This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json) Hash identifier: ApmiytnsUuzHzfrB+v5DvHh9dm+9n2GVQMANQoMoRKo= Subject key identifier: 2A:B1:4C:57:98:9D:57:AB:BA:7E:94:11:77:0D:96:81:99:A0:E9:48 Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2 Certificate serial: 019BF65141B8DB7894C7B05D3242ED9D080F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft Manifest number: 0341 Signing time: Sun 25 Jan 2026 18:01:18 +0000 Manifest this update: Sun 25 Jan 2026 18:01:18 +0000 Manifest next update: Mon 26 Jan 2026 18:01:18 +0000 Files and hashes: 1: 2OzQAiJ84eR942-HL-mCfiNn304.roa (hash: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c=) 2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: AKG6O4/qOl4TOnIGkTm2YlBJBGgWJ3Oypq+4Pcq7/84=) 3: frdEDuVlBLc1KIouDp6myM9rtIA.roa (hash: G223mpKSbVeBYMKKTw6KE3IJvyTw3v+DtTphKZ5P+JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:41:b8:db:78:94:c7:b0:5d:32:42:ed:9d:08:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2 Validity Not Before: Jan 25 18:01:18 2026 GMT Not After : Jan 26 18:01:18 2026 GMT Subject: CN=2ab14c57989d57abba7e9411770d968199a0e948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:34:c7:72:db:87:90:84:52:92:0a:c1:ba: 0e:96:5b:03:35:0b:bc:5e:b1:1a:e7:a7:43:a3:f0: b2:99:78:f9:10:72:54:7d:21:3b:7f:45:dd:15:78: 69:ec:82:72:99:11:36:01:8b:0e:34:28:6f:2c:70: 41:85:20:e0:5b:3e:d6:f3:d4:ca:bf:5f:05:0f:45: bf:80:2c:5c:c1:67:28:48:e5:b7:41:0d:75:98:6b: 5b:f4:ae:71:58:c1:ad:25:7c:a0:d8:59:74:5c:b1: b6:31:63:ce:a4:c8:99:7e:fd:c0:50:2d:22:ab:ab: ed:bd:bd:a6:53:ae:ca:94:a3:ab:8f:47:5c:95:fb: d5:3d:e3:d6:e4:19:d7:ea:3e:46:3f:24:3d:ea:e4: c7:ff:6f:af:31:01:71:48:95:a7:3d:e6:26:e3:13: 83:9c:0d:ab:78:1c:8c:70:20:d8:99:dd:67:fa:49: 26:63:8d:a4:d6:b1:ee:ed:ec:48:1b:23:b8:1b:6c: 82:d7:08:b2:32:40:47:8c:1e:93:63:3c:c0:5f:63: 6d:0e:7b:a8:f7:23:99:63:99:89:30:fc:e4:e9:0b: a9:96:e8:d4:56:89:cd:f9:30:3f:b9:95:58:40:89: 6e:f5:4e:a6:99:c8:96:d8:a9:3c:09:25:de:0e:47: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B1:4C:57:98:9D:57:AB:BA:7E:94:11:77:0D:96:81:99:A0:E9:48 X509v3 Authority Key Identifier: keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:47:03:f1:85:d4:25:5d:34:51:30:33:f9:8a:dc:1e:ff:cf: 40:20:2c:da:3b:3a:46:20:1d:2d:89:10:42:73:11:1b:99:83: 60:5d:46:a9:02:b8:ff:49:28:a0:df:61:55:ab:f4:7b:19:81: 30:52:d6:dc:c7:16:2d:b4:74:bc:60:dc:0c:13:6c:3c:55:bb: bc:e1:e5:56:7e:02:06:c8:e3:f5:15:93:5d:06:bf:7d:f8:b3: c3:1c:ac:e5:5b:ba:71:e9:d2:be:90:3b:0a:80:83:ee:51:e0: 09:1c:15:47:ad:dc:c9:11:a6:e0:ad:f4:08:16:dc:e1:3d:92: 9e:7a:29:24:79:91:10:03:48:11:74:fe:9e:76:99:c4:fb:31: ae:83:19:b1:77:ca:20:29:d9:40:73:55:e4:77:32:8b:0a:c0: 97:84:85:f1:77:1e:a5:fa:08:47:7b:b0:4b:a5:04:bc:f9:41: 72:2b:69:27:51:48:35:aa:3f:4a:75:4b:e6:c0:51:02:28:85: e3:69:d6:c9:18:15:8a:8a:77:c0:c4:60:a7:8e:e0:d4:b5:60: 36:a8:ed:7b:7b:ad:30:0b:16:dd:26:ba:3d:a4:90:35:45:0d: 44:8c:82:16:21:34:62:ed:08:23:93:63:58:b1:9a:13:89:d0: 7d:ca:56:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUG423iUx7BdMkLtnQgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli MmFjZDIwHhcNMjYwMTI1MTgwMTE4WhcNMjYwMTI2MTgwMTE4WjAzMTEwLwYDVQQD EygyYWIxNGM1Nzk4OWQ1N2FiYmE3ZTk0MTE3NzBkOTY4MTk5YTBlOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC80x3Lbh5CEUpIKwboOllsDNQu8 XrEa56dDo/CymXj5EHJUfSE7f0XdFXhp7IJymRE2AYsONChvLHBBhSDgWz7W89TK v18FD0W/gCxcwWcoSOW3QQ11mGtb9K5xWMGtJXyg2Fl0XLG2MWPOpMiZfv3AUC0i q6vtvb2mU67KlKOrj0dclfvVPePW5BnX6j5GPyQ96uTH/2+vMQFxSJWnPeYm4xOD nA2reByMcCDYmd1n+kkmY42k1rHu7exIGyO4G2yC1wiyMkBHjB6TYzzAX2NtDnuo 9yOZY5mJMPzk6QuplujUVonN+TA/uZVYQIlu9U6mmciW2Kk8CSXeDkf4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqxTFeYnVerun6UEXcNloGZoOlIMB8GA1UdIwQY MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt MmY0OWVmYzVjY2IwLzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEcD8YXU JV00UTAz+YrcHv/PQCAs2js6RiAdLYkQQnMRG5mDYF1GqQK4/0kooN9hVav0exmB MFLW3McWLbR0vGDcDBNsPFW7vOHlVn4CBsjj9RWTXQa/ffizwxys5Vu6cenSvpA7 CoCD7lHgCRwVR63cyRGm4K30CBbc4T2SnnopJHmREANIEXT+nnaZxPsxroMZsXfK ICnZQHNV5HcyiwrAl4SF8XcepfoIR3uwS6UEvPlBcitpJ1FINao/SnVL5sBRAiiF 42nWyRgViop3wMRgp47g1LVgNqjte3utMAsW3Sa6PaSQNUUNRIyCFiE0Yu0II5Nj WLGaE4nQfcpWLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:31 2026 by rpki-client