This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File:                     CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier:          dHqck4NqZSs5Qg9SyvN4tScL3gDCsPT74ZPFwxepbm4=
Subject key identifier:   A4:EC:10:5F:1D:0E:07:65:25:19:82:02:0B:DF:84:A7:D6:A8:A4:58
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer:       /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial:       019C427E1058D7EA0CDAC398E32313A1CC02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number:          124B
Signing time:             Mon 09 Feb 2026 13:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:23 +0000
Files and hashes:         1: 05U8EXnIqXJPMPlGO2bn_Cp43Ck.roa (hash: vVGXOO/oJVCgI15HAiVLh/hAKCHmjAzaEHuV+NQi8jQ=)
                          2: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: kMQ/QVz4lLzYRGc+Q8iH/W6qipNpFtBgC7jwCiw+iHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:10:58:d7:ea:0c:da:c3:98:e3:23:13:a1:cc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
        Validity
            Not Before: Feb  9 13:01:23 2026 GMT
            Not After : Feb 10 13:01:23 2026 GMT
        Subject: CN=a4ec105f1d0e0765251982020bdf84a7d6a8a458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:9e:20:4f:11:e9:cb:25:c2:9f:bc:7a:5f:
                    10:ae:7a:3d:44:42:09:aa:d0:09:ce:a4:96:17:04:
                    6e:5c:5f:61:d4:07:35:36:0e:3f:59:2d:3c:f7:b2:
                    7c:45:06:ed:19:8f:78:2c:25:fc:0e:34:02:0a:20:
                    95:8e:8e:c8:c5:e3:30:5e:4d:03:61:9f:64:56:22:
                    df:ac:28:86:28:1e:2e:6c:f0:dd:1d:6e:4d:42:de:
                    a1:38:e9:58:d0:18:70:16:67:a9:ff:ad:4b:c8:05:
                    b2:42:72:cf:66:6b:b7:32:88:c9:b6:53:aa:f6:19:
                    0f:22:03:14:aa:5d:00:39:d9:85:f6:e0:5e:f9:ec:
                    d7:ef:54:c5:cc:4e:70:52:44:4a:18:be:00:e6:05:
                    4f:bb:6e:97:4a:69:ac:16:ef:6f:fc:f8:6a:f7:2b:
                    75:bb:16:ee:af:49:51:82:7f:e5:17:cd:f1:48:25:
                    d5:b5:a3:80:eb:31:94:ef:23:3b:9c:e8:4d:1a:21:
                    59:0d:75:24:31:db:fd:1b:75:9a:56:f3:99:2a:a3:
                    d9:88:69:39:d6:bb:18:09:59:ce:4d:3b:cc:9f:12:
                    c1:d4:7c:ab:b1:f4:9a:4c:cd:1b:3e:a1:b1:46:95:
                    a9:da:23:ff:b3:4c:a5:d9:0c:0f:c9:72:c0:b9:60:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:10:5F:1D:0E:07:65:25:19:82:02:0B:DF:84:A7:D6:A8:A4:58
            X509v3 Authority Key Identifier:
                keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:7c:b2:45:95:01:7e:04:0c:77:9e:71:c5:78:0c:c3:b6:
         4c:04:bb:64:39:b7:06:cc:18:bf:b4:05:05:2c:f0:cd:25:ac:
         eb:51:d5:c8:d1:fb:b8:1c:19:ce:5d:a6:37:04:d3:e7:7a:43:
         89:34:31:6e:19:5c:79:8f:8b:32:7e:9a:3f:9f:90:23:35:fb:
         44:b5:0d:41:82:92:a1:26:e8:84:e9:dc:22:9a:2e:5d:ca:62:
         71:b4:2d:b8:65:b1:7f:19:65:43:d3:a2:d5:45:00:d0:bd:f4:
         fd:f7:70:70:23:6f:53:56:5a:51:69:9f:b3:41:a9:10:75:a4:
         78:26:cd:60:3b:fa:34:94:1e:a6:dc:34:37:8e:89:7f:b5:58:
         cd:fa:51:b4:76:db:de:87:7c:13:00:ba:93:e8:e6:84:7d:4a:
         b6:45:28:23:db:0d:24:31:b1:81:27:33:dc:94:d5:bb:d6:13:
         2f:9a:e6:2c:1c:db:cf:15:0c:c3:c8:79:fc:50:f8:4d:ea:a6:
         a8:21:ac:a2:7e:29:52:c0:8c:6e:31:5d:d4:f9:97:f9:8f:5d:
         ba:7f:8b:42:d7:3e:bb:c2:2b:04:6d:a7:b6:cd:27:0c:32:5d:
         c5:1f:c3:01:88:4c:ac:1e:a5:6b:cb:28:f0:4a:e4:a5:e1:cf:
         dd:c5:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:37 2026 by rpki-client