This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft File: GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json) Hash identifier: 1AJaffPn2MXclJFK0vpOsCOCIWXqQXzuRfmH82gQ520= Subject key identifier: 3A:F3:91:DC:8D:F3:84:04:38:2E:B0:22:8D:77:74:04:BF:1C:21:D7 Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F Certificate issuer: /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Certificate serial: 019C4322C794698216C38FFA276911A472FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft Manifest number: 12CE Signing time: Mon 09 Feb 2026 16:01:18 +0000 Manifest this update: Mon 09 Feb 2026 16:01:18 +0000 Manifest next update: Tue 10 Feb 2026 16:01:18 +0000 Files and hashes: 1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: Zr3k+GkNi7pf9NXGQ+JlYgclenRDySpGD+1wh2VMPlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c7:94:69:82:16:c3:8f:fa:27:69:11:a4:72:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f Validity Not Before: Feb 9 16:01:18 2026 GMT Not After : Feb 10 16:01:18 2026 GMT Subject: CN=3af391dc8df38404382eb0228d777404bf1c21d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:66:b9:4d:f1:b7:e8:fd:c9:7b:93:4e:13: 7e:1b:b0:88:da:3c:8d:e7:9e:3b:64:21:7c:8b:a3: 0a:a7:45:a4:56:58:93:17:30:8f:4c:47:7d:b0:65: 75:95:28:e4:b5:42:38:f0:07:77:a2:ce:aa:01:11: 2b:e8:f3:e2:18:76:f1:18:d7:7a:ff:b2:97:dd:1d: 5d:2a:cb:26:c0:b8:08:ef:d1:e3:12:52:5f:0f:3a: 98:0e:f9:17:f4:0e:c3:fb:ba:c8:d5:51:ef:b8:c9: 12:b8:b2:44:78:38:9e:ef:3b:1c:00:c0:b3:b2:8c: 35:59:a6:41:3f:83:d0:7a:73:a5:f6:33:a1:52:33: 48:08:62:19:19:ce:e1:1a:23:11:ce:16:d8:ac:05: b0:27:92:74:7f:e5:17:42:a2:cf:ea:15:c7:f4:77: b5:c9:03:5f:29:ca:fc:0d:eb:75:2d:70:d1:0b:a8: bf:73:f0:75:cc:3e:1e:b4:77:c6:1e:43:ee:15:a1: e1:4c:fc:92:dc:c2:d9:f0:0b:78:0e:57:b8:d2:12: be:8f:a8:00:4a:0f:45:9e:f3:6d:38:ad:88:6e:9d: f6:4a:02:e1:b7:29:d7:85:89:f2:77:73:f4:82:5e: 7f:3a:75:90:5b:cc:01:3e:4d:de:b2:1b:69:7f:e0: ea:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:91:DC:8D:F3:84:04:38:2E:B0:22:8D:77:74:04:BF:1C:21:D7 X509v3 Authority Key Identifier: keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8b:d2:b2:2e:32:26:a3:6d:1f:e0:45:0c:76:d7:8c:ac:21: f0:14:b1:9b:83:bd:7f:32:13:04:0c:31:e4:27:21:f1:d7:9e: a8:93:10:e5:c5:64:51:e2:d7:77:11:8d:c6:f9:8d:e0:1e:09: d8:4b:c4:8c:fe:93:45:94:f2:f3:3b:55:3c:29:12:53:d3:82: 57:34:94:f7:bb:35:68:19:54:e5:1e:b1:ac:5d:77:9a:55:1c: a6:5c:05:e2:13:60:0b:3f:9d:52:21:8b:6d:bb:31:9e:14:17: 97:51:c8:1e:d5:1d:cc:9e:aa:a5:21:d7:5d:33:53:86:25:70: ca:31:b1:a4:c2:83:d6:ea:1f:0e:f0:8b:93:6e:9e:f4:d3:b6: 14:5c:c8:93:14:a4:9d:14:bf:16:ca:db:9d:88:3a:c7:0d:33: b9:35:a0:8c:8d:00:e1:8a:c7:e8:8c:f7:a6:d5:2a:ae:f5:d3: 8f:31:c1:90:9e:98:d3:5e:81:e1:bb:d9:19:3e:bf:27:8b:5f: 52:e1:a5:0b:49:6d:0c:f7:6a:c7:59:1b:67:cc:9b:6c:ea:8a: 3d:26:e5:f5:67:a2:59:4b:5d:27:72:98:fd:2b:ec:2d:ba:3c: c7:2f:2d:4c:e3:26:5d:69:f7:6c:02:72:72:2c:f8:f1:52:32: 65:46:23:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIseUaYIWw4/6J2kRpHL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NGExMWZlNTZiOGY0N2E1YTE0MTUwMzJiNzdmZjlmYjA4 MmUwM2YwHhcNMjYwMjA5MTYwMTE4WhcNMjYwMjEwMTYwMTE4WjAzMTEwLwYDVQQD EygzYWYzOTFkYzhkZjM4NDA0MzgyZWIwMjI4ZDc3NzQwNGJmMWMyMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuANmuU3xt+j9yXuTThN+G7CI2jyN 5547ZCF8i6MKp0WkVliTFzCPTEd9sGV1lSjktUI48Ad3os6qAREr6PPiGHbxGNd6 /7KX3R1dKssmwLgI79HjElJfDzqYDvkX9A7D+7rI1VHvuMkSuLJEeDie7zscAMCz sow1WaZBP4PQenOl9jOhUjNICGIZGc7hGiMRzhbYrAWwJ5J0f+UXQqLP6hXH9He1 yQNfKcr8Det1LXDRC6i/c/B1zD4etHfGHkPuFaHhTPyS3MLZ8At4Dle40hK+j6gA Sg9FnvNtOK2Ibp32SgLhtynXhYnyd3P0gl5/OnWQW8wBPk3eshtpf+DqawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrzkdyN84QEOC6wIo13dAS/HCHXMB8GA1UdIwQY MBaAFBlKEf5WuPR6WhQVAyt3/5+wguA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYt YzZhMTZkZTQ0MmJmLzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYWFlYzAtMGZiYS00ZWZjLTk4YjYtYzZhMTZkZTQ0MmJm LzEvR1VvUl9sYTQ5SHBhRkJVREszZl9uN0NDNEQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYvSsi4y JqNtH+BFDHbXjKwh8BSxm4O9fzITBAwx5Cch8deeqJMQ5cVkUeLXdxGNxvmN4B4J 2EvEjP6TRZTy8ztVPCkSU9OCVzSU97s1aBlU5R6xrF13mlUcplwF4hNgCz+dUiGL bbsxnhQXl1HIHtUdzJ6qpSHXXTNThiVwyjGxpMKD1uofDvCLk26e9NO2FFzIkxSk nRS/FsrbnYg6xw0zuTWgjI0A4YrH6Iz3ptUqrvXTjzHBkJ6Y016B4bvZGT6/J4tf UuGlC0ltDPdqx1kbZ8ybbOqKPSbl9WeiWUtdJ3KY/SvsLbo8xy8tTOMmXWn3bAJy ciz48VIyZUYjpg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:26 2026 by rpki-client