUxMjIwMTEwMTIzWjAzMTEwLwYDVQQD Eyg5YTZmZTMxZDJhNjAzNGJjZmY0YTA2N2Y2ODI2ZDZkYTk5NGY3YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RS3657Bl51B9xic1mPuPdXrbHG6 el8zC1tWuHLrOkXA6n3DKRql++FWs+u/sZVSiRt5swhgRlu8dbmu+qsxQrHXpkhh 7t00z3MJkUuoex5v/tVJDxJ+DjjPgRTALXRfK0rWwRD7Sfb8z1EvNip2QhR04FWd Phtjgxf51K80n2Wvbxsz3YV74o4Q4HTPa/l24QhEVj7psufsWfOSviAKKJD0ht7g 3nQcJwAq3yHSWFZZs9FfmlvTPyoxE2bG8IlX+/oqoD4J3q/4jkvauz9napqn1N3A 8i0KtTom31Arcw2PHuBonfbQlC86U4Cd+AJKIT3Q0dVPytNaQgzq8krv4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpv4x0qYDS8/0oGf2gm1tqZT3pEMB8GA1UdIwQY MBaAFIGU6jztTxNxDTQETPyz0dVsVQhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDIt MjM3MjRiYWIyMjI3LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDItMjM3MjRiYWIyMjI3 LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATi6G2/u7 AzoCf+r+h8o0/VME3QXc5nTg87a4IerqCsw0W5VAXhFVZiu1yYQiYD2aPiTONxIc znh0uEHKtYTtp7sJKTByS39muq/2zryyl6YCA8B/ojEDok7NOshq0b/16yi7RLq4 cDDSEWd+PCqnRKFhacMMVZT7ASCpPywa1i5G71GcWnuM7U1gJE4fml97S580zfNt bOI5TlZFhdsuqbBVJSvjMtafP88pyQlE3myQG4FovXQ8vGycOUIkO2QBUF7CSmJ7 +Nh7PGKuQw6yeI29WDCDvBIqiZe1qoutCdjpPu6jm9Btm4dlegEx//IwuAzqzCgR v/AzRCZc2gdrtQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:47:27 2025 by rpki-client