This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          tebGO+Cw8fFpJPNJN5eNM5LMd5jipOUL+NyvTDLVU5o=
Subject key identifier:   65:85:F0:D2:C6:83:4D:AD:3D:98:89:90:73:00:66:39:A7:6B:7D:95
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019C438FC7C60937F250DD7CD6885DDFFFB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          07C9
Signing time:             Mon 09 Feb 2026 18:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:22 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: dn6FKaVjESwfVCVLrqESrfmQUBxS5UtvyuUiLSVr7gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c7:c6:09:37:f2:50:dd:7c:d6:88:5d:df:ff:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Feb  9 18:00:22 2026 GMT
            Not After : Feb 10 18:00:22 2026 GMT
        Subject: CN=6585f0d2c6834dad3d98899073006639a76b7d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:99:15:3d:f5:9a:24:5c:b1:7f:fa:9e:83:
                    b8:84:a4:d2:16:60:69:09:8e:83:a8:8b:0f:e5:1d:
                    79:38:bb:95:ac:0f:2e:e9:a0:a6:b6:26:a5:74:44:
                    0d:d5:5d:61:87:4a:b1:91:fa:d1:2f:e8:0d:da:14:
                    f6:bd:70:55:78:48:3a:e8:fb:93:4d:25:ed:a5:10:
                    6a:18:7c:d6:c4:7a:ff:93:f2:1b:a9:15:f3:1b:e2:
                    a3:1e:2e:45:8c:3c:bf:3d:45:79:fb:81:03:0f:5a:
                    fd:fe:a4:a7:06:b1:fd:3d:60:84:d0:88:43:a8:e5:
                    2d:19:de:56:39:52:9b:2e:a2:f6:5f:e9:9a:d4:a0:
                    37:18:03:3b:5a:d8:09:00:b3:5a:50:47:d2:e0:89:
                    5e:35:83:28:a8:9a:a9:10:fc:0a:81:64:87:14:e8:
                    ee:47:62:d5:db:d6:45:99:ed:46:63:35:90:e9:1a:
                    11:31:e9:d1:9f:29:8b:00:17:c5:f9:5e:ea:6d:ca:
                    13:a9:9c:05:64:43:66:f4:b0:5f:1b:93:04:08:25:
                    07:95:7e:2b:d8:6c:f2:42:0a:77:4c:e4:f1:97:e1:
                    a4:4d:2c:01:ba:4b:cf:80:db:1f:b9:f0:d4:00:2d:
                    5f:18:35:78:bb:10:1b:43:61:25:ee:b9:b6:0d:9a:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:F0:D2:C6:83:4D:AD:3D:98:89:90:73:00:66:39:A7:6B:7D:95
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:ec:20:23:16:09:5a:ff:97:9f:78:ef:97:55:52:71:6d:
         25:b5:7b:5b:b8:25:9a:12:98:be:6c:a5:c8:71:ae:c5:00:ef:
         7f:4b:37:25:5e:e8:af:22:28:73:3d:1a:1a:e0:e3:d4:f9:62:
         f1:e6:1e:a4:98:76:1a:4d:2a:39:7e:76:eb:9f:4a:36:51:da:
         09:15:c9:db:c8:90:e6:01:30:97:8d:01:0d:fb:c5:71:32:bd:
         7f:fa:97:c0:68:59:db:f4:10:8e:b1:bd:a3:f4:b0:84:be:4f:
         a0:56:55:ae:61:35:71:c4:50:03:93:af:0f:91:d7:4b:6f:89:
         60:a3:17:1b:02:ed:1d:45:53:7c:bf:e5:2a:c3:73:7b:c4:bc:
         ab:92:6c:1f:6b:bb:f2:67:3c:82:eb:f9:87:02:f1:a5:f4:83:
         90:b6:f1:5d:fc:f8:1d:81:1c:93:2c:7e:a4:cd:40:60:fe:9c:
         50:a5:bf:b9:ac:3c:d4:5e:3d:fa:e1:54:ea:0f:1d:76:19:c3:
         9e:d5:a4:46:71:33:70:3d:0d:62:e6:dd:66:3b:92:36:a3:39:
         9e:a7:ee:e6:a0:b6:a8:03:9a:84:36:94:5d:91:65:e7:a7:12:
         08:01:da:b2:7d:8c:c2:56:af:b5:45:7b:71:2f:14:16:fd:9a:
         71:9c:66:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj8fGCTfyUN181ohd3/+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTU2YzE5YTQ1NTZmMzZmNzYwMDAwNmQ4ZWFjZDFmYTNm
NDM5ZjIwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD
Eyg2NTg1ZjBkMmM2ODM0ZGFkM2Q5ODg5OTA3MzAwNjYzOWE3NmI3ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ2ZFT31miRcsX/6noO4hKTSFmBp
CY6DqIsP5R15OLuVrA8u6aCmtialdEQN1V1hh0qxkfrRL+gN2hT2vXBVeEg66PuT
TSXtpRBqGHzWxHr/k/IbqRXzG+KjHi5FjDy/PUV5+4EDD1r9/qSnBrH9PWCE0IhD
qOUtGd5WOVKbLqL2X+ma1KA3GAM7WtgJALNaUEfS4IleNYMoqJqpEPwKgWSHFOju
R2LV29ZFme1GYzWQ6RoRMenRnymLABfF+V7qbcoTqZwFZENm9LBfG5MECCUHlX4r
2GzyQgp3TOTxl+GkTSwBukvPgNsfufDUAC1fGDV4uxAbQ2El7rm2DZqgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWF8NLGg02tPZiJkHMAZjmna32VMB8GA1UdIwQY
MBaAFHpVbBmkVW8292AABtjqzR+j9DnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMt
ZTNkMGEwYWNlMzk4LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMtZTNkMGEwYWNlMzk4
LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8XsICMW
CVr/l59475dVUnFtJbV7W7glmhKYvmylyHGuxQDvf0s3JV7oryIocz0aGuDj1Pli
8eYepJh2Gk0qOX52659KNlHaCRXJ28iQ5gEwl40BDfvFcTK9f/qXwGhZ2/QQjrG9
o/SwhL5PoFZVrmE1ccRQA5OvD5HXS2+JYKMXGwLtHUVTfL/lKsNze8S8q5JsH2u7
8mc8guv5hwLxpfSDkLbxXfz4HYEckyx+pM1AYP6cUKW/uaw81F49+uFU6g8ddhnD
ntWkRnEzcD0NYubdZjuSNqM5nqfu5qC2qAOahDaUXZFl56cSCAHasn2MwlavtUV7
cS8UFv2acZxmfA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:01 2026 by rpki-client