This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: kOTTd+e7oYMY4tssRYDM2fKLJoDsv26BXx9mlZvj0Vc= Subject key identifier: 53:72:C1:06:7F:E7:F6:65:25:5E:4D:A3:1C:D7:7E:40:25:19:1D:4B Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B3644DAE93A2C045D1EC285D40B219C1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest number: 17AB Signing time: Fri 19 Dec 2025 11:00:40 +0000 Manifest this update: Fri 19 Dec 2025 11:00:40 +0000 Manifest next update: Sat 20 Dec 2025 11:00:40 +0000 Files and hashes: 1: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (hash: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=) 2: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (hash: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=) 3: C0Doi3jyevr2-pR2IftNN92p59I.roa (hash: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=) 4: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (hash: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=) 5: Gp3o2MiF1oou94m1N0eClpvHzrY.roa (hash: WlZdRex8WZO5KKcEySDhE9mngOOw2FW15QB8WoCkJfU=) 6: IbQ-D2yslx0iHz7liSbbaOCcfXA.roa (hash: Kl5zFWGMECrHwpmHWu5uCTOc6qSUXrcJGW6y65HYm/g=) 7: MDI3PVTTBwcyecs75qaLcWEEgQU.roa (hash: J7xJKQP86jfo8IhCdMIH6NbDyPPPNyVklFSD5qYitM0=) 8: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (hash: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=) 9: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (hash: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=) 10: QxRXVgzFK7-XtUX5rZrtM6MomyU.roa (hash: x/cpWEUkq+gN4A+ymjS6KaS6HF2t6VW/EFTyhN165z0=) 11: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (hash: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=) 12: aQCk6hvPoTmhPc0e5kydy3D8sWU.roa (hash: 6ETMfCfXE4+PmgEWBXrcFMAYtDdlxlq3pPGYTBG/KZ0=) 13: bT1D_GIGnTIb7UhfAkPO6nAxSAM.roa (hash: zt3d+v/4QH55XWn1NDaCM7sBKlqG8C4EgKfte1Y+FyE=) 14: dH7B0DaeyCDV-QwznQB8W2QHPrc.roa (hash: UjgYoN3aRA7tctag/yj4QVec+og5fXBAmkTeQQuaztU=) 15: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (hash: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=) 16: gMolns_uejn9VG4O2M9g9t6tvgo.roa (hash: pPHWNiYrbOjsjJvc3tnPANoOhTs+IAl6nKZxeY0Xyos=) 17: hdTOmW-s8Aq7ZbUJ5FYuRf6D-a8.roa (hash: t8JOCBuigJZ1UrPSe5WnaZHvUrwjsZNK9IFBhrH2Jds=) 18: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (hash: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=) 19: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (hash: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=) 20: mI7DIe-ZWUKxjXm68wpxaummpVQ.roa (hash: 8ILL3a5+iKTvSgugQcyufNykJWsVj3L0HY6IKspIJxE=) 21: mQTwlxrMVeib6W7__4VllTW-6C8.roa (hash: Ous0wtpwiez89Z5w9/QarT0NcGVwIRO+IhvC6Ze0CEc=) 22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: gE1WnJxF5x5KYRflGQX8q2qpr945pgXxIzv7I1fSyt8=) 23: ppW43VM2CosiQ0jXWBLP26MIgec.roa (hash: fkLyzmpdBhfbIOJrEyE+Zx2ZEoyizeyrfXYsByRxcls=) 24: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (hash: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=) 25: rUdLZ9H9NmIsZBannjA8IlEwiOU.roa (hash: UpDDwAK8lbQbhgQsmAizBJjhr50ngPTJj4DgWqUhhss=) 26: uazolYHYZBtijCrhgDu0uI9nLCk.roa (hash: