This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          yjE+Enr0ANRZYaFp9uhZ5twrAUpvs8MtFecQT097AZA=
Subject key identifier:   67:0F:D7:BA:FC:AD:A7:CD:67:D7:DE:0C:AA:77:A4:09:45:E2:2A:7A
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       019C1FBB71BF22071488341A8D5F43926D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          1807
Signing time:             Mon 02 Feb 2026 19:01:43 +0000
Manifest this update:     Mon 02 Feb 2026 19:01:43 +0000
Manifest next update:     Tue 03 Feb 2026 19:01:43 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: +Y8JSir+n1rWUhucavhtmhkRBbG3MupiFTYdQhPTf5o=)
                          2: 8l0SWe3b28HgD7mm-CfnmnFy7uE.roa (hash: /HXGsu05kBaXf36m4kHjfdsrMe8Gwl63OVzSaOcPq2E=)
                          3: Lz9R6m5SK-yqZEob6cadmxCThHs.roa (hash: jc9B6VAewdJSUcgfHIRXwP2EIxv1ywTev7YQ165P/Qg=)
                          4: TlJFBm5D9j5YuMmzp85IiQTh8co.roa (hash: i++B3U0x1IS6mONz4BFbN/RmzEvmNewnucDBcHMUTt8=)
                          5: wil6FkxZYkrOZGc5qcrYgtNzbBQ.roa (hash: wp6PV3mdjd5yDzGVuaZQJ4OXj/z8YAFEvDtk3UkLrvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:bb:71:bf:22:07:14:88:34:1a:8d:5f:43:92:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Feb  2 19:01:43 2026 GMT
            Not After : Feb  3 19:01:43 2026 GMT
        Subject: CN=670fd7bafcada7cd67d7de0caa77a40945e22a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:9f:2c:2a:18:29:03:25:e4:7a:a9:5a:56:
                    31:fc:1f:16:38:6d:b5:e3:76:36:fb:24:bc:49:89:
                    72:82:3e:a3:42:e8:f4:5e:dc:fc:60:06:84:4c:8a:
                    44:78:0b:0a:48:c2:22:aa:bb:c7:05:c1:68:39:50:
                    6a:62:ff:35:a3:94:4d:b6:1b:c7:e6:c1:4e:d3:e0:
                    5f:db:aa:6d:b8:01:0c:ae:e6:26:8d:87:51:02:8f:
                    a0:dc:dc:7e:34:17:5f:5f:10:a7:a6:68:50:8f:fb:
                    17:6c:f9:ac:ed:5c:5a:bb:50:65:c7:50:08:d7:18:
                    72:3f:c5:96:47:01:36:c8:84:6f:1f:22:7b:6b:b5:
                    b4:9c:15:de:09:e8:05:91:23:bb:4b:1d:58:fb:a9:
                    b1:bb:d0:f8:2e:38:a9:3a:0b:5c:35:6f:0e:b4:2a:
                    0b:df:0f:c7:d6:79:8a:f2:dc:64:aa:ef:d7:c1:36:
                    3d:ff:48:26:17:95:d2:1c:83:02:50:72:9f:74:03:
                    94:1b:97:ff:80:7c:c6:cc:50:94:1c:92:8a:c8:2d:
                    7d:16:07:96:fc:51:ef:4d:36:e0:26:bb:1d:fd:ae:
                    39:c6:5b:66:b0:12:8c:8c:8b:e4:89:fe:53:d3:fc:
                    b2:fd:f1:b9:57:cb:21:03:96:3f:22:52:ae:28:01:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0F:D7:BA:FC:AD:A7:CD:67:D7:DE:0C:AA:77:A4:09:45:E2:2A:7A
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5e:57:11:32:7d:97:8f:96:ea:6a:c4:a5:6e:a3:39:7c:28:
         68:d1:41:6b:24:7e:47:1b:77:80:19:a0:d6:20:a3:9f:9c:66:
         2f:31:be:5f:1f:ed:5b:99:a7:b4:34:5e:c6:10:ac:e9:e1:e2:
         35:5a:5f:68:b1:aa:8b:3f:8d:e0:02:84:7f:13:e8:e6:c5:28:
         28:17:df:2a:9b:43:37:25:ad:65:91:18:dc:c6:bc:0d:a2:8e:
         c1:a1:b6:ff:02:c3:b0:97:cd:a9:13:4a:ae:59:21:67:c1:46:
         b1:09:72:04:b5:f5:8c:19:65:50:d2:81:40:87:eb:66:2d:b1:
         57:e0:57:3d:02:55:88:80:ee:7c:21:d4:f8:37:db:12:8e:f5:
         9b:41:53:17:5a:f8:6f:42:48:73:35:1b:b3:5d:15:2a:1f:8f:
         b4:47:37:b0:bb:0b:3b:36:d2:01:c5:15:19:7d:9c:a3:42:c5:
         da:15:05:b6:b3:08:fa:a2:83:2d:1b:d9:13:b2:8b:8c:41:9d:
         b9:f1:12:c2:e4:d3:2c:91:92:2e:79:ba:7e:d2:d2:64:9f:b4:
         de:40:29:85:8e:1d:59:b0:68:4d:4d:67:26:c2:71:b0:73:43:
         b8:32:09:6c:7f:c9:f2:05:fc:bf:3c:ec:ff:f3:fa:01:4e:f6:
         21:9b:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 00:21:59 2026 by rpki-client