This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File:                     elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier:          n5SZbvSMCqxwpgvSqAWI30rdu8CUdu75Xa4sQpxN/uk=
Subject key identifier:   A4:D3:30:F4:BC:18:DE:AB:E4:C8:16:A4:33:AE:FA:9E:EC:FC:13:81
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       019BF808A630BBAE36B74AB100B388C5524C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number:          0842
Signing time:             Mon 26 Jan 2026 02:01:14 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:14 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:14 +0000
Files and hashes:         1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
                          2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
                          3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: YoWPxgwCf7MYPHSB5BM7HKlowyCw55y5LaKLURnnXCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:a6:30:bb:ae:36:b7:4a:b1:00:b3:88:c5:52:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Jan 26 02:01:14 2026 GMT
            Not After : Jan 27 02:01:14 2026 GMT
        Subject: CN=a4d330f4bc18deabe4c816a433aefa9eecfc1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:89:ec:f7:24:ec:f3:49:83:39:20:85:ef:
                    40:74:44:90:b3:67:b3:33:58:bd:c2:9c:3a:63:c3:
                    9c:67:4c:7b:c0:a3:09:03:90:84:37:c0:fc:ea:2c:
                    3f:c2:e8:ab:ba:58:18:fd:f3:f1:13:f4:81:4b:1a:
                    90:b0:71:43:e2:f9:35:9b:7f:e5:ac:af:8a:dd:20:
                    b3:9e:f9:cd:df:2a:9b:e7:d6:08:0d:a4:ff:a4:73:
                    25:c2:f2:5f:e0:ad:24:8b:7d:90:fa:19:75:08:ae:
                    3a:6d:6d:82:8a:d9:24:75:8b:ba:65:63:a2:94:e6:
                    02:29:ed:1c:75:9c:56:2a:81:9e:96:08:71:68:59:
                    14:3f:2a:eb:1b:89:a0:60:01:b6:4a:03:cb:a3:39:
                    f0:0c:b4:ca:13:d2:17:d1:a6:44:3f:43:ca:f5:e2:
                    66:9c:05:2a:fc:ee:c4:ef:d1:a3:0e:c0:4c:85:86:
                    01:fa:f8:14:ff:51:51:b4:04:6c:67:cf:b0:8d:44:
                    04:e3:e4:b8:0a:c2:2c:01:7a:4d:43:ce:db:92:af:
                    90:6b:01:4c:01:44:51:33:87:be:ca:89:8f:89:c7:
                    5d:a0:a0:f4:a9:21:e7:0c:20:e4:f1:ca:75:23:dd:
                    b8:a5:f1:fb:6e:7e:c5:ef:7c:af:03:b4:73:3a:6b:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D3:30:F4:BC:18:DE:AB:E4:C8:16:A4:33:AE:FA:9E:EC:FC:13:81
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:30:fb:55:ea:21:91:55:30:39:84:0f:f7:d5:5c:07:4c:db:
         0a:01:43:83:42:77:d5:e3:1b:4a:94:bd:d2:e6:24:18:26:e0:
         e1:b3:c3:2c:5c:f2:a8:42:d3:64:7d:ac:8a:89:43:8f:ca:4e:
         db:e8:fc:d2:85:5c:dc:e9:95:a5:ac:81:70:c7:6c:a5:ad:f4:
         71:27:c6:0c:23:5e:7a:b0:e3:b2:48:24:54:1c:4b:1a:4e:df:
         aa:f2:ec:d9:cb:24:ac:43:81:67:14:c1:22:d9:bd:9c:5c:2e:
         66:2b:d0:96:d8:89:5f:ad:c5:a4:80:62:7a:b2:2b:75:d0:bf:
         d3:09:bd:e4:06:e6:d6:66:7a:2b:67:88:bd:09:b4:11:fe:ea:
         be:e8:fc:39:fe:a7:51:ad:46:b3:8e:2a:ab:fd:a5:20:d1:6a:
         17:a8:60:cc:6e:58:94:01:d9:39:ed:fc:31:0f:a6:69:39:aa:
         57:a0:52:d6:94:b7:81:1b:65:14:8f:fe:98:6c:90:99:19:6b:
         a2:79:14:f6:ab:a4:cc:34:bd:63:c8:ec:ff:f2:6d:d9:33:26:
         76:1f:15:76:4c:64:b7:34:cb:8a:99:1b:fa:01:35:5f:da:96:
         ec:ad:67:ab:2c:f2:6f:ea:2d:92:a8:e5:44:4b:a0:f7:38:a3:
         64:ea:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:47:39 2026 by rpki-client