This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json) Hash identifier: gQpX4TCzdvDZBlcnmOXZiev3JIPFzqvqCQOkVK6ykcY= Subject key identifier: 67:D2:46:EF:81:A7:62:45:96:4E:CF:28:4B:10:3D:01:B8:67:B1:15 Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea Certificate serial: 019C1E3AA736E11A3F4444AFB80AE9B85C24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft Manifest number: 178F Signing time: Mon 02 Feb 2026 12:01:26 +0000 Manifest this update: Mon 02 Feb 2026 12:01:26 +0000 Manifest next update: Tue 03 Feb 2026 12:01:26 +0000 Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: wPQi5PkbyvfT7d1xdw4HUWNEu1WK9N6FdnRixWA7pfY=) 2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:3a:a7:36:e1:1a:3f:44:44:af:b8:0a:e9:b8:5c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea Validity Not Before: Feb 2 12:01:26 2026 GMT Not After : Feb 3 12:01:26 2026 GMT Subject: CN=67d246ef81a76245964ecf284b103d01b867b115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:0f:6e:9e:42:63:aa:3b:df:eb:ad:08:07: 9e:9e:50:8d:b3:8f:e0:ef:c0:53:a7:d6:7d:db:03: aa:79:77:66:8f:eb:6a:b9:09:8c:24:be:49:5c:b9: f5:da:4f:39:e9:26:18:d3:4c:af:30:c8:23:2a:8c: af:ad:9d:31:a0:89:70:07:36:c8:19:4d:98:9a:d9: 0a:92:ab:f5:77:46:5f:b3:6b:62:fc:3e:86:aa:6a: 0f:92:7c:ea:a5:af:b3:a8:9a:51:7a:89:01:51:3f: e2:8e:4f:a3:ee:7c:db:02:dd:f3:71:03:3c:75:a9: a3:62:ca:8d:f8:f8:d4:1a:85:dd:d0:c3:5f:cc:c7: e2:32:a7:e3:28:71:c1:5a:73:f1:55:80:85:f8:f9: ce:9a:f2:50:7d:7f:12:c0:26:9a:ab:43:e8:c7:5e: 48:95:f1:9e:6f:bc:e6:e7:8c:86:05:25:3d:55:c3: 9e:fd:be:db:68:c9:18:b5:81:db:fd:82:08:11:e1: 66:ff:36:6d:51:33:ca:49:f7:43:10:e4:7b:43:db: cd:a3:fc:ad:e9:8c:9b:e6:bb:fb:fa:e9:31:1c:c7: b1:23:ab:b5:12:d5:5e:bb:1c:42:8a:51:51:03:6c: bb:d0:d6:7d:ed:23:9d:1a:56:15:e7:55:19:6a:43: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:46:EF:81:A7:62:45:96:4E:CF:28:4B:10:3D:01:B8:67:B1:15 X509v3 Authority Key Identifier: keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:c2:39:a1:89:68:18:50:bb:b1:c8:76:5a:02:c6:38:86: d1:ec:93:f8:b3:eb:44:43:d7:24:2b:c8:e9:f9:8f:54:11:33: 34:eb:4d:5c:13:d0:c2:d5:45:ef:53:d6:f9:4a:85:76:7a:b2: a6:6d:f1:db:1c:fb:21:b6:8d:4d:a9:aa:f1:c2:b7:2c:4c:bc: 18:c6:b8:da:8a:8a:45:a1:d5:e0:7e:50:59:b1:7f:59:61:f1: 3f:05:e2:17:7c:54:d6:48:fa:19:b1:45:bb:43:08:01:88:6f: c8:c4:68:28:f3:be:87:b4:50:e9:cc:ff:4f:9a:04:a5:c9:42: cd:b2:8e:5a:a6:6a:fd:56:1d:78:7e:30:dd:10:e9:ef:59:b5: bb:a8:b9:13:ce:6f:fc:37:c3:82:66:5b:00:6f:05:11:76:43: 3e:ff:e6:2a:c4:a0:bb:29:62:30:d8:12:37:b3:92:f3:78:0a: 5d:ca:d2:36:14:a6:bd:9b:ba:32:d3:65:15:87:cb:f2:3e:26: 31:82:8c:8c:60:ad:4e:28:0a:66:c6:b8:51:6f:45:f3:7a:ca: f5:85:cf:44:3f:0e:2b:65:dd:a6:52:0d:eb:15:22:13:27:da: a3:73:b2:fc:67:60:56:ae:76:95:22:cf:d3:09:19:90:19:10: 5d:6e:b7:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweOqc24Ro/RESvuArpuFwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0 OTI0ZWEwHhcNMjYwMjAyMTIwMTI2WhcNMjYwMjAzMTIwMTI2WjAzMTEwLwYDVQQD Eyg2N2QyNDZlZjgxYTc2MjQ1OTY0ZWNmMjg0YjEwM2QwMWI4NjdiMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS4Pbp5CY6o73+utCAeenlCNs4/g 78BTp9Z92wOqeXdmj+tquQmMJL5JXLn12k856SYY00yvMMgjKoyvrZ0xoIlwBzbI GU2YmtkKkqv1d0Zfs2ti/D6GqmoPknzqpa+zqJpReokBUT/ijk+j7nzbAt3zcQM8 damjYsqN+PjUGoXd0MNfzMfiMqfjKHHBWnPxVYCF+PnOmvJQfX8SwCaaq0Pox15I lfGeb7zm54yGBSU9VcOe/b7baMkYtYHb/YIIEeFm/zZtUTPKSfdDEOR7Q9vNo/yt 6Yyb5rv7+ukxHMexI6u1EtVeuxxCilFRA2y70NZ97SOdGlYV51UZakPPgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfSRu+Bp2JFlk7PKEsQPQG4Z7EVMB8GA1UdIwQY MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiADCOaGJ aBhQu7HIdloCxjiG0eyT+LPrREPXJCvI6fmPVBEzNOtNXBPQwtVF71PW+UqFdnqy pm3x2xz7IbaNTamq8cK3LEy8GMa42oqKRaHV4H5QWbF/WWHxPwXiF3xU1kj6GbFF u0MIAYhvyMRoKPO+h7RQ6cz/T5oEpclCzbKOWqZq/VYdeH4w3RDp71m1u6i5E85v /DfDgmZbAG8FEXZDPv/mKsSguyliMNgSN7OS83gKXcrSNhSmvZu6MtNlFYfL8j4m MYKMjGCtTigKZsa4UW9F83rK9YXPRD8OK2XdplIN6xUiEyfao3Oy/GdgVq52lSLP 0wkZkBkQXW63/w== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:02 2026 by rpki-client