This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          248nCzLa0iqMUYrqSAHnAqsiR8POb6DXldD+ncv/FOU=
Subject key identifier:   95:72:8A:EE:69:79:B3:28:A6:15:F3:72:D4:03:75:CA:E0:CE:25:5B
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019BF6512B210FE846DA4715E65D9804FEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          07A1
Signing time:             Sun 25 Jan 2026 18:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:13 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: 8AiPp1xCCu3gCH682WoFsQGq+5QLMCwL7AATqieKNzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:2b:21:0f:e8:46:da:47:15:e6:5d:98:04:fe:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Jan 25 18:01:13 2026 GMT
            Not After : Jan 26 18:01:13 2026 GMT
        Subject: CN=95728aee6979b328a615f372d40375cae0ce255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b3:a8:e3:a6:59:95:16:25:f7:8c:7d:90:fc:
                    c8:61:eb:21:23:35:03:bf:3d:8a:02:d3:51:b9:83:
                    4d:ff:e7:e2:c2:91:c0:43:5f:e6:3f:53:05:26:ad:
                    18:3a:3b:e9:01:fd:6c:dc:ff:8d:08:27:e4:75:94:
                    66:6e:60:22:27:24:71:b0:f6:8b:a1:0c:9c:02:59:
                    d7:7c:7b:1c:94:da:33:0f:57:33:03:f6:23:27:9d:
                    82:48:54:aa:d3:14:f3:2b:78:96:4a:ae:28:38:85:
                    ee:a2:46:90:b2:58:71:c6:c8:fd:b8:72:cf:00:56:
                    90:bd:c1:4f:c8:e8:5a:63:10:98:d7:3c:7d:bc:66:
                    48:34:0d:d8:fa:5f:de:dc:3f:a2:10:51:e3:b9:c3:
                    11:a1:8f:08:8d:a3:91:80:98:b9:fc:15:d6:b9:0a:
                    05:a1:d7:df:b2:bf:ad:39:4f:62:83:ea:28:75:5b:
                    9f:f6:c0:7e:ed:4d:fc:36:f5:9a:65:9b:53:dd:ce:
                    24:6a:b7:8c:4f:12:65:e7:fe:02:f5:25:5d:a2:24:
                    d1:58:06:92:b9:b1:61:43:0c:a1:e6:cf:a1:92:81:
                    da:f0:0a:62:7b:79:de:6c:6f:e0:a4:09:09:fe:33:
                    24:72:3b:56:19:b1:41:5e:6d:d0:be:d7:ec:e0:7f:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:8A:EE:69:79:B3:28:A6:15:F3:72:D4:03:75:CA:E0:CE:25:5B
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:24:cd:e8:2a:47:c1:d8:c5:55:28:48:92:60:7f:3c:ff:17:
         19:d4:c0:81:c7:5f:78:06:a4:be:2b:45:c6:6b:64:57:89:d4:
         ce:53:b1:2a:f0:5e:6e:1c:2e:e1:01:5b:2e:7a:e5:f6:90:b0:
         2b:f8:f3:99:64:03:d9:6a:0c:69:76:31:4c:80:77:ba:5f:f2:
         bf:d6:df:c7:f3:c1:56:e8:a5:a9:ea:ba:c4:80:fb:a6:ab:3d:
         28:57:47:3c:f2:c3:4e:85:73:27:a0:23:eb:52:bc:3e:76:63:
         c3:9c:79:0e:d5:c3:35:ef:58:ab:76:2a:52:a1:de:20:fe:3a:
         f5:02:c1:22:a9:c6:b1:36:6b:7a:39:9a:3d:a2:4b:aa:73:c1:
         dc:14:f5:81:ae:96:1f:ad:f5:80:04:27:7d:77:23:bc:ac:46:
         af:db:c4:f8:f8:81:16:12:2b:15:71:04:d1:d4:dd:0a:27:16:
         19:90:39:c2:c4:8c:d3:15:08:e2:4e:dc:97:1b:bd:62:5f:7d:
         00:c0:16:e4:4c:58:81:01:40:6d:bb:3b:a4:08:6c:73:fd:3a:
         b0:7b:9a:53:6a:32:eb:00:96:42:ac:82:99:05:80:30:03:99:
         b8:e7:80:1d:3d:1e:d8:76:20:68:92:a9:32:58:f0:b1:b3:65:
         91:5d:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:14 2026 by rpki-client