This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json) Hash identifier: WMfGV/s0TfxBtLPmOVwVHQchLHWcnuKiYiQq6A6hJJE= Subject key identifier: C2:53:A3:C9:42:37:B1:D0:C1:7B:68:BD:09:2F:DA:DB:29:82:A6:67 Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Certificate serial: 019B1B3BF836C1CB784294CCD788F9FE7FED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 05:01:13 +0000 Manifest this update: Sun 14 Dec 2025 05:01:13 +0000 Manifest next update: Mon 15 Dec 2025 05:01:13 +0000 Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: gqxhwaI51ed19ZPjEOQ4vqknvFVK4DfHVADuCrYqn2g=) 2: m9vPm-d9Bn3AvjU_sT4O0RluO24.roa (hash: PrKxYqblNncLjZ55IZv6YJdkcJQzYP8xUBPb8KCfnvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:f8:36:c1:cb:78:42:94:cc:d7:88:f9:fe:7f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862 Validity Not Before: Dec 14 05:01:13 2025 GMT Not After : Dec 15 05:01:13 2025 GMT Subject: CN=c253a3c94237b1d0c17b68bd092fdadb2982a667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:00:98:9f:66:07:87:7c:67:0f:92:60:45: 33:19:cc:18:99:53:51:c3:7d:6a:ee:78:52:7a:f3: 96:7a:18:f5:de:3c:ff:bb:89:2a:f3:a1:72:0d:64: bc:0a:6f:bc:20:19:a3:a0:58:df:e6:6b:36:8b:76: 52:b6:f6:09:2c:b1:00:65:b8:34:09:95:a4:93:76: 36:09:39:91:c3:ec:c8:18:4b:b9:5e:18:19:cb:9c: 18:87:b2:02:0c:de:5b:fc:1b:13:07:4e:b6:6d:f7: 74:11:63:db:bc:ad:d2:f9:c6:91:da:e8:d4:eb:62: d2:e8:94:f5:f8:91:1d:2b:c9:a4:23:3b:56:58:06: 72:d2:25:73:d9:2e:22:ed:1f:2b:91:28:31:17:04: d8:0b:3d:1e:2a:06:0c:a5:3e:ea:54:5b:b9:6e:b2: 0d:5f:05:5c:0d:6f:d5:41:f9:18:93:9a:43:c1:a8: ae:3e:e0:84:5e:91:0a:08:53:48:da:a0:2b:d4:c9: 85:c5:83:ef:db:1f:02:ad:d1:fa:c1:cc:29:6c:2c: 88:ab:a1:92:ee:c7:71:18:18:5a:cd:78:62:00:11: a1:dc:e6:25:52:c7:52:5f:fc:1d:a6:46:42:43:2b: e6:58:45:5b:9d:49:d0:e8:6f:30:e7:02:82:34:56: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:A3:C9:42:37:B1:D0:C1:7B:68:BD:09:2F:DA:DB:29:82:A6:67 X509v3 Authority Key Identifier: keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:15:33:f0:e3:1c:f7:81:b9:f2:75:a8:59:25:7b:2f:6d:b4: f3:5d:4f:3c:a4:9b:3b:64:0b:7a:5e:a1:ab:0d:72:c7:6c:f3: 98:d9:7f:34:2f:1a:d5:19:7c:5f:8c:67:fb:bb:99:5e:7a:c1: 0f:09:82:70:5b:54:ad:f0:e9:b7:c5:23:a8:c9:75:05:84:79: bb:2f:8f:bc:a1:39:7a:05:e9:a8:d7:9c:07:d2:8e:1e:10:b6: 17:5e:3f:f3:5d:25:e6:a5:2a:e5:d7:cc:4a:49:e4:84:52:ea: 39:73:b9:36:19:e8:e7:24:cf:03:3f:95:77:4d:f2:cb:d8:6c: b2:c5:e3:76:1c:e0:c0:70:8e:78:b1:5a:0d:a9:5c:d0:5a:67: 8d:a3:07:c6:2d:b8:ff:67:8b:f6:d0:43:15:b9:7c:d0:05:61: 0e:54:64:27:13:db:30:dd:17:de:84:07:5b:84:00:0c:0e:3b: 42:70:39:05:8f:02:ac:a8:e4:64:c0:9a:e1:5a:72:da:ca:7e: 17:5d:69:9d:4a:d9:c2:35:ca:bc:b5:da:13:79:66:1a:b3:10: 55:12:30:45:4c:e8:ef:80:d7:90:3f:ca:49:49:64:d9:3e:2f: 4b:61:b7:ea:2f:51:6a:8b:30:d8:7c:bb:56:78:5d:4a:58:a1: 96:e6:fb:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO/g2wct4QpTM14j5/n/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTRlYTNjZWQ0ZjEzNzEwZDM0MDQ0Y2ZjYjNkMWQ1NmM1 NTA4NjIwHhcNMjUxMjE0MDUwMTEzWhcNMjUxMjE1MDUwMTEzWjAzMTEwLwYDVQQD EyhjMjUzYTNjOTQyMzdiMWQwYzE3YjY4YmQwOTJmZGFkYjI5ODJhNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8YAmJ9mB4d8Zw+SYEUzGcwYmVNR w31q7nhSevOWehj13jz/u4kq86FyDWS8Cm+8IBmjoFjf5ms2i3ZStvYJLLEAZbg0 CZWkk3Y2CTmRw+zIGEu5XhgZy5wYh7ICDN5b/BsTB062bfd0EWPbvK3S+caR2ujU 62LS6JT1+JEdK8mkIztWWAZy0iVz2S4i7R8rkSgxFwTYCz0eKgYMpT7qVFu5brIN XwVcDW/VQfkYk5pDwaiuPuCEXpEKCFNI2qAr1MmFxYPv2x8CrdH6wcwpbCyIq6GS 7sdxGBhazXhiABGh3OYlUsdSX/wdpkZCQyvmWEVbnUnQ6G8w5wKCNFZWpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJTo8lCN7HQwXtovQkv2tspgqZnMB8GA1UdIwQY MBaAFIGU6jztTxNxDTQETPyz0dVsVQhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDIt MjM3MjRiYWIyMjI3LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDItMjM3MjRiYWIyMjI3 LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRUz8OMc 94G58nWoWSV7L220811PPKSbO2QLel6hqw1yx2zzmNl/NC8a1Rl8X4xn+7uZXnrB DwmCcFtUrfDpt8UjqMl1BYR5uy+PvKE5egXpqNecB9KOHhC2F14/810l5qUq5dfM SknkhFLqOXO5Nhno5yTPAz+Vd03yy9hsssXjdhzgwHCOeLFaDalc0FpnjaMHxi24 /2eL9tBDFbl80AVhDlRkJxPbMN0X3oQHW4QADA47QnA5BY8CrKjkZMCa4Vpy2sp+ F11pnUrZwjXKvLXaE3lmGrMQVRIwRUzo74DXkD/KSUlk2T4vS2G36i9Raosw2Hy7 VnhdSlihlub7YQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:30 2025 by rpki-client