This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: D4+27iGRkctxYLuCKzfQTYFCx9rCAXNM0NzCiyhTXbY=
Subject key identifier: ED:E9:0A:0D:2B:6C:13:4F:D7:9F:13:CD:C9:56:18:60:D9:31:44:AA
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019AF19B2C3FAFEA1654FC044293040220EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 112C
Signing time: Sat 06 Dec 2025 03:01:09 +0000
Manifest this update: Sat 06 Dec 2025 03:01:09 +0000
Manifest next update: Sun 07 Dec 2025 03:01:09 +0000
Files and hashes: 1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: Z+LjpPyXGSra9SIv5YsuwP92hfc/EhX4neBX6wYBZXo=)
2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:2c:3f:af:ea:16:54:fc:04:42:93:04:02:20:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Dec 6 03:01:09 2025 GMT
Not After : Dec 7 03:01:09 2025 GMT
Subject: CN=ede90a0d2b6c134fd79f13cdc9561860d93144aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:aa:32:c0:62:f7:78:36:1c:12:5a:76:b6:
ed:23:35:b4:ed:6f:e7:c2:ee:b9:9e:b3:09:14:f3:
2a:d7:79:f5:52:8f:ac:46:5d:70:c7:c6:6d:b3:f8:
ad:f7:62:78:1f:82:5b:d1:c8:c5:19:33:14:31:df:
12:00:e0:77:dd:09:f7:6d:7b:8d:9b:b9:e0:04:9a:
87:20:1e:65:4a:fb:35:01:37:d0:20:6b:8b:89:e4:
a2:42:14:fa:48:7c:c1:c7:95:55:c8:fa:94:35:b1:
98:54:2c:f6:71:ac:2d:e1:6f:08:eb:b5:40:cb:c6:
32:c8:40:f7:5e:99:2c:5f:be:cd:82:87:b2:eb:2f:
39:e5:76:b4:e9:07:bc:12:23:44:5a:8d:d3:a5:15:
f9:07:44:31:b5:f7:81:64:26:cf:d0:b3:21:3b:f9:
26:a1:c9:90:8e:b6:94:e9:2c:38:8b:57:71:7e:6f:
3e:d7:0c:7f:d9:7e:eb:1e:1c:39:64:cb:2a:9c:5a:
9f:34:bb:36:96:de:a0:d1:dc:e5:86:13:c7:23:17:
3e:0b:f8:35:0b:99:eb:51:fd:e7:eb:9f:9a:75:92:
60:fa:f5:e5:81:a9:9b:da:1b:69:63:61:34:88:ed:
d9:81:a1:80:cd:94:a9:61:74:cd:ea:63:37:7d:ed:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:0A:0D:2B:6C:13:4F:D7:9F:13:CD:C9:56:18:60:D9:31:44:AA
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:d9:50:fa:04:7b:21:2f:de:b2:6d:1e:46:0a:00:de:e5:
6a:12:1c:e7:a7:ff:85:5f:82:d3:59:d6:e1:d1:7a:ec:e1:15:
60:70:ab:6f:10:ef:b8:68:ff:0d:76:86:6d:3f:db:b4:86:47:
04:b9:b7:45:8e:a9:04:2e:7e:34:01:b6:a4:cf:b0:57:d7:27:
7e:c4:05:d0:94:3a:91:8c:67:cb:3a:45:2a:05:5c:5c:d3:e8:
fa:bb:0f:ae:06:64:fe:f2:14:83:9f:01:a4:25:f6:b5:a3:48:
63:b8:28:0c:91:8c:4b:c8:16:31:21:ad:33:6f:0b:e9:56:aa:
74:51:70:fa:2d:d2:83:19:d7:4d:49:e8:10:89:62:be:24:aa:
a8:0c:14:89:bc:fa:ec:25:52:90:2f:4c:2b:d5:62:28:b0:f6:
45:9d:a7:b0:5c:0b:5a:bd:e1:64:e7:53:82:a2:41:78:82:89:
2f:01:97:78:3f:2f:bc:49:33:f4:44:17:35:d6:40:12:9d:52:
eb:0e:98:d7:9b:e7:98:c4:a8:f4:45:22:c1:93:c1:5a:31:a3:
22:56:31:7c:e3:83:c6:09:a3:7a:4e:62:92:8c:11:0e:c7:32:
0d:1a:67:34:c6:7f:17:5f:56:90:a8:c3:57:07:27:f7:67:19:
be:5d:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:31 2025 by rpki-client