This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json) Hash identifier: uSsD/SQ847nEO8Nm9AhENdAtO69UFJWLwBraBRtXroQ= Subject key identifier: E5:E9:6F:7C:71:44:C2:D8:DB:F9:D2:1A:54:B3:D0:08:8A:BB:1E:AC Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea Certificate serial: 019BF79A5DCEB06D2E25EF1C1D40DA1A4294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft Manifest number: 177B Signing time: Mon 26 Jan 2026 00:00:47 +0000 Manifest this update: Mon 26 Jan 2026 00:00:47 +0000 Manifest next update: Tue 27 Jan 2026 00:00:47 +0000 Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: m5nQEjh1Vp2nsZicogFWLWlI0fUiD/N7MZskqOJbW38=) 2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:5d:ce:b0:6d:2e:25:ef:1c:1d:40:da:1a:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea Validity Not Before: Jan 26 00:00:47 2026 GMT Not After : Jan 27 00:00:47 2026 GMT Subject: CN=e5e96f7c7144c2d8dbf9d21a54b3d0088abb1eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:f8:15:08:8a:e1:fa:ab:c5:8d:e0:15:eb: f0:dc:d0:ef:66:62:d3:14:9e:9a:51:77:72:63:83: 2a:99:e5:9c:7d:5e:f4:26:54:52:3d:5e:8c:a0:d8: ef:7e:ff:d7:90:08:f5:ef:35:d6:07:72:af:d1:31: 47:77:e1:ec:17:6a:30:ba:22:21:16:5a:07:e4:b1: 7f:67:3a:53:71:63:23:df:1f:4a:0b:82:4b:b4:f5: 1e:e2:27:18:48:ad:22:de:9a:61:9d:85:90:a4:7f: 74:fc:31:3a:f2:5e:f7:b3:4e:42:06:97:db:ce:dd: 26:d6:51:80:8c:9b:99:9c:16:88:a4:3e:f9:64:70: 8a:a0:50:9f:ca:4b:79:7a:9b:89:96:8d:ae:12:07: 48:fe:5e:18:ff:ee:f7:61:14:8a:5e:07:8b:83:b1: e1:85:87:ec:8d:42:53:5b:96:d9:1c:91:f2:7d:5f: d8:ee:f2:25:ec:f1:5c:82:ec:9a:78:1b:9f:4b:16: 74:b4:f7:c2:46:8a:31:1a:ec:fb:d1:c3:a0:eb:61: 05:90:2b:fb:6c:42:4a:80:5e:99:f4:02:0f:53:44: 57:a5:b5:52:5f:79:f5:92:f6:e6:10:17:2a:e0:cd: 54:49:a6:df:9c:b5:45:11:b1:74:0e:8e:76:ae:46: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:6F:7C:71:44:C2:D8:DB:F9:D2:1A:54:B3:D0:08:8A:BB:1E:AC X509v3 Authority Key Identifier: keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e4:37:10:1c:e6:2d:ef:35:50:e0:59:9b:98:f2:94:49:f0: 8f:a1:b0:14:61:38:0e:51:1a:d8:c7:04:7a:5f:20:59:7c:55: 93:0c:b0:fe:16:b0:04:98:5b:d1:58:cd:75:a0:45:ca:d3:dd: 1c:82:72:29:3b:23:8b:99:6b:3a:c9:56:02:a6:99:b2:99:6d: 39:ed:53:05:64:fc:45:86:9d:ec:a8:d1:03:a6:96:38:34:46: fa:8d:90:7e:51:06:ae:60:05:c2:ed:ad:00:d0:93:d3:48:48: 22:38:5f:25:7a:da:4f:90:a0:5d:ca:7b:f9:45:af:14:58:de: 87:8d:e8:33:ce:75:28:9f:77:44:4e:54:3b:34:96:dd:93:c0: fa:d7:83:e0:d9:3a:92:e1:24:c1:da:60:b5:5f:a3:26:35:25: 1d:fc:8f:a6:f6:8c:c5:2b:3d:89:5c:41:00:07:ac:ae:43:64: d9:90:d1:9f:c7:86:6b:9f:c5:20:9d:35:e5:12:f7:f2:ad:69: 33:d6:29:53:2b:c0:6f:36:59:ae:df:3f:11:35:a5:db:af:17: 87:d9:68:dd:9c:7b:33:99:22:39:6e:de:ea:f6:be:c4:a3:09: 28:16:31:86:14:a3:95:00:13:62:fd:74:3a:b2:0d:75:f2:7b: 99:a7:82:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ml3OsG0uJe8cHUDaGkKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0 OTI0ZWEwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD EyhlNWU5NmY3YzcxNDRjMmQ4ZGJmOWQyMWE1NGIzZDAwODhhYmIxZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7r4FQiK4fqrxY3gFevw3NDvZmLT FJ6aUXdyY4MqmeWcfV70JlRSPV6MoNjvfv/XkAj17zXWB3Kv0TFHd+HsF2owuiIh FloH5LF/ZzpTcWMj3x9KC4JLtPUe4icYSK0i3pphnYWQpH90/DE68l73s05CBpfb zt0m1lGAjJuZnBaIpD75ZHCKoFCfykt5epuJlo2uEgdI/l4Y/+73YRSKXgeLg7Hh hYfsjUJTW5bZHJHyfV/Y7vIl7PFcguyaeBufSxZ0tPfCRooxGuz70cOg62EFkCv7 bEJKgF6Z9AIPU0RXpbVSX3n1kvbmEBcq4M1USabfnLVFEbF0Do52rkZnpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXpb3xxRMLY2/nSGlSz0AiKux6sMB8GA1UdIwQY MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOQ3EBzm Le81UOBZm5jylEnwj6GwFGE4DlEa2McEel8gWXxVkwyw/hawBJhb0VjNdaBFytPd HIJyKTsji5lrOslWAqaZspltOe1TBWT8RYad7KjRA6aWODRG+o2QflEGrmAFwu2t ANCT00hIIjhfJXraT5CgXcp7+UWvFFjeh43oM851KJ93RE5UOzSW3ZPA+teD4Nk6 kuEkwdpgtV+jJjUlHfyPpvaMxSs9iVxBAAesrkNk2ZDRn8eGa5/FIJ015RL38q1p M9YpUyvAbzZZrt8/ETWl268Xh9lo3Zx7M5kiOW7e6va+xKMJKBYxhhSjlQATYv10 OrINdfJ7maeCEA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:41 2026 by rpki-client