This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: WSJLoAlTKF3jYd2oJU9vgmbbkPsW+BJMoYHAd9Qs2J8=
Subject key identifier: 0F:0D:C6:B8:FB:B1:30:94:1C:80:2F:93:37:EE:6F:40:34:7A:95:76
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019BFBE4DF088496BE93D33D1A9EB1688E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 14DA
Signing time: Mon 26 Jan 2026 20:00:39 +0000
Manifest this update: Mon 26 Jan 2026 20:00:39 +0000
Manifest next update: Tue 27 Jan 2026 20:00:39 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 4q05EOpQlhA6w8yhwp0kbVTtXYYrpOMMl9iPQJ0A2JM=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:e4:df:08:84:96:be:93:d3:3d:1a:9e:b1:68:8e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 26 20:00:39 2026 GMT
Not After : Jan 27 20:00:39 2026 GMT
Subject: CN=0f0dc6b8fbb130941c802f9337ee6f40347a9576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:c0:6d:4f:fb:ea:0f:1c:fa:28:d1:7a:00:
4d:9f:7f:cc:c5:58:af:3d:7f:91:ed:5e:5b:44:c9:
02:85:b2:10:60:68:44:88:1a:fb:63:25:24:e2:60:
a8:ed:cc:70:96:8a:9f:a0:ab:c8:b4:1b:48:fe:ef:
38:58:99:40:dd:71:fe:31:32:05:60:0f:d1:4b:3d:
0d:17:47:4e:ba:c1:bc:6e:b8:a8:cc:73:9d:b3:be:
44:1e:6e:b8:b3:9a:93:be:4d:1f:26:3f:71:ba:27:
04:72:e6:15:2e:77:45:e5:45:70:de:29:9f:4a:9e:
94:2e:ea:8f:80:19:8e:b9:22:b5:e6:f5:c3:d3:5b:
ed:f9:2f:20:be:dd:10:b8:b2:1a:bf:8e:63:42:28:
93:04:2d:d9:3a:a2:71:e5:63:a0:34:75:5a:33:ed:
4f:1f:82:c0:2f:97:81:93:38:94:67:d3:91:60:c9:
39:93:00:3e:f2:29:00:38:22:8b:05:b4:24:c7:74:
20:30:52:4d:54:1e:f9:30:a0:78:1a:68:a9:f5:03:
ad:58:db:ab:1b:9b:db:e6:8e:de:ea:3b:c8:e3:9c:
14:95:3e:a8:65:07:26:db:6a:e9:ac:6b:73:a5:22:
47:87:ab:75:da:43:bc:99:ee:d4:03:a6:b1:e1:29:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:C6:B8:FB:B1:30:94:1C:80:2F:93:37:EE:6F:40:34:7A:95:76
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:91:dc:d3:6d:de:bc:d8:4b:b4:17:d1:ed:dc:da:e6:67:31:
6a:ee:82:69:d7:ef:e3:a5:74:3f:62:0e:31:90:9b:10:c8:00:
59:17:1a:17:ec:79:20:50:5f:ce:a2:29:07:f3:39:2a:f6:f9:
e8:c1:65:dd:a9:08:5c:7c:52:f6:81:e7:d8:40:f7:59:5d:8a:
55:14:50:d9:0a:41:68:14:f2:56:76:c5:2b:1a:b8:b1:02:32:
4d:f2:9c:d1:fe:25:82:09:c3:97:cd:94:6a:ff:2d:85:68:c6:
e0:66:ca:46:9e:20:7c:e8:90:f9:00:73:a7:2d:b5:d5:30:00:
d1:ef:ff:85:12:15:4f:eb:38:b7:53:24:70:a0:d6:0a:c0:8c:
9c:a3:f9:7a:b7:6a:60:7f:d2:c3:26:bf:51:34:b5:2a:07:68:
b8:1e:98:94:85:de:85:a6:ce:c7:9d:37:46:d8:a8:9e:37:a9:
8f:b9:78:a1:b1:e0:c0:30:d2:c9:9d:b2:88:57:eb:13:67:ad:
b2:4e:8a:04:8e:95:b1:1c:83:11:88:72:51:40:aa:be:38:29:
92:90:23:36:91:c4:09:91:bc:0e:16:1f:6e:ed:d1:25:3d:01:
7b:f5:59:13:66:f8:e9:03:7c:98:3c:c1:86:e1:ac:c5:0d:eb:
b3:b5:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:07:34 2026 by rpki-client