This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File:                     elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier:          2eSEmv07gp6vJW+VCzMuSeMxJIzGJ9SFfn67L4F9SWk=
Subject key identifier:   CA:6A:AB:D9:2A:01:FE:45:50:4D:42:81:C0:F3:BF:8B:1D:82:8A:45
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       019C2E1AE431D7395A1D5A0D8D07F858D4A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number:          085E
Signing time:             Thu 05 Feb 2026 14:00:40 +0000
Manifest this update:     Thu 05 Feb 2026 14:00:40 +0000
Manifest next update:     Fri 06 Feb 2026 14:00:40 +0000
Files and hashes:         1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
                          2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
                          3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: IHsP3hYyDAov+0U9eZltzWXkrQu2+AFSFHd7tRTWBxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:1a:e4:31:d7:39:5a:1d:5a:0d:8d:07:f8:58:d4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Feb  5 14:00:40 2026 GMT
            Not After : Feb  6 14:00:40 2026 GMT
        Subject: CN=ca6aabd92a01fe45504d4281c0f3bf8b1d828a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:39:6c:90:e6:6c:a0:39:b3:ab:e1:e8:2b:
                    d6:a2:67:e8:04:58:ce:bb:49:23:cf:3f:2d:28:6b:
                    17:4e:e4:dc:e0:59:db:78:d0:5c:ec:84:63:ab:40:
                    4a:fb:3f:d7:44:59:00:f6:4d:7b:2c:76:23:d8:86:
                    66:39:dd:22:7e:e0:73:0f:43:41:aa:c2:16:8e:a7:
                    34:d1:4c:fe:d4:20:45:17:1f:ce:b9:8d:bc:38:ce:
                    2c:d5:ff:79:e3:ff:52:ac:5e:77:82:ae:b1:d1:8f:
                    2d:1f:2c:3f:e6:21:d4:c9:b9:38:aa:2f:c9:91:b7:
                    23:06:5d:b9:a6:04:ac:ca:32:fc:e0:2e:ed:1e:51:
                    65:c2:50:e4:86:54:60:25:b3:de:ea:0d:b6:b1:98:
                    0b:b9:5c:22:84:07:41:fd:8c:7c:f9:8e:dc:30:7d:
                    f3:fe:81:1f:2c:de:58:a4:cb:c6:ab:0c:a1:b4:f1:
                    09:20:79:60:5b:4b:f6:7f:23:a8:65:71:c9:5c:60:
                    7a:53:7c:ba:2d:7d:d3:a3:90:b9:c8:04:fc:30:eb:
                    da:37:b7:61:e0:6d:8e:21:35:e2:1c:c3:1f:70:58:
                    e1:07:35:06:26:21:98:ca:b7:97:28:bb:c8:f2:80:
                    c8:b4:bf:93:00:a6:d5:6b:58:c4:40:6b:7f:38:27:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6A:AB:D9:2A:01:FE:45:50:4D:42:81:C0:F3:BF:8B:1D:82:8A:45
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:df:e3:dd:4e:c5:c4:22:a4:ea:91:c3:40:e9:e6:6d:08:
         7a:52:59:8f:59:b6:56:d4:e3:01:00:85:45:cf:82:41:1b:9b:
         34:75:d8:9b:4f:cb:a2:9d:22:6f:71:fd:17:ca:81:a2:58:40:
         18:86:b6:01:46:73:2a:31:77:a8:a5:83:74:18:55:7f:78:1b:
         70:d5:4e:c4:20:00:19:c3:95:9e:f2:b8:75:96:14:58:d6:a2:
         a1:1b:2c:23:75:f2:24:40:4e:e4:52:47:7f:6d:c1:1a:4e:33:
         ab:46:e9:99:7c:4d:7f:99:e5:7f:7b:26:07:ab:3a:b8:d9:17:
         be:3d:1d:2a:f7:1d:e8:95:56:2c:4b:c7:38:e1:67:57:ec:48:
         02:eb:f0:60:66:2a:ef:c5:37:89:24:a9:7a:4f:3e:d1:69:45:
         35:a3:fb:d7:16:a9:2f:00:8b:b2:48:5b:d3:c8:ab:00:bc:91:
         a1:9e:63:79:87:e7:82:fa:98:22:ff:bb:50:d4:fe:41:a9:37:
         c0:39:17:9f:ed:ef:9f:86:b8:de:93:c1:a1:e9:de:bb:28:49:
         7d:cd:2e:3e:7f:92:21:52:87:95:54:67:cf:a7:c3:c3:13:58:
         58:8c:f5:54:79:f7:af:74:48:9d:12:ea:f2:59:05:4c:2b:2d:
         d2:d2:88:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwuGuQx1zlaHVoNjQf4WNSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNWIwM2UyNDgzYmVkMTM0Mzg3YmZjMzA0N2ExMzk4OWZk
ZWE0MWYwHhcNMjYwMjA1MTQwMDQwWhcNMjYwMjA2MTQwMDQwWjAzMTEwLwYDVQQD
EyhjYTZhYWJkOTJhMDFmZTQ1NTA0ZDQyODFjMGYzYmY4YjFkODI4YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrM5bJDmbKA5s6vh6CvWomfoBFjO
u0kjzz8tKGsXTuTc4FnbeNBc7IRjq0BK+z/XRFkA9k17LHYj2IZmOd0ifuBzD0NB
qsIWjqc00Uz+1CBFFx/OuY28OM4s1f954/9SrF53gq6x0Y8tHyw/5iHUybk4qi/J
kbcjBl25pgSsyjL84C7tHlFlwlDkhlRgJbPe6g22sZgLuVwihAdB/Yx8+Y7cMH3z
/oEfLN5YpMvGqwyhtPEJIHlgW0v2fyOoZXHJXGB6U3y6LX3To5C5yAT8MOvaN7dh
4G2OITXiHMMfcFjhBzUGJiGYyreXKLvI8oDItL+TAKbVa1jEQGt/OCcLrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpqq9kqAf5FUE1CgcDzv4sdgopFMB8GA1UdIwQY
MBaAFHpbA+JIO+0TQ4e/wwR6E5if3qQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMt
NzFlNTYxY2I3OGU5LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMtNzFlNTYxY2I3OGU5
LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNff491O
xcQipOqRw0Dp5m0IelJZj1m2VtTjAQCFRc+CQRubNHXYm0/Lop0ib3H9F8qBolhA
GIa2AUZzKjF3qKWDdBhVf3gbcNVOxCAAGcOVnvK4dZYUWNaioRssI3XyJEBO5FJH
f23BGk4zq0bpmXxNf5nlf3smB6s6uNkXvj0dKvcd6JVWLEvHOOFnV+xIAuvwYGYq
78U3iSSpek8+0WlFNaP71xapLwCLskhb08irALyRoZ5jeYfngvqYIv+7UNT+Qak3
wDkXn+3vn4a43pPBoeneuyhJfc0uPn+SIVKHlVRnz6fDwxNYWIz1VHn3r3RInRLq
8lkFTCst0tKIyg==
-----END CERTIFICATE-----
Generated at Thu Feb 5 21:13:10 2026 by rpki-client