This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: dHqck4NqZSs5Qg9SyvN4tScL3gDCsPT74ZPFwxepbm4=
Subject key identifier: A4:EC:10:5F:1D:0E:07:65:25:19:82:02:0B:DF:84:A7:D6:A8:A4:58
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 019C427E1058D7EA0CDAC398E32313A1CC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 124B
Signing time: Mon 09 Feb 2026 13:01:23 +0000
Manifest this update: Mon 09 Feb 2026 13:01:23 +0000
Manifest next update: Tue 10 Feb 2026 13:01:23 +0000
Files and hashes: 1: 05U8EXnIqXJPMPlGO2bn_Cp43Ck.roa (hash: vVGXOO/oJVCgI15HAiVLh/hAKCHmjAzaEHuV+NQi8jQ=)
2: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: kMQ/QVz4lLzYRGc+Q8iH/W6qipNpFtBgC7jwCiw+iHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:10:58:d7:ea:0c:da:c3:98:e3:23:13:a1:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Feb 9 13:01:23 2026 GMT
Not After : Feb 10 13:01:23 2026 GMT
Subject: CN=a4ec105f1d0e0765251982020bdf84a7d6a8a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:9e:20:4f:11:e9:cb:25:c2:9f:bc:7a:5f:
10:ae:7a:3d:44:42:09:aa:d0:09:ce:a4:96:17:04:
6e:5c:5f:61:d4:07:35:36:0e:3f:59:2d:3c:f7:b2:
7c:45:06:ed:19:8f:78:2c:25:fc:0e:34:02:0a:20:
95:8e:8e:c8:c5:e3:30:5e:4d:03:61:9f:64:56:22:
df:ac:28:86:28:1e:2e:6c:f0:dd:1d:6e:4d:42:de:
a1:38:e9:58:d0:18:70:16:67:a9:ff:ad:4b:c8:05:
b2:42:72:cf:66:6b:b7:32:88:c9:b6:53:aa:f6:19:
0f:22:03:14:aa:5d:00:39:d9:85:f6:e0:5e:f9:ec:
d7:ef:54:c5:cc:4e:70:52:44:4a:18:be:00:e6:05:
4f:bb:6e:97:4a:69:ac:16:ef:6f:fc:f8:6a:f7:2b:
75:bb:16:ee:af:49:51:82:7f:e5:17:cd:f1:48:25:
d5:b5:a3:80:eb:31:94:ef:23:3b:9c:e8:4d:1a:21:
59:0d:75:24:31:db:fd:1b:75:9a:56:f3:99:2a:a3:
d9:88:69:39:d6:bb:18:09:59:ce:4d:3b:cc:9f:12:
c1:d4:7c:ab:b1:f4:9a:4c:cd:1b:3e:a1:b1:46:95:
a9:da:23:ff:b3:4c:a5:d9:0c:0f:c9:72:c0:b9:60:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:10:5F:1D:0E:07:65:25:19:82:02:0B:DF:84:A7:D6:A8:A4:58
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7d:7c:b2:45:95:01:7e:04:0c:77:9e:71:c5:78:0c:c3:b6:
4c:04:bb:64:39:b7:06:cc:18:bf:b4:05:05:2c:f0:cd:25:ac:
eb:51:d5:c8:d1:fb:b8:1c:19:ce:5d:a6:37:04:d3:e7:7a:43:
89:34:31:6e:19:5c:79:8f:8b:32:7e:9a:3f:9f:90:23:35:fb:
44:b5:0d:41:82:92:a1:26:e8:84:e9:dc:22:9a:2e:5d:ca:62:
71:b4:2d:b8:65:b1:7f:19:65:43:d3:a2:d5:45:00:d0:bd:f4:
fd:f7:70:70:23:6f:53:56:5a:51:69:9f:b3:41:a9:10:75:a4:
78:26:cd:60:3b:fa:34:94:1e:a6:dc:34:37:8e:89:7f:b5:58:
cd:fa:51:b4:76:db:de:87:7c:13:00:ba:93:e8:e6:84:7d:4a:
b6:45:28:23:db:0d:24:31:b1:81:27:33:dc:94:d5:bb:d6:13:
2f:9a:e6:2c:1c:db:cf:15:0c:c3:c8:79:fc:50:f8:4d:ea:a6:
a8:21:ac:a2:7e:29:52:c0:8c:6e:31:5d:d4:f9:97:f9:8f:5d:
ba:7f:8b:42:d7:3e:bb:c2:2b:04:6d:a7:b6:cd:27:0c:32:5d:
c5:1f:c3:01:88:4c:ac:1e:a5:6b:cb:28:f0:4a:e4:a5:e1:cf:
dd:c5:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:37 2026 by rpki-client