This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json) Hash identifier: vBzB/Dw/mFdt77WvgNvI8b3XMciZ7VwWrRtqPTo9G0o= Subject key identifier: 53:CC:84:38:92:58:A3:3F:DB:64:46:9E:64:9A:62:00:79:C8:15:29 Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2 Certificate serial: 019B0F6E59684DF7CEA0451DA84C019A75CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft Manifest number: 02C9 Signing time: Thu 11 Dec 2025 22:00:48 +0000 Manifest this update: Thu 11 Dec 2025 22:00:48 +0000 Manifest next update: Fri 12 Dec 2025 22:00:48 +0000 Files and hashes: 1: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: HCkgq5Y/WFkWrmTCGHLQOAa0YRG1hEj7jy7mJePOee4=) 2: GS5jwDpW5F6JeMWZm8DrRjluOmo.roa (hash: 3mTmFIv5ldZKVDBU/J8PsP8fY0NB4K7z+AUPdiPaiec=) 3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:59:68:4d:f7:ce:a0:45:1d:a8:4c:01:9a:75:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2 Validity Not Before: Dec 11 22:00:48 2025 GMT Not After : Dec 12 22:00:48 2025 GMT Subject: CN=53cc84389258a33fdb64469e649a620079c81529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:13:bd:cb:8b:25:8c:90:0f:e8:cf:60:d1: 4c:67:3b:db:aa:18:fc:44:27:f8:19:39:54:77:40: dd:a1:29:1a:61:ff:cd:65:1d:58:3c:0c:53:25:e2: 5a:47:74:64:99:80:f3:a5:20:81:21:80:77:5d:b3: d9:23:a4:79:16:b7:ff:e4:ab:c1:2c:b9:db:7f:d4: 98:ff:4f:71:99:20:a2:fd:20:c6:9e:ad:47:07:e8: 2e:9e:34:c0:ef:7e:70:d0:a3:b7:8a:aa:2c:6f:42: 38:5e:f5:41:88:32:40:b9:6a:3a:ea:8f:fa:31:32: e3:ef:09:c5:23:4b:6c:74:ba:fd:0b:99:04:27:d9: ec:63:ea:b7:f7:1b:ad:3e:68:e6:05:49:41:83:46: e2:07:23:44:d5:cb:1e:8a:ba:eb:46:57:01:06:c7: fd:61:5a:87:2c:47:2b:f8:29:a6:23:1d:a1:f6:6b: a1:44:c2:82:c6:75:ec:e1:04:46:b0:39:07:0a:ed: 47:e6:a4:8b:ba:c7:8c:e2:aa:1d:42:fd:3d:2d:e2: 74:67:08:ff:36:1f:10:97:90:db:2f:27:a9:75:b3: 64:e5:ed:a7:22:63:32:03:e9:51:6f:d4:68:06:35: cd:4b:71:5e:e0:87:71:bc:15:4a:5e:49:cf:bd:a6: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CC:84:38:92:58:A3:3F:DB:64:46:9E:64:9A:62:00:79:C8:15:29 X509v3 Authority Key Identifier: keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:32:e9:c5:e4:0e:07:a2:79:9f:a5:60:91:a5:b4:1f:e0:8d: 04:44:5d:09:5f:82:76:82:a6:33:d6:b0:16:2b:76:60:68:f8: 91:f2:b4:a2:8b:1c:74:04:26:f2:44:6b:09:7e:61:ef:a2:8d: 44:cd:e4:6c:13:a2:32:d8:5e:ac:d3:64:17:b5:5b:00:8b:14: d8:05:ee:dc:35:18:1f:89:7e:e2:e6:07:21:6a:d7:43:1c:44: 4c:a0:a3:f3:6e:4c:1b:dc:98:6b:f5:43:29:a4:a9:13:84:61: 3f:da:9d:65:c0:3d:cf:fe:54:29:db:e9:d0:71:ed:9b:3d:92: ac:27:a2:78:33:13:6f:8d:5c:97:29:86:6c:0c:bb:78:64:94: 5e:fb:7d:92:c2:04:78:ae:a8:84:73:68:79:6d:eb:91:7f:75: b3:37:3f:e9:a6:5e:b1:da:01:a5:7f:1c:bc:3a:21:63:90:fd: 57:e5:09:9d:f0:e8:5d:7c:d6:f4:17:3f:45:b2:b1:3a:83:80: 20:f2:bf:83:23:84:f6:18:5b:c7:4a:68:9c:0e:17:c7:7d:58: 45:94:e2:29:1a:fb:3e:87:eb:3f:f7:11:4a:86:f8:f8:89:42: 25:cc:57:bf:8c:d6:a6:ff:6d:75:75:ae:53:97:f0:15:ac:30: 05:79:c7:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPblloTffOoEUdqEwBmnXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli MmFjZDIwHhcNMjUxMjExMjIwMDQ4WhcNMjUxMjEyMjIwMDQ4WjAzMTEwLwYDVQQD Eyg1M2NjODQzODkyNThhMzNmZGI2NDQ2OWU2NDlhNjIwMDc5YzgxNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UgTvcuLJYyQD+jPYNFMZzvbqhj8 RCf4GTlUd0DdoSkaYf/NZR1YPAxTJeJaR3RkmYDzpSCBIYB3XbPZI6R5Frf/5KvB LLnbf9SY/09xmSCi/SDGnq1HB+gunjTA735w0KO3iqosb0I4XvVBiDJAuWo66o/6 MTLj7wnFI0tsdLr9C5kEJ9nsY+q39xutPmjmBUlBg0biByNE1cseirrrRlcBBsf9 YVqHLEcr+CmmIx2h9muhRMKCxnXs4QRGsDkHCu1H5qSLuseM4qodQv09LeJ0Zwj/ Nh8Ql5DbLyepdbNk5e2nImMyA+lRb9RoBjXNS3Fe4IdxvBVKXknPvaaopQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPMhDiSWKM/22RGnmSaYgB5yBUpMB8GA1UdIwQY MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt MmY0OWVmYzVjY2IwLzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDLpxeQO B6J5n6VgkaW0H+CNBERdCV+CdoKmM9awFit2YGj4kfK0ooscdAQm8kRrCX5h76KN RM3kbBOiMtherNNkF7VbAIsU2AXu3DUYH4l+4uYHIWrXQxxETKCj825MG9yYa/VD KaSpE4RhP9qdZcA9z/5UKdvp0HHtmz2SrCeieDMTb41clymGbAy7eGSUXvt9ksIE eK6ohHNoeW3rkX91szc/6aZesdoBpX8cvDohY5D9V+UJnfDoXXzW9Bc/RbKxOoOA IPK/gyOE9hhbx0ponA4Xx31YRZTiKRr7PofrP/cRSob4+IlCJcxXv4zWpv9tdXWu U5fwFawwBXnHcg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:41:07 2025 by rpki-client