This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json) Hash identifier: S/Iur5og0/esqbdMWIciYBoh2WrTB75zjOOy9fnr4CY= Subject key identifier: A9:C6:AC:6C:55:0C:E5:AA:2C:3B:3E:97:80:F8:5F:6C:44:55:48:7B Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2 Certificate serial: 019B3FB5F122F6BC4CFFD4A6E1D683A9648B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft Manifest number: 02E2 Signing time: Sun 21 Dec 2025 07:00:46 +0000 Manifest this update: Sun 21 Dec 2025 07:00:46 +0000 Manifest next update: Mon 22 Dec 2025 07:00:46 +0000 Files and hashes: 1: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: lipUUqf3TuYPFn4khepRxHqH3Rfh3BSZH0w7iGgtnvI=) 2: GS5jwDpW5F6JeMWZm8DrRjluOmo.roa (hash: 3mTmFIv5ldZKVDBU/J8PsP8fY0NB4K7z+AUPdiPaiec=) 3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f1:22:f6:bc:4c:ff:d4:a6:e1:d6:83:a9:64:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2 Validity Not Before: Dec 21 07:00:46 2025 GMT Not After : Dec 22 07:00:46 2025 GMT Subject: CN=a9c6ac6c550ce5aa2c3b3e9780f85f6c4455487b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:5d:52:2a:fc:43:4f:c9:35:4a:ad:da:35: 61:e2:c7:0c:57:0c:46:31:37:b3:8b:ae:65:15:44: 7e:cc:a3:22:0d:45:e7:6b:37:8c:17:39:13:35:24: 78:1e:f0:fc:d1:2f:04:51:ec:f7:05:e2:62:ff:30: 1c:6e:d5:01:3a:e6:95:6f:74:ae:0a:db:e6:83:ad: d5:f1:ab:be:b1:93:cd:d7:41:72:75:54:ab:17:ae: 74:d6:d3:64:fa:4d:71:d3:67:e9:c6:15:bb:81:b0: d1:76:3d:ec:52:f5:86:70:90:4a:4a:34:f8:3b:f4: 54:eb:a8:6a:09:70:e8:51:7d:29:77:f4:46:0f:2d: 57:ea:71:ae:68:05:c1:56:b4:4b:d4:ae:95:bd:0e: df:d7:7d:75:a5:73:ea:dd:27:b7:a2:0f:52:75:67: c4:1e:d9:28:43:6d:98:02:95:11:76:7b:4f:73:42: 32:98:e2:0e:10:8b:e0:b6:77:d7:2a:82:23:fb:5e: 6c:13:f9:1b:1f:b9:a8:9c:bd:8d:07:b3:65:05:fe: 31:50:05:7d:d8:3b:bf:ae:d4:ea:9a:d6:90:0b:4a: 56:2f:ce:5f:db:ea:7a:08:68:87:3f:c4:2e:43:00: 30:9c:0b:ec:04:88:37:7d:83:40:31:0d:93:d6:0d: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:AC:6C:55:0C:E5:AA:2C:3B:3E:97:80:F8:5F:6C:44:55:48:7B X509v3 Authority Key Identifier: keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7f:77:ff:e3:92:69:f6:81:d5:16:b7:5a:17:7c:c4:74:d6: 8b:31:29:45:aa:22:3a:8d:b5:fa:b2:00:6a:62:1c:51:e7:79: 43:1f:ff:cf:9f:b9:90:48:96:56:db:da:5f:1d:6c:63:43:29: 11:0e:39:c8:b5:8c:98:b8:85:fb:b4:60:82:13:6e:1b:61:d7: 3c:d7:12:61:5a:28:95:f1:03:ac:d9:3f:d3:d1:72:bf:a0:f2: ff:8c:78:98:96:1b:6d:e6:de:5e:73:97:4d:1f:f2:70:48:bb: fb:79:c0:8f:d6:bd:01:1d:61:d6:03:d4:73:b6:58:ad:61:6c: 37:e8:b2:f6:0a:d1:a8:b6:3a:45:67:65:08:c9:c1:17:f7:22: 43:8c:eb:6f:6d:35:e0:2c:24:8f:02:00:ba:29:bb:e5:09:37: 88:e7:98:b3:13:c4:bb:d2:07:fd:a1:67:a6:68:fb:fe:39:e0: 35:6c:c7:93:f7:89:b8:61:3a:df:ca:82:5e:7a:94:27:09:df: 61:1f:3e:bb:15:96:ea:3f:77:01:12:12:85:46:ed:1b:2f:ec: a1:10:d6:a3:db:18:35:ec:ca:28:ff:c1:57:eb:a0:2a:3b:a3: f3:6e:08:fd:db:ae:bd:a3:82:39:6e:9a:b4:3e:fc:32:2d:46: db:d1:09:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfEi9rxM/9Sm4daDqWSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli MmFjZDIwHhcNMjUxMjIxMDcwMDQ2WhcNMjUxMjIyMDcwMDQ2WjAzMTEwLwYDVQQD EyhhOWM2YWM2YzU1MGNlNWFhMmMzYjNlOTc4MGY4NWY2YzQ0NTU0ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QldUir8Q0/JNUqt2jVh4scMVwxG MTezi65lFUR+zKMiDUXnazeMFzkTNSR4HvD80S8EUez3BeJi/zAcbtUBOuaVb3Su Ctvmg63V8au+sZPN10FydVSrF6501tNk+k1x02fpxhW7gbDRdj3sUvWGcJBKSjT4 O/RU66hqCXDoUX0pd/RGDy1X6nGuaAXBVrRL1K6VvQ7f1311pXPq3Se3og9SdWfE HtkoQ22YApURdntPc0IymOIOEIvgtnfXKoIj+15sE/kbH7monL2NB7NlBf4xUAV9 2Du/rtTqmtaQC0pWL85f2+p6CGiHP8QuQwAwnAvsBIg3fYNAMQ2T1g2hQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnGrGxVDOWqLDs+l4D4X2xEVUh7MB8GA1UdIwQY MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt MmY0OWVmYzVjY2IwLzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE393/+OS afaB1Ra3Whd8xHTWizEpRaoiOo21+rIAamIcUed5Qx//z5+5kEiWVtvaXx1sY0Mp EQ45yLWMmLiF+7RgghNuG2HXPNcSYVoolfEDrNk/09Fyv6Dy/4x4mJYbbebeXnOX TR/ycEi7+3nAj9a9AR1h1gPUc7ZYrWFsN+iy9grRqLY6RWdlCMnBF/ciQ4zrb201 4CwkjwIAuim75Qk3iOeYsxPEu9IH/aFnpmj7/jngNWzHk/eJuGE638qCXnqUJwnf YR8+uxWW6j93ARIShUbtGy/soRDWo9sYNezKKP/BV+ugKjuj824I/duuvaOCOW6a tD78Mi1G29EJYA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:34 2025 by rpki-client