This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json) Hash identifier: Qobgqm1zJuq8sDr7oOHu268Usj3cP7utlZ8WCPdijcs= Subject key identifier: 77:A1:3D:5C:77:37:D9:3A:A6:DE:44:1E:35:92:FA:F7:D1:78:89:2D Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea Certificate serial: 019B1D9815849D65357B399F888B0051F117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 16:01:04 +0000 Manifest this update: Sun 14 Dec 2025 16:01:04 +0000 Manifest next update: Mon 15 Dec 2025 16:01:04 +0000 Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: OpVa+pLKiyMb1LDLCXojsev/TP0/fYE+qp8Qmjb8oi4=) 2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:15:84:9d:65:35:7b:39:9f:88:8b:00:51:f1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea Validity Not Before: Dec 14 16:01:04 2025 GMT Not After : Dec 15 16:01:04 2025 GMT Subject: CN=77a13d5c7737d93aa6de441e3592faf7d178892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:f8:a2:02:23:31:ce:05:14:d4:f0:93:47: c3:b3:f3:74:e5:bc:51:54:0c:33:13:13:9c:0c:d3: 27:3e:89:a0:38:58:8e:c9:2e:a7:2b:a7:a0:4b:b1: 82:c8:9a:4c:ee:d9:ca:0a:ff:18:55:c7:68:0a:32: df:a5:09:cd:d8:99:54:13:36:0a:da:3d:04:cd:bf: 96:b3:27:93:d7:3c:9f:eb:f2:d9:0d:74:61:c0:bf: e8:34:4c:75:ac:d0:3d:e7:05:e3:44:79:04:57:23: 9f:5f:27:4d:cc:d1:77:8c:9a:23:cc:e2:1d:6d:de: 5e:e7:94:8e:b0:1d:01:b1:72:6d:b9:64:33:a9:44: 83:43:ee:d5:bd:b4:49:65:89:f6:f8:1f:9a:dc:bf: 39:23:ea:4b:f8:ca:71:1b:f8:31:25:63:31:84:25: 8e:3a:06:ef:5a:ac:53:7a:d6:f2:6e:6a:9a:49:52: f1:0f:eb:86:64:31:80:38:44:60:35:b2:71:11:0d: 18:60:47:40:94:5b:bd:37:b7:62:04:df:13:5f:ed: 96:73:d0:96:e5:80:cc:40:3e:02:ef:c8:a5:3c:aa: be:21:e4:6f:69:62:8d:80:af:3d:05:04:7c:d4:af: 75:2f:91:d4:ad:5d:ce:44:ae:1a:be:21:a9:ea:97: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A1:3D:5C:77:37:D9:3A:A6:DE:44:1E:35:92:FA:F7:D1:78:89:2D X509v3 Authority Key Identifier: keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:05:8f:c4:a4:cc:06:90:bd:06:4a:75:ba:dc:8b:5f:bc:74: 86:3e:1c:17:c4:6e:94:18:df:62:49:8f:00:20:b4:e1:a1:84: 63:65:35:c6:22:89:5d:1f:e4:19:6b:6e:f1:24:67:e7:bb:65: 73:5c:26:85:e1:c4:db:cc:7e:dc:f0:51:01:19:f5:bd:59:bd: 30:d9:dc:0c:f8:59:8f:92:c7:2d:8f:06:9e:03:a0:ea:24:32: 15:5b:04:b0:f9:46:fd:cc:7b:a8:df:8e:75:8e:7a:96:3f:f2: 16:c2:7f:69:18:3a:3e:f0:9e:dd:4c:7d:12:90:ca:d4:1a:1b: 32:2a:33:f6:b0:0b:e1:ac:4d:e6:ec:2b:63:1c:fc:35:77:ef: 85:d9:d7:8c:4c:29:6b:e6:b3:14:52:77:55:ba:a0:21:66:26: 32:5d:8b:6f:d7:0c:7d:7f:97:07:7e:24:89:a1:65:86:71:7a: 50:6f:40:bd:42:bb:b0:3d:52:0a:e7:f9:de:c7:08:4c:1f:c3: 8b:2e:84:57:6a:66:98:ef:09:dd:4f:ad:83:f1:68:85:71:f9: 34:e4:0d:f5:10:3a:c8:48:b5:bb:df:fd:22:db:70:e5:ae:05: 06:f9:2f:74:7f:e7:2e:7c:5d:2b:67:a3:4f:0b:91:0e:ec:ba: 21:0d:c5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmBWEnWU1ezmfiIsAUfEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0 OTI0ZWEwHhcNMjUxMjE0MTYwMTA0WhcNMjUxMjE1MTYwMTA0WjAzMTEwLwYDVQQD Eyg3N2ExM2Q1Yzc3MzdkOTNhYTZkZTQ0MWUzNTkyZmFmN2QxNzg4OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTj4ogIjMc4FFNTwk0fDs/N05bxR VAwzExOcDNMnPomgOFiOyS6nK6egS7GCyJpM7tnKCv8YVcdoCjLfpQnN2JlUEzYK 2j0Ezb+WsyeT1zyf6/LZDXRhwL/oNEx1rNA95wXjRHkEVyOfXydNzNF3jJojzOId bd5e55SOsB0BsXJtuWQzqUSDQ+7VvbRJZYn2+B+a3L85I+pL+MpxG/gxJWMxhCWO OgbvWqxTetbybmqaSVLxD+uGZDGAOERgNbJxEQ0YYEdAlFu9N7diBN8TX+2Wc9CW 5YDMQD4C78ilPKq+IeRvaWKNgK89BQR81K91L5HUrV3ORK4aviGp6pfzSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHehPVx3N9k6pt5EHjWS+vfReIktMB8GA1UdIwQY MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgWPxKTM BpC9Bkp1utyLX7x0hj4cF8RulBjfYkmPACC04aGEY2U1xiKJXR/kGWtu8SRn57tl c1wmheHE28x+3PBRARn1vVm9MNncDPhZj5LHLY8GngOg6iQyFVsEsPlG/cx7qN+O dY56lj/yFsJ/aRg6PvCe3Ux9EpDK1BobMioz9rAL4axN5uwrYxz8NXfvhdnXjEwp a+azFFJ3VbqgIWYmMl2Lb9cMfX+XB34kiaFlhnF6UG9AvUK7sD1SCuf53scITB/D iy6EV2pmmO8J3U+tg/FohXH5NOQN9RA6yEi1u9/9Ittw5a4FBvkvdH/nLnxdK2ej TwuRDuy6IQ3FBA== -----END CERTIFICATE-----Generated at Mon Dec 15 00:43:37 2025 by rpki-client