This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
File:                     1-EAlIIyFaM6OWN4a59g--NKydCQ.mft (raw, json)
Hash identifier:          JBGaJMXgGau5IJkgZDACBubviX2NdU523VraqMwx25w=
Subject key identifier:   D4:1B:BC:63:B7:43:3C:5B:CC:EC:C0:98:6C:5D:40:32:B4:6F:E0:8B
Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
Certificate issuer:       /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Certificate serial:       019C1BDE169936633C4353096E3EB7898D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
Manifest number:          61
Signing time:             Mon 02 Feb 2026 01:01:05 +0000
Manifest this update:     Mon 02 Feb 2026 01:01:05 +0000
Manifest next update:     Tue 03 Feb 2026 01:01:05 +0000
Files and hashes:         1: 1-EAlIIyFaM6OWN4a59g--NKydCQ.crl (hash: IxuyzaMgktFXiccmgVtRaHuQjjoq+T4u0FcTjZV6BhI=)
                          2: 5nyyp5bJ6BfhfIdrL4euf6g3prs.asa (hash: g/gn9GfPYPRaS6oGfe8vAdejuU161UnFwUAxOE+MHZQ=)
                          3: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (hash: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:de:16:99:36:63:3c:43:53:09:6e:3e:b7:89:8d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
        Validity
            Not Before: Feb  2 01:01:05 2026 GMT
            Not After : Feb  3 01:01:05 2026 GMT
        Subject: CN=d41bbc63b7433c5bccecc0986c5d4032b46fe08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:6f:00:2e:36:e1:7f:84:0a:f8:88:6d:52:
                    8e:0b:b4:6d:d9:5a:1e:72:4d:3e:c5:6f:cb:d0:30:
                    55:e7:8f:8f:47:b4:db:a9:a9:ac:28:30:41:d8:b6:
                    09:8b:d6:2c:80:f1:7e:76:0b:43:b6:c2:02:68:03:
                    07:54:e1:cd:d0:4f:6c:91:3e:86:0e:40:60:dd:4f:
                    d2:7f:b1:44:af:90:6e:56:18:a3:da:f0:62:05:46:
                    2e:b3:73:09:d4:1e:e5:89:c9:9f:9c:73:49:a3:09:
                    01:d5:65:1f:a4:73:5d:f0:3a:85:39:ad:21:5e:18:
                    fd:90:2d:ad:45:8f:1f:cd:48:47:7d:d7:2e:b2:e0:
                    2f:92:32:56:cb:f0:2c:ca:7b:be:57:3e:2c:26:8c:
                    6f:61:8f:ca:c0:3a:99:5e:b1:2e:da:3b:7c:a2:83:
                    c4:ff:ff:91:23:c8:15:d2:b2:62:cb:1b:3d:1b:98:
                    a5:ac:b0:8d:19:48:39:46:af:e4:76:38:a0:27:33:
                    16:0b:fc:c7:b5:17:54:da:c9:7a:47:3b:0e:a6:2d:
                    ab:15:db:b8:2e:3d:3f:04:92:41:97:bf:31:01:67:
                    7b:5a:26:44:5a:42:c7:67:88:23:d3:83:96:36:c8:
                    99:93:9a:97:05:b8:c3:48:1b:29:1b:d3:98:3d:1f:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1B:BC:63:B7:43:3C:5B:CC:EC:C0:98:6C:5D:40:32:B4:6F:E0:8B
            X509v3 Authority Key Identifier:
                keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:9d:16:cf:60:b3:fe:eb:51:b5:98:74:58:d1:69:03:52:8b:
         76:07:15:b2:2e:8e:3b:7e:a6:05:98:75:11:4e:78:34:91:2a:
         1c:f9:70:2d:27:fc:05:24:b3:66:87:80:39:72:3c:3d:2b:95:
         14:c3:8c:35:54:45:ec:1c:25:3e:92:2c:48:8a:78:6c:2a:55:
         b6:94:40:69:01:ca:ca:b9:0c:a2:4e:09:9c:b1:94:e3:1d:ca:
         66:f4:af:61:2d:83:80:65:34:3a:f2:ee:db:b8:51:01:60:6e:
         e5:f4:a3:42:ef:aa:d8:17:93:ec:4a:7f:66:81:c6:12:5d:90:
         ba:8d:16:60:d6:46:f1:2b:de:59:bc:e9:a7:84:49:6b:83:f3:
         86:55:90:ef:9f:c1:3b:1c:8c:50:1f:c2:6e:7d:80:b0:c6:dc:
         6c:73:6d:9b:89:1b:64:df:67:08:eb:5f:92:34:e4:9b:40:72:
         8f:24:bd:2f:fe:4d:c2:da:f8:30:b6:e8:38:55:08:05:96:fd:
         c6:67:f1:4c:09:ae:ce:fa:49:e8:2a:42:b9:f4:1d:ca:c3:7f:
         96:5d:aa:5e:a6:f2:08:25:c9:3e:75:5f:8c:f7:13:b8:b9:a8:
         d1:dd:22:64:b9:88:cd:3d:a3:7c:66:8e:a3:1c:57:68:35:68:
         fa:20:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:42 2026 by rpki-client