This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json) Hash identifier: rU8rv/GVL7UP6qJa2j7ot/aPObgkOAZfBHH5JtIrswA= Subject key identifier: 9D:D1:78:51:08:CA:AC:6A:DD:7F:FB:70:04:B8:29:4D:4F:D7:0B:09 Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Certificate serial: 019B3AFE435A11688BBF83D0C58D8517B313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft Manifest number: 1152 Signing time: Sat 20 Dec 2025 09:01:40 +0000 Manifest this update: Sat 20 Dec 2025 09:01:40 +0000 Manifest next update: Sun 21 Dec 2025 09:01:40 +0000 Files and hashes: 1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: ZrCgOBzoAX6DQ0lIFu9zoJ3MT2m6aqdSX6ToX2yCDFk=) 2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=) 3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=) 4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:43:5a:11:68:8b:bf:83:d0:c5:8d:85:17:b3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Validity Not Before: Dec 20 09:01:40 2025 GMT Not After : Dec 21 09:01:40 2025 GMT Subject: CN=9dd1785108caac6add7ffb7004b8294d4fd70b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:44:b2:8b:2a:dd:5a:2e:5a:6a:9a:3e:24: cf:32:11:bb:f1:98:4e:8a:bd:9c:7a:f9:d2:6d:f4: 9f:ba:85:02:80:57:4a:55:11:4c:ef:79:28:5c:56: 33:1f:7a:60:58:82:42:5d:88:66:d8:84:ea:1e:6d: df:ac:07:45:fb:77:ae:79:34:9f:3a:9b:3b:0c:47: 3c:f4:03:83:ec:42:d8:13:dd:ae:22:52:c7:7c:bd: 60:4d:be:14:dc:15:22:36:e4:38:a5:ba:29:e8:94: 7f:dd:c0:99:19:b1:d7:a8:e0:51:2e:33:73:51:7c: c3:5b:ae:25:f3:a8:16:c6:53:b4:ec:32:27:81:ae: 0f:00:09:af:7e:2a:ed:3d:e0:6e:a7:e9:60:54:3c: c2:c5:a8:ae:25:1a:d2:db:50:37:0b:00:ac:d6:f9: ae:da:63:87:9a:a3:a9:ce:c3:a2:6e:c9:05:4d:bf: 17:19:9e:f8:e8:eb:ac:ac:83:a7:72:da:77:e6:59: 5a:e6:9e:5a:98:c3:25:11:20:c0:5a:3f:5a:d3:e9: a3:2d:f6:83:04:a5:d6:b3:42:84:5d:ff:80:c2:2c: b7:05:f6:fa:bf:ad:b2:da:1a:53:88:51:40:90:d3: 02:1c:e5:73:27:c4:b1:70:e3:5e:cd:5f:3a:2e:de: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:78:51:08:CA:AC:6A:DD:7F:FB:70:04:B8:29:4D:4F:D7:0B:09 X509v3 Authority Key Identifier: keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:88:83:0b:b2:76:67:3f:b2:3f:93:5c:40:5d:4b:33:2d:63: bf:f9:7d:1d:7c:53:01:70:6a:54:b5:d4:f9:b2:6c:4b:ff:75: 3b:c4:00:5a:ea:b6:c5:93:07:72:ed:15:e8:84:ee:12:26:70: 98:61:31:ab:c3:79:a0:8d:5f:b6:77:ef:bf:4d:1c:c2:4f:e6: 7f:a2:55:6c:d7:82:08:82:7e:17:88:b7:d2:dd:2b:34:78:b4: 36:76:a0:5f:00:1d:92:68:fc:77:d5:2a:fc:63:95:b2:18:95: ff:2b:05:65:62:dc:c0:a4:f1:69:3a:e2:60:62:b8:51:f9:11: fc:f0:40:c4:cd:0d:4e:02:48:ee:09:8f:3f:97:7a:8b:01:a0: 39:1b:c3:4a:a9:9e:6e:39:fc:99:4a:cc:04:e4:9f:e5:bf:ab: 7f:22:71:e8:76:e9:af:7a:a3:e8:91:74:08:96:6a:57:27:0d: 7c:01:59:68:bd:2e:57:b0:29:7a:d6:86:51:d0:87:2a:65:0a: a4:b9:9b:8a:fa:a8:ec:1b:22:34:2b:12:ab:84:18:b7:c6:62: 24:e0:da:ab:43:ca:fc:38:08:b3:e4:6a:a1:2c:7e:43:49:18: 34:a1:2c:eb:99:26:d1:83:1b:c5:04:ea:f4:a1:f4:66:a8:4a: 92:4a:14:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kNaEWiLv4PQxY2FF7MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4 Mjc2YjcwHhcNMjUxMjIwMDkwMTQwWhcNMjUxMjIxMDkwMTQwWjAzMTEwLwYDVQQD Eyg5ZGQxNzg1MTA4Y2FhYzZhZGQ3ZmZiNzAwNGI4Mjk0ZDRmZDcwYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNEsosq3VouWmqaPiTPMhG78ZhO ir2cevnSbfSfuoUCgFdKVRFM73koXFYzH3pgWIJCXYhm2ITqHm3frAdF+3eueTSf Ops7DEc89AOD7ELYE92uIlLHfL1gTb4U3BUiNuQ4pbop6JR/3cCZGbHXqOBRLjNz UXzDW64l86gWxlO07DInga4PAAmvfirtPeBup+lgVDzCxaiuJRrS21A3CwCs1vmu 2mOHmqOpzsOibskFTb8XGZ746OusrIOnctp35lla5p5amMMlESDAWj9a0+mjLfaD BKXWs0KEXf+Awiy3Bfb6v62y2hpTiFFAkNMCHOVzJ8SxcONezV86Lt6wyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3ReFEIyqxq3X/7cAS4KU1P1wsJMB8GA1UdIwQY MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYiDC7J2 Zz+yP5NcQF1LMy1jv/l9HXxTAXBqVLXU+bJsS/91O8QAWuq2xZMHcu0V6ITuEiZw mGExq8N5oI1ftnfvv00cwk/mf6JVbNeCCIJ+F4i30t0rNHi0NnagXwAdkmj8d9Uq /GOVshiV/ysFZWLcwKTxaTriYGK4UfkR/PBAxM0NTgJI7gmPP5d6iwGgORvDSqme bjn8mUrMBOSf5b+rfyJx6Hbpr3qj6JF0CJZqVycNfAFZaL0uV7ApetaGUdCHKmUK pLmbivqo7BsiNCsSq4QYt8ZiJODaq0PK/DgIs+RqoSx+Q0kYNKEs65km0YMbxQTq 9KH0ZqhKkkoUMA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:28:54 2025 by rpki-client