This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          8DmcRsBk8/UzRM0EIu360yLS4yC752Aei0A9aLFjFBk=
Subject key identifier:   A2:04:4A:2D:04:F4:C6:3C:87:C4:CE:60:49:23:12:AF:16:F5:70:9C
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       019BF76377775360315B6973C84194A2ECD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          11B4
Signing time:             Sun 25 Jan 2026 23:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:49 +0000
Files and hashes:         1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
                          2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
                          3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: /hf8n/3ofTywX676S75sxQg7m/TJK8bcMwZnnuWge9I=)
                          4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:77:77:53:60:31:5b:69:73:c8:41:94:a2:ec:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Jan 25 23:00:49 2026 GMT
            Not After : Jan 26 23:00:49 2026 GMT
        Subject: CN=a2044a2d04f4c63c87c4ce60492312af16f5709c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:32:7e:2b:27:1b:41:d7:f6:ee:35:13:f2:
                    3c:ce:b2:83:ce:53:a1:eb:d0:e2:6a:9e:ed:6f:b5:
                    63:21:cf:b9:3c:8a:e8:43:c1:c0:62:f2:32:0a:26:
                    04:c8:a2:13:0b:d9:17:bb:ef:3b:62:77:a8:f7:70:
                    bb:79:b2:e8:95:4c:f9:78:e5:f8:88:e4:55:75:c7:
                    4b:3b:0d:01:e2:58:3f:1b:b3:ed:46:f2:9a:3d:fd:
                    5a:4e:4d:f4:11:68:0d:58:df:02:b2:6f:d0:95:83:
                    e4:6a:24:9f:f0:bb:cd:0e:a3:a6:bc:7c:82:f9:dc:
                    8d:7a:c1:1e:95:71:50:54:2b:4c:15:39:d4:36:c1:
                    6a:21:a3:3d:a7:e2:45:da:de:83:e5:b7:d4:c0:f7:
                    49:de:a6:b7:64:c2:df:3e:23:1a:6c:3d:fe:34:d8:
                    a9:0a:11:23:3d:16:52:2b:ed:d9:68:23:ff:72:cb:
                    0b:12:51:a8:7c:ab:e1:5c:8f:f0:86:bc:91:8f:dd:
                    71:6e:ba:03:98:0d:c9:49:72:9e:a8:c9:88:d4:8a:
                    d7:8a:61:cb:c1:35:65:c9:06:a2:c1:ae:66:0c:9a:
                    e0:1b:41:f0:89:71:a0:10:92:d8:f7:80:90:16:31:
                    24:a8:59:3e:65:c7:e6:76:e4:fc:9d:50:e6:45:b8:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:4A:2D:04:F4:C6:3C:87:C4:CE:60:49:23:12:AF:16:F5:70:9C
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a6:4d:0b:ca:0d:11:8f:5f:62:24:3c:67:bf:b7:0d:16:8f:
         4e:8c:ed:7d:54:b7:20:26:8e:57:93:49:3e:dc:2e:49:1c:48:
         66:f2:97:0c:1f:ff:c9:a5:9c:ac:4b:bb:8e:74:ef:7e:91:18:
         ee:f1:9e:f5:10:c2:eb:cc:7a:c6:b5:5d:96:20:d6:8a:70:5a:
         10:c8:86:92:9d:30:7a:4f:8f:ec:fa:46:f6:b2:0e:d0:0e:f5:
         81:a4:22:5b:d8:ba:b4:60:41:fc:49:97:0b:66:04:52:6e:f8:
         5d:75:e5:f3:9c:0c:bc:76:b8:51:67:05:c2:b2:f9:fb:8a:8e:
         fa:98:83:4b:54:ea:94:ac:29:69:08:38:01:b9:21:d4:10:48:
         d2:38:2a:a0:ec:43:d6:04:52:1d:95:fd:35:46:1b:72:83:e9:
         07:57:83:ee:c8:f1:25:9a:2a:17:b0:96:63:aa:e3:24:e0:22:
         4e:24:9c:39:26:49:35:de:55:86:b5:b5:4c:88:c4:01:c9:0c:
         8d:f2:aa:ed:43:56:c0:69:95:52:17:3d:ce:c0:e7:98:0a:c8:
         87:4a:a2:2b:6a:f6:88:19:b2:ca:29:82:75:77:96:88:68:69:
         07:b3:e1:cf:01:c8:34:11:e9:2a:65:05:cd:11:1e:5a:8f:ba:
         24:90:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:09:03 2026 by rpki-client