This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          D4+27iGRkctxYLuCKzfQTYFCx9rCAXNM0NzCiyhTXbY=
Subject key identifier:   ED:E9:0A:0D:2B:6C:13:4F:D7:9F:13:CD:C9:56:18:60:D9:31:44:AA
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       019AF19B2C3FAFEA1654FC044293040220EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          112C
Signing time:             Sat 06 Dec 2025 03:01:09 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:09 +0000
Manifest next update:     Sun 07 Dec 2025 03:01:09 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: Z+LjpPyXGSra9SIv5YsuwP92hfc/EhX4neBX6wYBZXo=)
                          2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
                          3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
                          4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9b:2c:3f:af:ea:16:54:fc:04:42:93:04:02:20:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Dec  6 03:01:09 2025 GMT
            Not After : Dec  7 03:01:09 2025 GMT
        Subject: CN=ede90a0d2b6c134fd79f13cdc9561860d93144aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:aa:32:c0:62:f7:78:36:1c:12:5a:76:b6:
                    ed:23:35:b4:ed:6f:e7:c2:ee:b9:9e:b3:09:14:f3:
                    2a:d7:79:f5:52:8f:ac:46:5d:70:c7:c6:6d:b3:f8:
                    ad:f7:62:78:1f:82:5b:d1:c8:c5:19:33:14:31:df:
                    12:00:e0:77:dd:09:f7:6d:7b:8d:9b:b9:e0:04:9a:
                    87:20:1e:65:4a:fb:35:01:37:d0:20:6b:8b:89:e4:
                    a2:42:14:fa:48:7c:c1:c7:95:55:c8:fa:94:35:b1:
                    98:54:2c:f6:71:ac:2d:e1:6f:08:eb:b5:40:cb:c6:
                    32:c8:40:f7:5e:99:2c:5f:be:cd:82:87:b2:eb:2f:
                    39:e5:76:b4:e9:07:bc:12:23:44:5a:8d:d3:a5:15:
                    f9:07:44:31:b5:f7:81:64:26:cf:d0:b3:21:3b:f9:
                    26:a1:c9:90:8e:b6:94:e9:2c:38:8b:57:71:7e:6f:
                    3e:d7:0c:7f:d9:7e:eb:1e:1c:39:64:cb:2a:9c:5a:
                    9f:34:bb:36:96:de:a0:d1:dc:e5:86:13:c7:23:17:
                    3e:0b:f8:35:0b:99:eb:51:fd:e7:eb:9f:9a:75:92:
                    60:fa:f5:e5:81:a9:9b:da:1b:69:63:61:34:88:ed:
                    d9:81:a1:80:cd:94:a9:61:74:cd:ea:63:37:7d:ed:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:0A:0D:2B:6C:13:4F:D7:9F:13:CD:C9:56:18:60:D9:31:44:AA
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:12:d9:50:fa:04:7b:21:2f:de:b2:6d:1e:46:0a:00:de:e5:
         6a:12:1c:e7:a7:ff:85:5f:82:d3:59:d6:e1:d1:7a:ec:e1:15:
         60:70:ab:6f:10:ef:b8:68:ff:0d:76:86:6d:3f:db:b4:86:47:
         04:b9:b7:45:8e:a9:04:2e:7e:34:01:b6:a4:cf:b0:57:d7:27:
         7e:c4:05:d0:94:3a:91:8c:67:cb:3a:45:2a:05:5c:5c:d3:e8:
         fa:bb:0f:ae:06:64:fe:f2:14:83:9f:01:a4:25:f6:b5:a3:48:
         63:b8:28:0c:91:8c:4b:c8:16:31:21:ad:33:6f:0b:e9:56:aa:
         74:51:70:fa:2d:d2:83:19:d7:4d:49:e8:10:89:62:be:24:aa:
         a8:0c:14:89:bc:fa:ec:25:52:90:2f:4c:2b:d5:62:28:b0:f6:
         45:9d:a7:b0:5c:0b:5a:bd:e1:64:e7:53:82:a2:41:78:82:89:
         2f:01:97:78:3f:2f:bc:49:33:f4:44:17:35:d6:40:12:9d:52:
         eb:0e:98:d7:9b:e7:98:c4:a8:f4:45:22:c1:93:c1:5a:31:a3:
         22:56:31:7c:e3:83:c6:09:a3:7a:4e:62:92:8c:11:0e:c7:32:
         0d:1a:67:34:c6:7f:17:5f:56:90:a8:c3:57:07:27:f7:67:19:
         be:5d:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:31 2025 by rpki-client