This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File:                     guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier:          0wVArrHMsyPIyzD/4XAPao3kuVE3+Sjp5U3r+SvxVqw=
Subject key identifier:   C4:49:FF:06:59:A1:DC:F3:5A:0E:E6:AB:DE:04:33:32:B3:15:E4:95
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer:       /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial:       019C4434CE32237E75772BD9FEFF1942A5D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number:          0EF9
Signing time:             Mon 09 Feb 2026 21:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:37 +0000
Files and hashes:         1: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: uW7cJow7yxnImY/oP4xC0gnhUMDIf0dXPuRFQ6vzalI=)
                          2: lV6i9HMGJoauyywXtNVMngtUYcw.roa (hash: 12sx9g61Ie6Zxf7JQ+oShflzzu8hN9b9J5QtxLChp3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:ce:32:23:7e:75:77:2b:d9:fe:ff:19:42:a5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
        Validity
            Not Before: Feb  9 21:00:37 2026 GMT
            Not After : Feb 10 21:00:37 2026 GMT
        Subject: CN=c449ff0659a1dcf35a0ee6abde043332b315e495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:a5:3a:a8:d2:7e:bf:ff:08:3b:75:f7:4d:
                    4e:d5:d0:b9:39:f0:64:1f:bb:ea:ad:4f:8f:65:11:
                    4a:6c:c2:7f:7e:57:d2:5a:38:56:f9:29:f7:0d:99:
                    ac:95:c2:cb:11:a5:05:54:c6:1c:85:26:bb:e0:6f:
                    d8:46:6f:06:f9:ea:69:d0:a9:c8:9e:ba:47:ae:25:
                    7b:ce:01:14:89:f4:a4:4b:3c:dc:45:63:bb:b2:d6:
                    dd:6e:bc:81:d6:28:44:00:70:8c:27:a0:4a:40:50:
                    9a:a6:09:19:b2:8f:ef:73:12:09:bc:14:2e:33:bb:
                    cf:4f:1f:99:40:72:b0:24:4b:91:5c:08:c5:1c:40:
                    58:ec:06:f2:81:05:fe:35:64:fa:ca:ef:54:f2:de:
                    ec:40:8a:57:14:6d:33:11:8a:29:86:06:d8:81:3f:
                    2a:ff:de:25:d9:a6:ee:7b:26:09:97:7a:17:68:e9:
                    2e:51:41:98:45:9a:a7:e1:b9:af:3f:04:4e:54:e6:
                    12:e5:0e:52:5c:ae:33:b5:bf:cf:e5:6f:3b:00:5e:
                    4f:17:26:8d:90:2d:65:bf:65:48:ce:19:1f:7d:8f:
                    a8:60:1e:43:73:e7:f8:7d:24:aa:e9:26:15:b3:93:
                    39:40:f6:5c:cc:c9:eb:ff:61:25:5b:c1:ab:3b:9b:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:FF:06:59:A1:DC:F3:5A:0E:E6:AB:DE:04:33:32:B3:15:E4:95
            X509v3 Authority Key Identifier:
                keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:18:23:24:4a:7e:7e:3f:30:19:ed:9b:da:f5:1f:b3:f3:9e:
         f1:8a:62:11:da:1b:e9:00:50:f9:d7:cc:b2:65:70:d0:37:13:
         2d:2a:02:c4:d8:85:ae:f7:89:0c:55:b8:57:91:b8:5c:74:20:
         f4:57:5e:67:ea:18:da:1c:17:5f:35:7b:0c:15:dd:b4:39:24:
         a9:69:d5:9a:e3:d8:41:d9:93:46:31:54:f3:c2:28:a8:d1:9c:
         8b:d0:78:9c:58:6b:74:c2:50:e0:36:97:f8:26:b1:c6:e0:d4:
         f3:da:9a:17:2e:e2:12:77:50:15:e7:84:13:bb:a1:68:5e:ee:
         10:8a:16:34:f9:9e:68:fd:d1:8d:dc:b6:f6:07:fb:9a:19:6e:
         05:94:d7:c9:cc:6d:90:53:43:3a:ae:2c:f1:af:10:a2:29:09:
         b0:d8:70:74:34:47:30:84:09:10:a1:4d:a8:4c:6f:e5:96:12:
         56:99:45:e6:f4:94:70:0c:75:b3:ee:b8:0d:04:bc:72:71:17:
         b9:dd:ad:50:79:56:98:53:f9:e3:17:67:76:af:d7:3f:d6:59:
         2a:66:c0:3e:c5:36:c6:2c:c1:5a:3f:8d:0c:21:8b:a5:47:22:
         22:19:dc:96:24:38:68:f6:60:dd:d3:b3:e1:a5:d8:87:9c:9a:
         0f:63:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:00 2026 by rpki-client