This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          g41OGngHipNAhEv0DUdJ9dZr/SX+b1J+ellGoH/IDC8=
Subject key identifier:   7D:D8:C5:B1:1A:70:70:2F:59:51:66:2D:88:A0:F9:71:2E:B5:F9:0E
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       019BF8AD902C66D1917842F1A3E3BA78DB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          1082
Signing time:             Mon 26 Jan 2026 05:01:22 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:22 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:22 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: AFnEj9Vlm2HL8xSHkb5ZVOTJq+Wk6T9Q8cE3rYzHWhI=)
                          2: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (hash: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:90:2c:66:d1:91:78:42:f1:a3:e3:ba:78:db:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Jan 26 05:01:22 2026 GMT
            Not After : Jan 27 05:01:22 2026 GMT
        Subject: CN=7dd8c5b11a70702f5951662d88a0f9712eb5f90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:b1:a6:d9:9f:51:b7:fc:1b:a3:81:07:25:
                    85:b2:a9:7f:1c:70:e8:00:15:11:8e:78:55:e6:02:
                    48:f1:b3:2e:d0:1f:1c:ce:57:74:87:f6:fe:da:cd:
                    d1:b8:66:d9:9e:89:ce:b4:78:b6:0c:f2:13:ab:08:
                    f6:5d:de:20:65:61:fd:49:37:cd:26:8d:32:0c:c7:
                    ed:85:32:98:4e:e3:1e:12:25:a4:bd:b7:fc:0a:d6:
                    cb:86:ba:7c:d9:a1:b9:ab:1b:c0:2f:00:90:e6:c9:
                    f6:bd:40:cd:16:f4:17:04:5f:f7:23:5d:7f:12:76:
                    e7:1b:0b:cf:ed:e5:eb:44:c3:64:d6:c1:0f:9f:03:
                    1f:78:d7:c7:d8:99:77:82:3e:28:6e:14:22:6c:f9:
                    ad:a8:60:44:3a:a8:e3:4f:f4:98:3d:af:19:6b:2e:
                    a0:a3:01:6b:b4:1b:c5:c9:8d:e0:35:ed:78:6f:f5:
                    41:60:b2:94:bf:de:5f:c5:af:90:e0:c4:fd:de:ed:
                    bd:7d:12:e5:72:87:07:75:42:bb:c3:2f:1f:41:48:
                    cc:e5:56:af:36:70:34:df:60:30:d8:ce:53:cc:05:
                    52:36:b0:e1:57:d2:0c:25:99:94:49:99:c0:94:28:
                    a5:be:ea:60:9d:cc:4e:01:c1:69:bb:5b:87:a0:7c:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D8:C5:B1:1A:70:70:2F:59:51:66:2D:88:A0:F9:71:2E:B5:F9:0E
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:8b:09:5e:a4:4a:59:ee:9d:d4:c5:b5:64:fb:27:d1:d5:
         54:b4:e6:83:b3:de:14:f0:cd:33:4e:04:6a:6a:84:9b:be:ac:
         f4:2d:46:bf:b9:2c:74:47:95:47:07:be:69:67:3e:82:99:ab:
         4c:63:02:27:03:a3:a9:2b:d3:03:c3:be:ed:78:e2:a5:c7:ff:
         cd:9c:53:e5:b7:92:91:eb:85:19:82:23:74:e1:0f:46:42:38:
         d4:04:c8:f7:ca:16:e7:b3:d4:19:8c:23:fa:0b:d6:8c:c6:e8:
         c0:b4:45:80:49:65:ce:cb:c4:0d:56:d6:38:62:ad:da:3e:7f:
         b5:bd:97:0b:fc:96:bd:d5:d6:ac:4f:5f:08:0a:f5:b0:92:0a:
         a7:e8:1a:c9:bf:27:1b:cc:fe:1f:96:e5:8a:78:22:87:db:f5:
         fb:3c:cf:cd:08:21:32:85:22:fe:c7:42:8e:1d:7d:5d:dd:ab:
         fa:de:e7:5e:51:fb:01:53:86:16:5d:d8:cd:72:e4:b8:1b:e6:
         ed:c3:d0:8a:f0:85:0c:d8:56:95:54:27:11:ae:47:ae:1e:75:
         97:45:1c:38:55:d2:a5:75:33:14:69:6b:08:66:99:9b:20:87:
         78:23:8f:42:b6:c2:f5:0c:fc:21:0d:0f:e7:5b:5a:d3:a3:1e:
         31:f4:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:48:51 2026 by rpki-client