This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json) Hash identifier: sjDXCTkX3f+/iOf11HucQkagyW4pOBWPvU9g64gIQQk= Subject key identifier: 99:F8:E9:C1:24:5E:EC:D8:C5:74:B2:F2:FC:3A:7B:4F:E5:D8:38:2A Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74 Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774 Certificate serial: 019C41D889190060B25FA747C44EB045A967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft Manifest number: 1158 Signing time: Mon 09 Feb 2026 10:00:35 +0000 Manifest this update: Mon 09 Feb 2026 10:00:35 +0000 Manifest next update: Tue 10 Feb 2026 10:00:35 +0000 Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: J9zS7CcsbC974cHxPnn8G/EuwpGdmBYFcGr3ik4SgtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:89:19:00:60:b2:5f:a7:47:c4:4e:b0:45:a9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774 Validity Not Before: Feb 9 10:00:35 2026 GMT Not After : Feb 10 10:00:35 2026 GMT Subject: CN=99f8e9c1245eecd8c574b2f2fc3a7b4fe5d8382a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:2e:38:83:bf:9a:3e:96:4e:6a:15:d5:ed: f6:f6:b8:04:c5:96:be:af:fa:5b:48:a7:60:37:4a: aa:81:27:85:39:41:b6:44:05:f1:ae:d9:38:e1:d4: 94:d2:dd:0e:f5:11:3c:18:40:ab:b3:bd:a9:d8:8f: bd:88:97:d0:ca:7d:13:3e:ba:d0:9a:d7:a5:41:20: e1:1e:03:3d:46:3f:3f:9b:d4:eb:c3:1f:1d:1b:7d: 8c:1d:70:d7:e3:c0:f5:a2:71:9f:83:21:b3:c2:9f: f5:5a:9e:27:cd:15:e5:be:c2:23:63:d4:a9:b8:21: 61:a9:2b:00:58:a2:3f:44:a8:8e:46:de:e8:76:55: 32:87:f5:b8:35:d3:30:62:92:05:71:00:ae:db:df: 1f:54:03:c5:df:f5:47:be:4b:58:2e:ef:c0:4f:02: b0:f8:41:48:44:2a:b3:36:0c:8a:34:8a:18:76:dc: 15:0e:05:84:c1:2a:47:10:49:44:0a:15:f3:19:90: 60:34:19:7d:b1:4f:88:c4:9f:7f:33:77:8c:bb:7f: 99:0a:bd:b6:95:f8:93:30:08:b9:7c:9a:59:66:17: 59:4b:50:2f:e9:4b:5e:1c:24:8f:90:9d:0f:99:15: 44:d7:f4:de:ac:02:48:b7:fb:70:2a:99:33:82:c0: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F8:E9:C1:24:5E:EC:D8:C5:74:B2:F2:FC:3A:7B:4F:E5:D8:38:2A X509v3 Authority Key Identifier: keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:58:7b:9f:45:5d:21:c2:fa:ad:b0:47:09:78:06:7b:10:7a: ca:4b:3a:18:70:b3:6c:b2:5b:13:62:84:ec:c2:1e:bd:55:34: 97:43:42:66:14:53:99:28:c7:60:e6:32:30:b3:9f:51:5b:5f: 07:3f:58:cd:f0:14:6d:44:25:24:be:2c:94:02:f4:aa:33:1f: 88:86:aa:c3:76:d1:63:e5:cd:a1:7b:42:38:80:4f:a3:1c:60: 26:51:26:4c:ac:4b:3b:98:83:d7:1d:e8:b3:76:a8:13:84:50: 13:45:77:ed:18:51:47:53:19:4a:30:b6:1e:db:1b:13:a9:18: c5:0c:c1:a1:83:6e:1c:fd:d0:1e:c0:6f:e5:89:22:a5:d2:f8: a4:20:5d:04:0d:7d:6d:24:1f:7c:62:da:8e:64:80:9a:e8:54: 7d:eb:5c:78:7b:8b:47:c4:25:db:9c:c9:05:bf:e9:25:c8:70: fa:d5:4a:79:e3:3e:3e:f5:74:54:52:b8:9a:d5:cb:f4:e1:3b: 35:19:59:a2:41:4d:44:55:c6:31:1b:be:f2:66:e1:68:69:2c: 2f:ee:e5:49:2b:c5:a1:66:67:61:48:72:e7:b6:be:1b:f2:9b: 92:6e:bf:54:e6:4f:0f:40:c7:28:d5:08:8f:2e:47:2d:4e:a3: 46:24:47:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IkZAGCyX6dHxE6wRalnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTRiNGJmZWU0NTRkMGFhNDcwYTVjMGE5NDEwMzQ5ZDRh MWQ3NzQwHhcNMjYwMjA5MTAwMDM1WhcNMjYwMjEwMTAwMDM1WjAzMTEwLwYDVQQD Eyg5OWY4ZTljMTI0NWVlY2Q4YzU3NGIyZjJmYzNhN2I0ZmU1ZDgzODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHguOIO/mj6WTmoV1e329rgExZa+ r/pbSKdgN0qqgSeFOUG2RAXxrtk44dSU0t0O9RE8GECrs72p2I+9iJfQyn0TPrrQ mtelQSDhHgM9Rj8/m9Trwx8dG32MHXDX48D1onGfgyGzwp/1Wp4nzRXlvsIjY9Sp uCFhqSsAWKI/RKiORt7odlUyh/W4NdMwYpIFcQCu298fVAPF3/VHvktYLu/ATwKw +EFIRCqzNgyKNIoYdtwVDgWEwSpHEElEChXzGZBgNBl9sU+IxJ9/M3eMu3+ZCr22 lfiTMAi5fJpZZhdZS1Av6UteHCSPkJ0PmRVE1/TerAJIt/twKpkzgsDUCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJn46cEkXuzYxXSy8vw6e0/l2DgqMB8GA1UdIwQY MBaAFILktL/uRU0KpHClwKlBA0nUodd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VTMHYtNUZUUXFrY0tYQXFVRURTZFNoMTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lMGNjYjQtMGZhZi00ODY1LTk2MWYt MzdhYmU5Nzk2MGQ1LzEvZ3VTMHYtNUZUUXFrY0tYQXFVRURTZFNoMTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lMGNjYjQtMGZhZi00ODY1LTk2MWYtMzdhYmU5Nzk2MGQ1 LzEvZ3VTMHYtNUZUUXFrY0tYQXFVRURTZFNoMTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1h7n0Vd IcL6rbBHCXgGexB6yks6GHCzbLJbE2KE7MIevVU0l0NCZhRTmSjHYOYyMLOfUVtf Bz9YzfAUbUQlJL4slAL0qjMfiIaqw3bRY+XNoXtCOIBPoxxgJlEmTKxLO5iD1x3o s3aoE4RQE0V37RhRR1MZSjC2HtsbE6kYxQzBoYNuHP3QHsBv5YkipdL4pCBdBA19 bSQffGLajmSAmuhUfetceHuLR8Ql25zJBb/pJchw+tVKeeM+PvV0VFK4mtXL9OE7 NRlZokFNRFXGMRu+8mbhaGksL+7lSSvFoWZnYUhy57a+G/Kbkm6/VOZPD0DHKNUI jy5HLU6jRiRHFA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:31 2026 by rpki-client