This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File:                     h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier:          QVNki+MNZeZ8HLgpr+mKGL7yAegDSWFD2BUjs1RN3PI=
Subject key identifier:   37:A7:DC:E3:AC:19:94:B0:C8:62:FA:00:21:5B:6C:31:A2:C0:2F:E9
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer:       /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial:       019C42B47382DA05959382393C10682F2F0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 14:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:48 +0000
Files and hashes:         1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
                          2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: c4/fRV474wRvMhq7vT9ryOHG1mkCzwplIkR1EJXmwXY=)
                          3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:73:82:da:05:95:93:82:39:3c:10:68:2f:2f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
        Validity
            Not Before: Feb  9 14:00:48 2026 GMT
            Not After : Feb 10 14:00:48 2026 GMT
        Subject: CN=37a7dce3ac1994b0c862fa00215b6c31a2c02fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:d8:37:e8:8d:7d:ba:61:69:34:a9:b6:96:
                    a2:43:f8:0e:1b:81:a7:b2:e0:16:74:79:11:d7:63:
                    f7:42:37:ac:d8:18:10:e8:3c:f0:72:78:e0:ea:05:
                    1d:2c:a7:9a:59:8a:e5:5b:ac:cc:3f:2c:69:ba:54:
                    c3:d2:96:29:f3:a3:1c:73:f4:3f:df:88:e4:14:9c:
                    99:f5:66:d8:ec:82:4e:67:15:dd:45:25:88:81:e2:
                    b9:d8:cd:88:7e:88:d4:07:58:19:1d:b3:86:49:83:
                    79:ef:1b:45:7e:91:f0:f0:9e:66:35:46:e3:2d:4b:
                    da:48:26:b4:5a:fd:84:9c:a6:9e:ca:1d:64:ff:6f:
                    4a:ff:ea:f1:22:30:2c:23:58:56:36:14:ca:8e:58:
                    3c:71:cd:d5:a1:4b:7d:b3:c6:6d:96:84:cd:3d:ae:
                    be:8f:5c:93:37:2a:01:70:bd:ce:d1:f8:55:4b:53:
                    f5:9e:5a:ca:4b:72:7c:67:5a:8e:ec:93:75:4b:97:
                    27:b2:10:86:b9:e4:2b:19:03:20:1f:4b:ee:98:40:
                    13:04:3b:ff:a8:f2:b7:17:c5:e8:bc:93:30:36:ae:
                    0c:a1:58:93:14:ac:5a:3f:8d:c3:be:b6:19:68:e4:
                    3e:5d:ef:42:28:62:b9:7e:d7:9c:72:ff:c3:6f:7b:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A7:DC:E3:AC:19:94:B0:C8:62:FA:00:21:5B:6C:31:A2:C0:2F:E9
            X509v3 Authority Key Identifier:
                keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:34:12:76:b9:af:7b:fe:a9:f5:40:83:5c:72:09:4d:dc:
         5c:22:37:8c:28:39:79:6b:2d:00:1f:81:fc:c7:6f:78:a4:2e:
         ab:78:e4:c0:dc:9f:f8:7a:c6:7a:fd:47:4b:a3:af:d5:3f:30:
         c8:f8:e2:fe:19:c8:b1:e2:28:41:52:da:b1:e1:ac:78:14:cb:
         6b:e0:f3:dc:78:22:bc:0e:a8:d8:23:50:1f:17:8f:eb:7d:9b:
         c1:03:79:e2:5c:8d:06:97:27:8e:5b:cf:80:43:17:d6:60:54:
         1c:c4:e3:54:26:54:5e:a8:c1:16:bb:86:32:89:b3:41:22:a8:
         f4:9e:a7:cc:f4:f0:f2:5c:ee:4c:9d:2a:31:04:04:4e:a6:4a:
         e0:ac:cb:74:26:1d:2e:51:c7:37:37:0a:17:35:05:13:a5:53:
         eb:58:4f:11:50:23:9f:8a:b7:b9:91:df:e0:57:f6:d5:d0:84:
         ae:45:28:ab:fc:2e:fd:fc:1a:d3:b8:b8:6c:b9:6d:a9:21:47:
         0d:51:58:1b:33:f8:63:d3:81:b8:a1:48:ba:26:d5:55:e6:a1:
         c9:5e:6c:ad:ff:ec:09:23:0e:5d:c0:b0:15:c4:00:1a:10:8b:
         22:39:fe:e0:41:be:c8:91:28:af:f9:08:3c:85:1d:17:1f:5e:
         97:9a:fa:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtHOC2gWVk4I5PBBoLy8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3
OWY5NWIwHhcNMjYwMjA5MTQwMDQ4WhcNMjYwMjEwMTQwMDQ4WjAzMTEwLwYDVQQD
EygzN2E3ZGNlM2FjMTk5NGIwYzg2MmZhMDAyMTViNmMzMWEyYzAyZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgrYN+iNfbphaTSptpaiQ/gOG4Gn
suAWdHkR12P3Qjes2BgQ6Dzwcnjg6gUdLKeaWYrlW6zMPyxpulTD0pYp86Mcc/Q/
34jkFJyZ9WbY7IJOZxXdRSWIgeK52M2IfojUB1gZHbOGSYN57xtFfpHw8J5mNUbj
LUvaSCa0Wv2EnKaeyh1k/29K/+rxIjAsI1hWNhTKjlg8cc3VoUt9s8ZtloTNPa6+
j1yTNyoBcL3O0fhVS1P1nlrKS3J8Z1qO7JN1S5cnshCGueQrGQMgH0vumEATBDv/
qPK3F8XovJMwNq4MoViTFKxaP43DvrYZaOQ+Xe9CKGK5fteccv/Db3v+CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDen3OOsGZSwyGL6ACFbbDGiwC/pMB8GA1UdIwQY
MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt
ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw
LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnY0Ena5
r3v+qfVAg1xyCU3cXCI3jCg5eWstAB+B/MdveKQuq3jkwNyf+HrGev1HS6Ov1T8w
yPji/hnIseIoQVLaseGseBTLa+Dz3HgivA6o2CNQHxeP632bwQN54lyNBpcnjlvP
gEMX1mBUHMTjVCZUXqjBFruGMomzQSKo9J6nzPTw8lzuTJ0qMQQETqZK4KzLdCYd
LlHHNzcKFzUFE6VT61hPEVAjn4q3uZHf4Ff21dCErkUoq/wu/fwa07i4bLltqSFH
DVFYGzP4Y9OBuKFIuibVVeahyV5srf/sCSMOXcCwFcQAGhCLIjn+4EG+yJEor/kI
PIUdFx9el5r60w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:26 2026 by rpki-client