This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json) Hash identifier: QsORmao2S3tVycs+ylXZM+x6hRZ1ro/4ikdEgy8LPyA= Subject key identifier: 28:E0:F8:89:FE:71:DD:0A:14:DD:47:DA:67:A2:3A:5C:9B:38:4B:53 Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea Certificate serial: 019AF31B81E66632ACB1D879E5B276E18EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: 4WIZn1LEsrcYeDlsnkxhF8cESdX/yGgC9OWSgQI4OZw=) 2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:81:e6:66:32:ac:b1:d8:79:e5:b2:76:e1:8e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=28e0f889fe71dd0a14dd47da67a23a5c9b384b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:11:1d:fe:53:06:b4:a7:a1:f7:85:9d:fd: 6b:03:c1:20:47:e0:1d:ea:e8:ef:38:4f:de:11:64: 04:d6:e1:b6:8d:0c:07:46:ab:51:83:ea:4d:1d:91: f0:b8:3b:ff:e4:9a:11:dc:19:8e:8d:bb:fe:39:90: 2d:59:3a:9a:22:b1:eb:94:51:73:8e:52:f4:4e:8f: 52:82:02:44:07:20:3a:fb:45:1c:91:c5:68:bf:21: e6:a4:8f:43:98:b9:4b:6d:56:91:98:0e:15:75:e0: e4:f6:2d:82:4d:8e:1b:89:50:42:d7:48:ee:3e:e9: 7a:14:85:9c:44:07:5c:b5:10:05:b7:0c:4a:86:9d: 6c:9a:37:58:d9:db:c8:e5:eb:a7:ce:6d:c8:08:9b: 78:c8:89:c0:dd:17:85:08:15:21:a5:e7:bf:8e:99: 8b:f1:38:ef:70:7a:f9:02:c1:15:42:26:5a:48:6c: 2b:ec:97:1c:a5:12:02:22:8c:b2:7d:7b:74:c2:38: f0:62:dd:e7:6f:b7:58:d4:6d:a0:3f:53:a6:fe:fe: 45:28:cc:73:e7:39:c0:1b:c9:13:4e:df:06:d7:35: 39:15:6f:a2:95:82:13:fc:7e:35:81:6f:c0:77:57: bd:b2:1d:54:63:df:46:2d:3c:65:79:18:00:2b:4d: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:F8:89:FE:71:DD:0A:14:DD:47:DA:67:A2:3A:5C:9B:38:4B:53 X509v3 Authority Key Identifier: keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4f:26:76:97:31:54:01:55:ad:7d:1e:1a:52:a2:4c:fd:48: 37:65:4b:91:a2:25:1a:95:db:a8:c5:4c:fe:94:a8:b4:ee:27: 9e:d0:f7:a2:4a:74:82:5b:62:3d:a1:09:24:2b:65:ea:9b:87: 4c:b1:36:61:a5:4a:f7:52:46:a1:fd:9a:74:ad:05:e3:41:4f: 48:33:c1:1d:10:4b:3e:46:a9:9f:cc:a3:43:a2:7d:b1:36:8b: 72:38:b3:b3:1b:95:15:14:60:4e:0d:ab:e6:85:4e:1d:57:7c: b5:c2:1e:98:c3:91:9f:9f:8a:a7:6e:2b:f2:a9:18:c2:05:0c: 51:a1:5b:12:b8:6a:8b:cd:13:dd:14:cf:04:99:35:62:72:2d: 12:d4:02:e4:22:a6:95:e0:c3:cf:d9:15:4b:ea:e1:90:1e:53: cc:99:48:c8:ca:7b:e9:5e:46:d1:7d:e6:7b:a5:49:e4:64:97: 7a:05:af:71:11:30:47:98:cd:e1:ab:82:2f:c5:f8:5e:80:bb: 99:7e:99:eb:48:e8:bc:08:24:40:9a:94:ab:9b:94:3f:33:f2: d7:17:90:af:68:84:ad:36:e5:03:4f:b8:05:3e:88:00:e5:51: c5:e9:c0:e8:e2:ac:b9:76:46:b7:c4:81:67:8e:c0:7e:e8:b0: 83:b2:50:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4HmZjKssdh55bJ24Y7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0 OTI0ZWEwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD EygyOGUwZjg4OWZlNzFkZDBhMTRkZDQ3ZGE2N2EyM2E1YzliMzg0YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dQRHf5TBrSnofeFnf1rA8EgR+Ad 6ujvOE/eEWQE1uG2jQwHRqtRg+pNHZHwuDv/5JoR3BmOjbv+OZAtWTqaIrHrlFFz jlL0To9SggJEByA6+0UckcVovyHmpI9DmLlLbVaRmA4VdeDk9i2CTY4biVBC10ju Pul6FIWcRAdctRAFtwxKhp1smjdY2dvI5eunzm3ICJt4yInA3ReFCBUhpee/jpmL 8TjvcHr5AsEVQiZaSGwr7JccpRICIoyyfXt0wjjwYt3nb7dY1G2gP1Om/v5FKMxz 5znAG8kTTt8G1zU5FW+ilYIT/H41gW/Ad1e9sh1UY99GLTxleRgAK02YYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjg+In+cd0KFN1H2meiOlybOEtTMB8GA1UdIwQY MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwE8mdpcx VAFVrX0eGlKiTP1IN2VLkaIlGpXbqMVM/pSotO4nntD3okp0gltiPaEJJCtl6puH TLE2YaVK91JGof2adK0F40FPSDPBHRBLPkapn8yjQ6J9sTaLcjizsxuVFRRgTg2r 5oVOHVd8tcIemMORn5+Kp24r8qkYwgUMUaFbErhqi80T3RTPBJk1YnItEtQC5CKm leDDz9kVS+rhkB5TzJlIyMp76V5G0X3me6VJ5GSXegWvcREwR5jN4auCL8X4XoC7 mX6Z60jovAgkQJqUq5uUPzPy1xeQr2iErTblA0+4BT6IAOVRxenA6OKsuXZGt8SB Z47Afuiwg7JQiA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:46 2025 by rpki-client