This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json) Hash identifier: xpj5FgJISZBEhESjifHYMFYcTYeD0QrC3K/M05JlDZ8= Subject key identifier: 68:A4:37:B0:4D:DA:DA:99:64:70:4D:99:2A:60:46:60:9E:52:71:1D Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Certificate serial: 019BE03726C030158E1CCC2CFF5CE81C0F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft Manifest number: 11A8 Signing time: Wed 21 Jan 2026 11:01:09 +0000 Manifest this update: Wed 21 Jan 2026 11:01:09 +0000 Manifest next update: Thu 22 Jan 2026 11:01:09 +0000 Files and hashes: 1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=) 2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=) 3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: URQKFtY8sAUo/BXE4+iyIQq2yEKg4BDPVJtPqpF9jbY=) 4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:37:26:c0:30:15:8e:1c:cc:2c:ff:5c:e8:1c:0f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7 Validity Not Before: Jan 21 11:01:09 2026 GMT Not After : Jan 22 11:01:09 2026 GMT Subject: CN=68a437b04ddada9964704d992a6046609e52711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:e0:5d:1a:5b:74:c8:88:7c:81:0c:96:3f: 89:37:20:c5:46:06:58:34:31:1a:e0:fc:ab:8e:8d: b7:49:a8:a2:d7:d8:9f:35:9a:e1:74:f9:ca:fd:ca: c3:97:3f:34:0d:52:24:65:76:18:34:e5:07:a4:cd: 5e:2c:65:aa:8e:89:e4:9d:bf:76:25:1e:8f:62:42: ad:73:9c:89:16:99:ad:2c:fd:d0:91:2c:50:e8:d8: 6c:82:b3:84:42:45:f7:de:38:82:60:9d:51:f2:f1: fb:1c:7e:5d:e4:04:a0:c1:1f:62:a8:7a:33:86:63: 8b:3c:02:ac:2b:45:83:b3:db:f4:40:e2:28:ee:b8: c6:68:12:f3:d7:45:32:b1:31:43:7a:9e:a2:b6:5f: a7:1c:24:7b:ee:6d:e8:b1:90:43:49:59:74:ca:ca: a6:54:d5:5b:84:dc:89:c6:9c:95:cf:63:ea:a7:6c: a7:6d:81:0f:bf:99:ac:a4:7c:94:e5:a0:a9:92:8a: c3:55:da:d3:8a:fb:de:ef:63:7f:51:09:d7:cf:b7: ce:dd:5b:42:e7:5f:46:4f:2f:17:97:c0:7f:24:77: 77:d6:aa:cf:4f:c7:a1:46:1d:0c:51:c7:08:26:a6: 87:98:3e:e5:39:30:5a:5a:4b:8e:cf:66:a9:db:79: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A4:37:B0:4D:DA:DA:99:64:70:4D:99:2A:60:46:60:9E:52:71:1D X509v3 Authority Key Identifier: keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:eb:33:ea:0f:a8:62:a0:65:30:ee:b1:bc:64:e9:ec:a6:16: 50:c8:d3:79:21:52:73:42:2b:f5:7c:62:9b:b1:ae:ec:49:55: 3f:e7:ff:d0:bc:ec:27:24:5b:e9:fd:5b:ac:84:41:5f:46:4d: d4:03:65:95:92:a8:1a:b7:cd:08:b3:b0:96:1b:93:a9:99:8a: bf:43:9b:98:d8:3f:0b:8c:4f:fa:07:dd:32:7f:e9:06:b5:ee: 87:e2:1b:63:04:7d:71:a2:7b:44:6d:dc:5b:d4:0a:c6:e0:69: cf:c7:de:3d:2b:9f:a8:6a:0e:78:37:3d:96:f3:ac:fb:bd:91: f8:a0:62:5a:8c:b3:1a:9c:33:e1:23:0b:df:af:08:87:22:b6: 87:5d:e5:49:52:a8:05:00:d0:13:0b:cd:a6:e2:05:4a:fd:ce: 86:37:94:6e:a1:37:d3:36:21:14:6c:3f:83:70:32:bd:20:9b: 78:9a:cb:f3:bc:be:56:a9:18:20:38:ba:f0:02:1c:b1:4e:87: ed:d9:5b:ac:92:ae:7a:ae:ce:ce:bc:60:68:ed:22:74:1b:41: 9b:e0:f8:dc:4a:ab:35:0e:f7:66:45:2a:07:10:77:0b:8b:c9: 7b:08:ec:53:69:9c:b4:ec:e7:bb:4f:6b:89:95:5a:14:0d:d9: c6:f6:20:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNybAMBWOHMws/1zoHA+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4 Mjc2YjcwHhcNMjYwMTIxMTEwMTA5WhcNMjYwMTIyMTEwMTA5WjAzMTEwLwYDVQQD Eyg2OGE0MzdiMDRkZGFkYTk5NjQ3MDRkOTkyYTYwNDY2MDllNTI3MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSDgXRpbdMiIfIEMlj+JNyDFRgZY NDEa4Pyrjo23Saii19ifNZrhdPnK/crDlz80DVIkZXYYNOUHpM1eLGWqjonknb92 JR6PYkKtc5yJFpmtLP3QkSxQ6NhsgrOEQkX33jiCYJ1R8vH7HH5d5ASgwR9iqHoz hmOLPAKsK0WDs9v0QOIo7rjGaBLz10UysTFDep6itl+nHCR77m3osZBDSVl0ysqm VNVbhNyJxpyVz2Pqp2ynbYEPv5mspHyU5aCpkorDVdrTivve72N/UQnXz7fO3VtC 519GTy8Xl8B/JHd31qrPT8ehRh0MUccIJqaHmD7lOTBaWkuOz2ap23m6hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGikN7BN2tqZZHBNmSpgRmCeUnEdMB8GA1UdIwQY MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPusz6g+o YqBlMO6xvGTp7KYWUMjTeSFSc0Ir9Xxim7Gu7ElVP+f/0LzsJyRb6f1brIRBX0ZN 1ANllZKoGrfNCLOwlhuTqZmKv0ObmNg/C4xP+gfdMn/pBrXuh+IbYwR9caJ7RG3c W9QKxuBpz8fePSufqGoOeDc9lvOs+72R+KBiWoyzGpwz4SML368IhyK2h13lSVKo BQDQEwvNpuIFSv3OhjeUbqE30zYhFGw/g3AyvSCbeJrL87y+VqkYIDi68AIcsU6H 7dlbrJKueq7OzrxgaO0idBtBm+D43EqrNQ73ZkUqBxB3C4vJewjsU2mctOznu09r iZVaFA3ZxvYgCQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:15 2026 by rpki-client