This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json) Hash identifier: Jd4qLH24r1TbgpxLijx/OwXqq0E+3h/81owL6RvAayg= Subject key identifier: B8:37:68:EC:60:2B:AD:3A:2A:3D:E6:14:27:DC:58:0F:F9:BA:51:4B Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Certificate serial: 019C435944B177E4C816A39CDAD19EBC7925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 17:00:49 +0000 Manifest this update: Mon 09 Feb 2026 17:00:49 +0000 Manifest next update: Tue 10 Feb 2026 17:00:49 +0000 Files and hashes: 1: STN4bdrkl_YDGWwd5JCdu_Z84Pc.roa (hash: Gb31UnfXmOSYeiOedmM5BYaTEZl9dUUluUrhCjeeCRE=) 2: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: fV/iYbPZIUZOWCQiyh0X9wVgs2IDLTxY6+TqCDTz+ZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:44:b1:77:e4:c8:16:a3:9c:da:d1:9e:bc:79:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Validity Not Before: Feb 9 17:00:49 2026 GMT Not After : Feb 10 17:00:49 2026 GMT Subject: CN=b83768ec602bad3a2a3de61427dc580ff9ba514b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:a2:73:0a:96:db:f8:e8:b2:df:5a:26:9b: dd:8f:03:ea:c0:63:c9:41:c3:10:71:fa:8c:24:20: e5:6e:1e:f2:3b:fe:e9:e5:90:1b:69:9e:b3:d8:8a: 6b:89:cc:67:72:81:6b:6e:f0:e7:dc:7a:30:af:a4: ba:8c:10:3f:04:bb:25:8d:ef:3b:20:5f:ed:1c:a6: 0d:08:72:b1:f1:44:42:96:fe:f0:98:c0:21:e4:39: 11:0c:2f:25:d5:3c:ad:af:e5:0f:c1:c8:4b:d9:db: 03:b2:a1:c0:3b:c3:36:f3:65:a2:92:9c:c7:d8:96: 28:66:ef:2a:b5:4a:59:6b:0e:12:1f:e6:32:ec:40: 6a:4c:08:d7:5b:45:04:24:82:e2:1a:a5:d0:a1:e5: 19:8c:3f:cb:0f:0a:46:03:a2:b9:64:88:fc:ca:d5: 56:a5:88:77:c1:18:bc:b8:79:08:82:99:26:47:58: cd:fe:fb:a2:17:c7:e8:5f:55:42:20:1c:0e:25:c9: 52:00:8b:8d:ae:0e:34:de:51:e1:9a:90:d8:90:ad: be:c7:69:e4:2d:43:33:cd:16:ce:35:20:1e:a2:eb: de:36:75:a5:1c:e0:32:7b:a8:8d:22:3d:cb:de:e2: ca:f2:47:95:38:fd:2e:53:62:f6:52:b1:06:ba:f7: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:68:EC:60:2B:AD:3A:2A:3D:E6:14:27:DC:58:0F:F9:BA:51:4B X509v3 Authority Key Identifier: keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:eb:ec:5c:5f:94:b0:cd:f9:49:89:ce:23:dc:6e:51:cd:68: 0f:36:f6:e8:da:ca:9d:25:72:a2:3e:fb:bc:18:d6:82:38:9c: f5:8f:1e:a4:67:71:04:48:b7:4f:b7:bb:61:6f:97:f4:b5:c0: de:48:6c:75:92:c7:ff:b1:8f:e0:b4:39:d5:91:c0:f9:24:17: 1a:16:22:46:bb:11:0b:e7:54:a4:e3:f7:96:53:46:15:17:c0: 4d:fa:c7:c3:fb:f3:bc:54:22:85:68:7a:f9:24:9a:86:b7:37: 21:37:84:28:1a:17:bc:a8:aa:5c:2f:a5:54:28:d9:85:90:2a: 48:1b:e4:e4:8f:9c:13:7b:6c:12:2a:bd:93:e8:a4:1e:d3:97: 2c:48:71:11:c8:4d:4d:42:fc:4a:9e:1e:67:09:08:07:4f:75: 3b:a2:15:6c:6d:48:49:80:ec:f1:87:de:2a:1d:b5:01:d1:3d: 65:11:59:db:5a:5f:6e:fc:49:40:88:18:51:d4:01:63:83:27: ad:8f:0e:e0:0d:92:df:70:67:82:b1:a0:9f:93:1f:ca:fc:ee: 64:05:70:1b:5c:e7:f5:8d:53:74:56:dc:7d:91:6d:e6:b8:40: 06:ae:14:c5:f3:1d:9d:f0:b1:6e:bb:1f:7c:ec:79:63:80:99: 4e:90:e2:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUSxd+TIFqOc2tGevHklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTRlYTNjZWQ0ZjEzNzEwZDM0MDQ0Y2ZjYjNkMWQ1NmM1 NTA4NjIwHhcNMjYwMjA5MTcwMDQ5WhcNMjYwMjEwMTcwMDQ5WjAzMTEwLwYDVQQD EyhiODM3NjhlYzYwMmJhZDNhMmEzZGU2MTQyN2RjNTgwZmY5YmE1MTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueWicwqW2/jost9aJpvdjwPqwGPJ QcMQcfqMJCDlbh7yO/7p5ZAbaZ6z2IpricxncoFrbvDn3Howr6S6jBA/BLslje87 IF/tHKYNCHKx8URClv7wmMAh5DkRDC8l1Tytr+UPwchL2dsDsqHAO8M282WikpzH 2JYoZu8qtUpZaw4SH+Yy7EBqTAjXW0UEJILiGqXQoeUZjD/LDwpGA6K5ZIj8ytVW pYh3wRi8uHkIgpkmR1jN/vuiF8foX1VCIBwOJclSAIuNrg403lHhmpDYkK2+x2nk LUMzzRbONSAeouveNnWlHOAye6iNIj3L3uLK8keVOP0uU2L2UrEGuvfEfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg3aOxgK606Kj3mFCfcWA/5ulFLMB8GA1UdIwQY MBaAFIGU6jztTxNxDTQETPyz0dVsVQhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDIt MjM3MjRiYWIyMjI3LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDItMjM3MjRiYWIyMjI3 LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhevsXF+U sM35SYnOI9xuUc1oDzb26NrKnSVyoj77vBjWgjic9Y8epGdxBEi3T7e7YW+X9LXA 3khsdZLH/7GP4LQ51ZHA+SQXGhYiRrsRC+dUpOP3llNGFRfATfrHw/vzvFQihWh6 +SSahrc3ITeEKBoXvKiqXC+lVCjZhZAqSBvk5I+cE3tsEiq9k+ikHtOXLEhxEchN TUL8Sp4eZwkIB091O6IVbG1ISYDs8YfeKh21AdE9ZRFZ21pfbvxJQIgYUdQBY4Mn rY8O4A2S33BngrGgn5MfyvzuZAVwG1zn9Y1TdFbcfZFt5rhABq4UxfMdnfCxbrsf fOx5Y4CZTpDiCg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:56 2026 by rpki-client