This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File:                     GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier:          IRalL+EiTPMFh5Cucu2DNBu0Vz/OAbyyzQBIScsWWNI=
Subject key identifier:   71:CC:43:7F:28:83:4A:24:5C:7E:F1:5C:ED:E2:DC:5B:6F:CB:2E:5B
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer:       /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial:       019C427DAF0FBD7C51089E7FDFC3F47F28BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number:          098E
Signing time:             Mon 09 Feb 2026 13:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:58 +0000
Files and hashes:         1: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: RnBnVSgjlU6JxTAgX4o/mukjz66+txIKxSHasbrwKnE=)
                          2: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (hash: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA=)
                          3: xTy14ClaR4Rvu9WN2hIEK42ff6w.roa (hash: MWs9WTWsQLed5Ou31CqMyRYBYZdgWbH79vbLFld2S5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:af:0f:bd:7c:51:08:9e:7f:df:c3:f4:7f:28:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
        Validity
            Not Before: Feb  9 13:00:58 2026 GMT
            Not After : Feb 10 13:00:58 2026 GMT
        Subject: CN=71cc437f28834a245c7ef15cede2dc5b6fcb2e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:b3:7d:63:ad:77:13:20:31:c4:e8:a2:24:
                    29:a2:74:62:fb:28:c0:d3:d3:53:2a:69:87:a1:37:
                    7d:97:28:b8:42:b6:1c:f1:87:68:fe:ad:f5:a4:25:
                    9d:cd:67:e8:b8:76:9d:b7:c3:bb:dd:60:e9:33:b9:
                    b0:c1:0d:c0:f3:05:e2:70:55:da:2b:53:d7:51:d8:
                    29:01:42:c0:cf:d3:0f:7e:27:37:88:78:d2:43:2f:
                    75:e5:66:54:72:f0:30:bb:d8:b0:06:da:15:7e:b8:
                    70:37:1c:c3:af:7a:46:e7:29:0e:e9:45:00:0e:9b:
                    bf:60:ed:91:41:b9:96:70:b8:54:b5:e3:e1:bb:1d:
                    0c:59:a6:a9:75:54:29:92:38:57:75:ea:50:79:77:
                    c5:63:1d:6a:77:ac:f7:f2:83:fb:49:75:6c:9f:28:
                    68:7d:f6:49:9f:80:35:3b:88:2e:7d:60:6d:a1:57:
                    1f:c9:fb:44:2d:67:85:fb:90:ef:ee:43:ae:cd:58:
                    99:ba:f7:41:a7:e4:b3:49:df:72:e0:f0:b5:95:bb:
                    60:b7:8f:5d:9e:c9:61:19:0c:33:3b:18:aa:77:b5:
                    1c:71:4a:9f:c9:68:5b:dc:46:3a:95:c3:f6:67:3f:
                    a8:3a:b8:e1:fe:c1:ff:98:99:34:f9:f4:74:03:62:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:43:7F:28:83:4A:24:5C:7E:F1:5C:ED:E2:DC:5B:6F:CB:2E:5B
            X509v3 Authority Key Identifier:
                keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:10:92:65:05:c3:11:80:67:2f:c0:c0:84:bb:05:c8:73:
         18:01:1a:cb:a4:4e:43:13:d1:c5:c3:9b:6b:89:83:c5:51:28:
         b8:39:73:40:1b:a7:50:fc:60:69:98:77:fc:70:13:8b:a4:2c:
         40:f1:2c:7e:bc:8b:d4:9c:b9:11:23:da:3e:61:b7:96:ab:01:
         63:ed:ad:a3:02:fe:4a:c3:31:8a:7d:44:44:04:59:c6:9f:0b:
         b9:ff:10:6c:94:6b:b2:5c:84:57:66:aa:e4:de:0b:85:ff:cc:
         63:0e:b0:c8:0c:90:cc:95:10:1c:8e:12:3b:17:11:6d:b5:8e:
         0a:6b:26:ab:d8:5f:d2:01:a5:c6:b3:f2:bf:c3:a1:15:5d:a4:
         e1:a2:2f:51:4d:aa:39:31:bf:06:5e:50:0d:dd:73:1f:a6:7a:
         2e:eb:6c:77:4f:a7:5d:8b:30:a3:31:c1:38:94:25:c2:35:92:
         ae:09:b6:cd:4c:66:34:5e:3e:49:e7:bd:6e:0e:bc:0f:79:b7:
         85:25:fb:20:28:c8:56:a5:6d:d8:a8:11:5d:4a:ad:31:9a:b2:
         ac:32:45:84:d5:82:fa:a7:0d:bc:5c:4e:35:a6:af:a4:e2:28:
         ed:a4:dc:69:05:0b:0e:36:81:b4:47:e6:7b:cf:94:53:d0:4f:
         c0:0a:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:26 2026 by rpki-client