This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File:                     3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier:          jHMCxl2ieeDDZpXIROZDx9OldmSlTZUYa+YBVno7SKk=
Subject key identifier:   C7:E3:7F:59:B2:E9:E1:F2:7E:65:2C:4B:D5:AB:F5:14:8A:3A:93:7B
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer:       /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial:       019C1D27AC1E42AB082BE0A786D200DCCA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number:          1774
Signing time:             Mon 02 Feb 2026 07:01:04 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:04 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:04 +0000
Files and hashes:         1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: FDlWShcaFLP7YbrPgP9ivF8bEHXFiKdIhhyGS1cyeBE=)
                          2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:ac:1e:42:ab:08:2b:e0:a7:86:d2:00:dc:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Validity
            Not Before: Feb  2 07:01:04 2026 GMT
            Not After : Feb  3 07:01:04 2026 GMT
        Subject: CN=c7e37f59b2e9e1f27e652c4bd5abf5148a3a937b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:a2:21:3e:c3:39:f8:c4:67:7e:95:b7:4b:
                    56:02:33:c9:6d:2e:8d:68:d2:87:3c:a3:86:c6:4a:
                    58:8b:e2:44:b1:58:eb:a2:f1:29:d2:c8:54:36:e2:
                    00:87:1a:1a:3a:71:f5:10:ae:8c:34:1f:85:5c:17:
                    7d:42:9b:83:ea:d0:36:bc:5e:a6:14:2b:74:f3:60:
                    97:cf:85:b5:ff:33:0e:9a:e8:7a:a5:fa:8f:a7:51:
                    a0:e4:26:a3:36:28:29:9a:80:e2:19:f3:94:5e:5e:
                    39:30:a2:29:5c:6a:de:ec:e1:8c:ad:8d:fe:4b:7f:
                    3e:85:23:43:d3:29:c4:5e:d4:2e:f0:b9:ac:83:28:
                    bf:17:24:d0:09:6e:fc:04:14:06:cb:5e:62:20:d7:
                    58:68:1b:08:99:d2:93:b7:da:20:b8:3a:e4:dc:50:
                    7b:be:a3:03:05:9f:cb:81:95:0d:45:c1:da:60:02:
                    fe:dc:bc:77:89:a3:db:90:03:5d:a8:85:0f:e0:77:
                    b1:ea:88:49:ef:e0:62:d5:1d:68:1d:c2:56:b5:86:
                    0b:e9:0a:f5:3d:52:bb:36:1b:09:56:86:ae:b4:0f:
                    06:ff:44:98:24:b3:a8:25:ce:ca:9d:87:c0:19:22:
                    f9:e7:85:2a:fc:58:2b:15:77:b8:ad:da:7a:a5:17:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E3:7F:59:B2:E9:E1:F2:7E:65:2C:4B:D5:AB:F5:14:8A:3A:93:7B
            X509v3 Authority Key Identifier:
                keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:06:31:1b:36:42:8c:fd:fc:ab:1d:ac:68:46:f9:c8:62:
         3b:2d:09:f3:e3:6c:be:a5:db:7d:84:cb:18:a5:80:77:d6:f6:
         19:ea:18:75:ff:0c:d3:fb:ac:8c:c4:83:74:d4:c7:5f:46:07:
         0f:a7:e0:de:f1:5a:01:2b:be:57:27:15:2c:fb:4d:ca:c2:2f:
         d7:99:6b:d9:fe:31:ee:5f:31:d6:3f:e5:15:38:4e:92:f0:c1:
         68:b3:fd:fa:c9:94:17:ea:48:9f:cd:b2:4e:46:67:00:a6:c0:
         b6:5e:82:7d:fb:ad:76:61:3f:0f:1e:c2:0e:78:59:6a:8c:4f:
         3f:65:1a:e6:22:3f:86:1b:a4:de:3b:bb:85:5d:80:0f:3c:64:
         29:e9:b0:51:87:a7:06:86:92:52:fe:43:a8:e7:93:2a:e2:e6:
         ca:0a:7f:e3:2c:07:48:4a:e0:c6:d0:b4:21:02:4d:ae:5c:0c:
         25:fa:ff:d9:9d:99:3d:a3:58:2c:d4:c1:33:6d:90:30:8c:ca:
         94:2e:2f:c1:5a:d8:40:fa:0c:24:67:f1:6b:4a:38:57:d8:aa:
         5b:93:7c:59:f0:1d:b2:93:69:24:f1:cb:2d:d2:87:52:30:53:
         80:f2:e1:2e:83:e0:d2:c4:8c:a9:6d:1c:e6:95:ea:d6:b9:8e:
         1c:0a:17:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdJ6weQqsIK+CnhtIA3MqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZmIzZTk1Y2JiYTE5NDhiZDk4NmE5MmJlNmYwZjY0N2U2
ZGM2YzQwHhcNMjYwMjAyMDcwMTA0WhcNMjYwMjAzMDcwMTA0WjAzMTEwLwYDVQQD
EyhjN2UzN2Y1OWIyZTllMWYyN2U2NTJjNGJkNWFiZjUxNDhhM2E5MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kaiIT7DOfjEZ36Vt0tWAjPJbS6N
aNKHPKOGxkpYi+JEsVjrovEp0shUNuIAhxoaOnH1EK6MNB+FXBd9QpuD6tA2vF6m
FCt082CXz4W1/zMOmuh6pfqPp1Gg5CajNigpmoDiGfOUXl45MKIpXGre7OGMrY3+
S38+hSND0ynEXtQu8Lmsgyi/FyTQCW78BBQGy15iINdYaBsImdKTt9oguDrk3FB7
vqMDBZ/LgZUNRcHaYAL+3Lx3iaPbkANdqIUP4Hex6ohJ7+Bi1R1oHcJWtYYL6Qr1
PVK7NhsJVoautA8G/0SYJLOoJc7KnYfAGSL554Uq/FgrFXe4rdp6pReKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfjf1my6eHyfmUsS9Wr9RSKOpN7MB8GA1UdIwQY
MBaAFN77PpXLuhlIvZhqkr5vD2R+bcbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEt
ZjQ1OTQ2YWM1ZTgwLzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lYmI4MzktNTJiYS00MzFiLTlkZWEtZjQ1OTQ2YWM1ZTgw
LzEvM3ZzLWxjdTZHVWk5bUdxU3ZtOFBaSDV0eHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFD0GMRs2
Qoz9/KsdrGhG+chiOy0J8+NsvqXbfYTLGKWAd9b2GeoYdf8M0/usjMSDdNTHX0YH
D6fg3vFaASu+VycVLPtNysIv15lr2f4x7l8x1j/lFThOkvDBaLP9+smUF+pIn82y
TkZnAKbAtl6CffutdmE/Dx7CDnhZaoxPP2Ua5iI/hhuk3ju7hV2ADzxkKemwUYen
BoaSUv5DqOeTKuLmygp/4ywHSErgxtC0IQJNrlwMJfr/2Z2ZPaNYLNTBM22QMIzK
lC4vwVrYQPoMJGfxa0o4V9iqW5N8WfAdspNpJPHLLdKHUjBTgPLhLoPg0sSMqW0c
5pXq1rmOHAoXPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:44 2026 by rpki-client