This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File:                     CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier:          W7FPkoJCz/fzT/cjc22L4ZZ5RDSuc5TEPVrerPyiULo=
Subject key identifier:   5F:70:00:5F:71:44:BB:F5:98:AE:3B:84:B6:FB:F8:0B:06:35:75:B4
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer:       /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial:       019BFC1CD308155E4BD9232EFB097D0909DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number:          0344
Signing time:             Mon 26 Jan 2026 21:01:45 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:45 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:45 +0000
Files and hashes:         1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=)
                          2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: JUM01EYl86PPVfaRf2VBpogTbtruh1lpzVBSmRhxEnU=)
                          3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:d3:08:15:5e:4b:d9:23:2e:fb:09:7d:09:09:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
        Validity
            Not Before: Jan 26 21:01:45 2026 GMT
            Not After : Jan 27 21:01:45 2026 GMT
        Subject: CN=5f70005f7144bbf598ae3b84b6fbf80b063575b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:c6:27:de:b5:a8:0b:62:22:32:83:0d:93:
                    83:d6:62:b6:72:64:80:ff:2b:55:ba:9d:68:5f:6e:
                    02:65:3a:fd:d9:8e:34:c8:99:9a:86:ac:ca:07:0e:
                    ee:9d:68:62:26:b1:24:f1:65:bc:b6:de:1c:57:21:
                    ba:15:64:96:2a:9e:d8:6c:5d:14:d6:49:d1:a9:eb:
                    68:c6:eb:95:c8:20:25:6a:d8:05:c2:29:60:15:51:
                    c9:b3:d9:2d:37:08:8d:f3:5e:e4:0a:1a:32:9d:4a:
                    8a:ca:68:b8:22:fe:c5:56:1b:6f:70:5d:79:d1:0f:
                    0c:0d:81:4a:5d:b7:c4:38:ed:bb:ac:aa:73:0b:3f:
                    b2:71:d4:59:e4:db:33:6c:9e:d3:7b:aa:4b:14:e6:
                    7d:63:da:b1:53:db:34:1e:b5:d2:83:6c:bf:04:d7:
                    d0:1e:74:21:16:83:13:11:80:c9:2d:a3:01:e3:d6:
                    4e:e8:1c:66:29:c1:46:bb:1c:4c:5f:ca:97:2d:e4:
                    2f:dc:b6:4a:ca:f2:f8:84:8d:54:40:14:85:e6:55:
                    d8:b8:22:01:3e:11:20:50:16:ff:96:c4:be:9e:5d:
                    cb:e2:9b:8c:d6:82:b9:85:b9:be:ee:0f:c1:ce:d7:
                    a3:7a:1d:49:7d:4a:f7:7c:3a:d0:85:c5:40:02:da:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:70:00:5F:71:44:BB:F5:98:AE:3B:84:B6:FB:F8:0B:06:35:75:B4
            X509v3 Authority Key Identifier:
                keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:97:e5:0a:b3:25:2a:64:91:d6:9e:b4:ba:8b:98:70:88:
         cf:d0:67:15:28:d3:da:1e:22:25:13:e8:2f:84:04:70:6d:cf:
         04:15:f0:81:ca:fb:3d:f4:52:1f:63:58:1c:d8:40:49:45:4c:
         0c:c1:00:5d:af:b5:28:11:24:9e:10:e4:33:e3:2f:00:ba:da:
         e7:db:51:8c:19:07:92:74:2c:51:f6:fa:c5:13:1c:60:c5:c6:
         7c:34:88:4d:1c:b1:1e:bf:ec:06:d6:48:51:03:49:67:5f:88:
         4e:75:d4:4f:b8:82:22:7e:99:54:d7:83:dc:2d:83:63:25:7f:
         c8:24:e7:f5:f3:ef:68:21:49:7d:90:83:28:48:2c:02:74:bc:
         d6:2a:e9:ee:60:df:4f:d1:97:7c:b7:97:85:6e:d0:b4:1d:a1:
         14:82:1e:8f:e2:cd:27:3e:6e:c4:7a:43:c7:b3:02:8d:5b:c5:
         e9:91:01:66:a1:a8:0b:f2:5f:b2:6d:5c:e4:15:61:46:f9:cf:
         59:a9:a4:d0:5a:88:ce:11:fa:bd:e5:f2:a9:26:c1:25:82:09:
         46:e9:fb:c9:08:24:b8:10:f4:a4:a3:13:fd:4f:f4:f1:68:60:
         60:12:f3:6f:bd:46:8a:5c:aa:28:df:42:bd:2f:50:ea:dd:18:
         4a:9c:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:19:24 2026 by rpki-client