This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json) Hash identifier: t1nDHult79MEHhrhv7qBXrHY9UWCJJsKhcPAWyUmOuM= Subject key identifier: 6F:40:72:0E:C7:C9:0F:5E:22:F8:62:E3:5D:70:F9:9F:5E:25:3D:16 Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Certificate serial: 019BF57571719E72DBCA0B516A5DE959840C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft Manifest number: 11B3 Signing time: Sun 25 Jan 2026 14:01:13 +0000 Manifest this update: Sun 25 Jan 2026 14:01:13 +0000 Manifest next update: Mon 26 Jan 2026 14:01:13 +0000 Files and hashes: 1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=) 2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=) 3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: z6UWx4mLTsQMk3BoKMPwcMZAZW4WdBiwpE2MbKdSFu0=) 4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:71:71:9e:72:db:ca:0b:51:6a:5d:e9:59:84:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Validity Not Before: Jan 25 14:01:13 2026 GMT Not After : Jan 26 14:01:13 2026 GMT Subject: CN=6f40720ec7c90f5e22f862e35d70f99f5e253d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:f5:e5:86:18:ff:19:d7:06:72:8c:02:03: da:dc:c5:c1:ac:1f:41:f8:dd:e9:94:80:9f:ae:2d: 68:63:2e:63:a8:c3:8c:39:42:da:74:1d:c8:e9:3d: de:71:33:39:14:44:43:9c:ae:27:a7:a4:fa:a9:d9: 9f:54:6f:48:33:83:b9:38:5e:db:25:74:71:72:44: 35:c2:5d:58:a6:51:ad:0e:29:1b:90:bc:32:76:e1: 55:8f:67:48:ab:18:03:61:54:e1:41:b3:83:62:c2: 07:14:18:bc:a6:50:11:84:61:d0:d9:76:42:11:9a: be:61:98:a8:73:70:c2:57:c9:38:8b:8e:ff:63:b8: 65:60:22:82:e2:c0:58:29:34:38:fa:69:25:fe:7e: db:1d:6d:d2:a3:1f:db:62:af:89:e5:36:a1:ac:06: 6c:69:6c:02:6b:f5:f4:65:1d:76:d3:07:ad:c8:16: d0:76:64:65:1b:6c:67:b0:d7:42:e3:aa:39:2a:b4: 1f:7f:fb:19:7d:d6:27:9f:7e:1d:88:6c:fd:74:2e: c9:4d:07:f6:47:f9:2a:d5:1b:29:10:02:65:74:79: 02:0e:7e:51:10:6d:2e:cb:2c:46:ae:11:99:19:6b: 42:64:72:ff:c1:ca:e4:bc:b2:9b:65:90:a0:c2:26: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:40:72:0E:C7:C9:0F:5E:22:F8:62:E3:5D:70:F9:9F:5E:25:3D:16 X509v3 Authority Key Identifier: keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:96:8c:e1:ef:01:91:a2:5e:7e:8c:18:03:a0:c5:93:cd:4e: 7c:4f:bb:24:60:f9:bb:46:3a:b4:18:82:be:f4:28:d3:0e:34: 03:34:a9:50:a0:fb:c5:f9:19:c8:de:4a:e7:8f:51:3a:00:44: 42:ff:3d:76:4a:84:d3:f0:76:81:49:79:61:f0:a8:01:c9:d3: 81:55:84:ec:99:57:02:d3:a0:34:2b:f5:50:33:dd:fd:14:a1: 48:63:d5:4e:9f:50:d8:62:80:af:d1:6c:85:01:6d:a7:a3:d5: 10:a9:8d:29:85:be:8b:ca:9b:b0:95:b3:f5:4f:7a:be:ea:92: 77:97:17:08:1e:36:48:89:a3:82:ff:e8:1b:4d:fb:91:e4:aa: 83:3f:1d:ee:d4:79:7a:d1:82:d2:c6:5d:26:65:75:4e:9b:6d: 04:96:f4:6d:91:9f:da:7a:2f:a1:81:d3:22:1b:83:2a:8d:84: 10:0f:8b:c8:83:3f:6d:28:c3:16:15:d8:69:1c:e1:23:bb:41: 88:2b:85:fe:5d:32:1c:2f:eb:91:c6:32:ba:f8:0a:88:28:8b: d7:75:a2:e1:82:13:b5:59:e5:20:37:5e:04:95:78:87:fd:a8: 3b:fe:f7:cb:2b:21:3a:0d:24:17:09:d2:41:db:a0:d7:4e:e9: 08:be:b0:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXFxnnLbygtRal3pWYQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4 Mjc2YjcwHhcNMjYwMTI1MTQwMTEzWhcNMjYwMTI2MTQwMTEzWjAzMTEwLwYDVQQD Eyg2ZjQwNzIwZWM3YzkwZjVlMjJmODYyZTM1ZDcwZjk5ZjVlMjUzZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/P15YYY/xnXBnKMAgPa3MXBrB9B +N3plICfri1oYy5jqMOMOULadB3I6T3ecTM5FERDnK4np6T6qdmfVG9IM4O5OF7b JXRxckQ1wl1YplGtDikbkLwyduFVj2dIqxgDYVThQbODYsIHFBi8plARhGHQ2XZC EZq+YZioc3DCV8k4i47/Y7hlYCKC4sBYKTQ4+mkl/n7bHW3Sox/bYq+J5TahrAZs aWwCa/X0ZR120wetyBbQdmRlG2xnsNdC46o5KrQff/sZfdYnn34diGz9dC7JTQf2 R/kq1RspEAJldHkCDn5REG0uyyxGrhGZGWtCZHL/wcrkvLKbZZCgwiYbgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9Acg7HyQ9eIvhi411w+Z9eJT0WMB8GA1UdIwQY MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5aM4e8B kaJefowYA6DFk81OfE+7JGD5u0Y6tBiCvvQo0w40AzSpUKD7xfkZyN5K549ROgBE Qv89dkqE0/B2gUl5YfCoAcnTgVWE7JlXAtOgNCv1UDPd/RShSGPVTp9Q2GKAr9Fs hQFtp6PVEKmNKYW+i8qbsJWz9U96vuqSd5cXCB42SImjgv/oG037keSqgz8d7tR5 etGC0sZdJmV1TpttBJb0bZGf2novoYHTIhuDKo2EEA+LyIM/bSjDFhXYaRzhI7tB iCuF/l0yHC/rkcYyuvgKiCiL13Wi4YITtVnlIDdeBJV4h/2oO/73yyshOg0kFwnS Qdug107pCL6wLw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:02 2026 by rpki-client