PFT6HKinQsQ7x3TcytDfopexTxqZWQMq9Ui5wk2to2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:da:e9:3a:2c:04:5d:1e:c2:85:d4:0b:21:9c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Dec 19 11:00:40 2025 GMT Not After : Dec 20 11:00:40 2025 GMT Subject: CN=5372c1067fe7f665255e4da31cd77e4025191d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:65:57:b3:8a:c4:68:75:e0:6f:1b:f5:33: 6d:02:19:91:72:87:7b:65:0b:3b:08:a4:ba:c9:21: 86:92:eb:18:54:1f:e2:6f:0a:85:50:35:c5:7d:f5: 74:16:e5:bd:3a:b6:16:70:b4:75:7e:95:25:e3:d3: 6b:b9:88:7f:c6:e8:b0:cc:14:b1:39:2b:94:8a:65: 7f:00:61:5b:06:e6:09:58:cd:4c:ae:a7:06:a2:08: 39:df:e0:a5:f2:da:88:52:84:f0:a9:d6:c0:90:39: b6:98:de:0a:88:d9:07:68:18:84:ea:88:0f:ca:10: bd:d9:cc:b5:13:4b:a6:ea:b3:33:39:95:93:79:c2: 10:18:1f:cf:fa:e5:b6:58:57:99:c4:98:7d:3e:9a: 16:9c:ee:42:2e:de:0a:35:90:7c:56:fe:da:cd:3e: 4f:28:a8:d2:77:e8:1a:03:da:51:21:99:ce:74:a1: e4:04:3c:20:44:30:ea:73:e5:18:11:a7:78:dd:ee: 7a:7a:14:3c:ca:06:de:b9:72:ce:e1:43:39:fb:e0: 9b:62:d9:71:af:e4:ea:e6:c0:93:4d:70:36:8d:2d: 81:8a:ca:be:09:eb:6b:e2:0d:f9:e7:5b:c8:10:b3: 7a:59:44:dd:b4:79:1c:56:1b:2a:29:65:50:52:8f: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:72:C1:06:7F:E7:F6:65:25:5E:4D:A3:1C:D7:7E:40:25:19:1D:4B X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ec:7d:50:5c:13:ab:18:f5:af:7b:05:11:ab:5e:ee:00:42: fe:3d:a3:4e:6d:48:4a:92:55:af:c8:62:b1:34:8f:df:b0:3b: c9:e7:01:5e:54:97:d7:d2:8d:72:e8:8f:20:03:4b:76:f6:1f: 4a:70:c4:f5:5e:e7:de:db:c7:57:1c:15:8d:94:b0:e8:68:65: 63:0d:11:c0:29:64:80:ca:37:37:36:92:1b:00:0f:27:81:13: 7d:85:52:ab:59:10:ec:96:59:60:bd:40:ff:f3:3c:d0:2e:7c: e5:00:a2:ee:90:72:80:fe:89:e8:fe:5b:ac:ba:89:14:cf:d4: dc:0f:26:d9:bc:48:90:86:6b:5d:27:b0:fa:c2:b1:10:80:1f: 3e:b5:21:6e:9c:0b:52:fc:be:ea:da:17:31:83:f4:79:80:e1: 89:b2:07:ad:fc:ea:61:4c:5a:cc:38:19:b9:f0:99:2b:74:05: 23:34:c0:f9:3b:d4:8a:ff:06:ce:39:bf:1f:5f:98:8a:0a:c0: a6:50:09:d2:1e:31:a5:11:e4:60:52:41:87:b6:51:f4:36:77: c3:4b:03:e6:ce:28:5a:4d:13:df:4b:1f:98:fb:ba:92:d4:ed: 15:5d:b9:9a:1c:87:64:85:6e:e6:39:d4:e7:13:61:5b:94:d0: 2d:a1:98:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RNrpOiwEXR7ChdQLIZwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUxMjE5MTEwMDQwWhcNMjUxMjIwMTEwMDQwWjAzMTEwLwYDVQQD Eyg1MzcyYzEwNjdmZTdmNjY1MjU1ZTRkYTMxY2Q3N2U0MDI1MTkxZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TtlV7OKxGh14G8b9TNtAhmRcod7 ZQs7CKS6ySGGkusYVB/ibwqFUDXFffV0FuW9OrYWcLR1fpUl49NruYh/xuiwzBSx OSuUimV/AGFbBuYJWM1MrqcGogg53+Cl8tqIUoTwqdbAkDm2mN4KiNkHaBiE6ogP yhC92cy1E0um6rMzOZWTecIQGB/P+uW2WFeZxJh9PpoWnO5CLt4KNZB8Vv7azT5P KKjSd+gaA9pRIZnOdKHkBDwgRDDqc+UYEad43e56ehQ8ygbeuXLO4UM5++CbYtlx r+Tq5sCTTXA2jS2Bisq+Cetr4g3551vIELN6WUTdtHkcVhsqKWVQUo/8pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNywQZ/5/ZlJV5NoxzXfkAlGR1LMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATex9UFwT qxj1r3sFEate7gBC/j2jTm1ISpJVr8hisTSP37A7yecBXlSX19KNcuiPIANLdvYf SnDE9V7n3tvHVxwVjZSw6GhlYw0RwClkgMo3NzaSGwAPJ4ETfYVSq1kQ7JZZYL1A //M80C585QCi7pBygP6J6P5brLqJFM/U3A8m2bxIkIZrXSew+sKxEIAfPrUhbpwL Uvy+6toXMYP0eYDhibIHrfzqYUxazDgZufCZK3QFIzTA+TvUiv8Gzjm/H1+YigrA plAJ0h4xpRHkYFJBh7ZR9DZ3w0sD5s4oWk0T30sfmPu6ktTtFV25mhyHZIVu5jnU 5xNhW5TQLaGYiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:54:52 2025 by rpki-client