This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: OT0ps9Keq+F+z2/Oxn7sYmSCF5gvo1GBmheIOxM/lNQ= Subject key identifier: 74:3E:CD:34:49:12:2A:89:8C:48:69:37:7A:3E:CD:CF:44:13:EC:BD Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B3456579757EDE632823AB3A26F379D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest number: 17AA Signing time: Fri 19 Dec 2025 02:00:32 +0000 Manifest this update: Fri 19 Dec 2025 02:00:32 +0000 Manifest next update: Sat 20 Dec 2025 02:00:32 +0000 Files and hashes: 1: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (hash: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=) 2: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (hash: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=) 3: C0Doi3jyevr2-pR2IftNN92p59I.roa (hash: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=) 4: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (hash: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=) 5: Gp3o2MiF1oou94m1N0eClpvHzrY.roa (hash: WlZdRex8WZO5KKcEySDhE9mngOOw2FW15QB8WoCkJfU=) 6: IbQ-D2yslx0iHz7liSbbaOCcfXA.roa (hash: Kl5zFWGMECrHwpmHWu5uCTOc6qSUXrcJGW6y65HYm/g=) 7: MDI3PVTTBwcyecs75qaLcWEEgQU.roa (hash: J7xJKQP86jfo8IhCdMIH6NbDyPPPNyVklFSD5qYitM0=) 8: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (hash: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=) 9: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (hash: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=) 10: QxRXVgzFK7-XtUX5rZrtM6MomyU.roa (hash: x/cpWEUkq+gN4A+ymjS6KaS6HF2t6VW/EFTyhN165z0=) 11: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (hash: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=) 12: aQCk6hvPoTmhPc0e5kydy3D8sWU.roa (hash: 6ETMfCfXE4+PmgEWBXrcFMAYtDdlxlq3pPGYTBG/KZ0=) 13: bT1D_GIGnTIb7UhfAkPO6nAxSAM.roa (hash: zt3d+v/4QH55XWn1NDaCM7sBKlqG8C4EgKfte1Y+FyE=) 14: dH7B0DaeyCDV-QwznQB8W2QHPrc.roa (hash: UjgYoN3aRA7tctag/yj4QVec+og5fXBAmkTeQQuaztU=) 15: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (hash: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=) 16: gMolns_uejn9VG4O2M9g9t6tvgo.roa (hash: pPHWNiYrbOjsjJvc3tnPANoOhTs+IAl6nKZxeY0Xyos=) 17: hdTOmW-s8Aq7ZbUJ5FYuRf6D-a8.roa (hash: t8JOCBuigJZ1UrPSe5WnaZHvUrwjsZNK9IFBhrH2Jds=) 18: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (hash: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=) 19: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (hash: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=) 20: mI7DIe-ZWUKxjXm68wpxaummpVQ.roa (hash: 8ILL3a5+iKTvSgugQcyufNykJWsVj3L0HY6IKspIJxE=) 21: mQTwlxrMVeib6W7__4VllTW-6C8.roa (hash: Ous0wtpwiez89Z5w9/QarT0NcGVwIRO+IhvC6Ze0CEc=) 22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: I2c07zjKT70D8/z8gUGsLSe5jTpQobC8NAeCD9/ubHg=) 23: ppW43VM2CosiQ0jXWBLP26MIgec.roa (hash: fkLyzmpdBhfbIOJrEyE+Zx2ZEoyizeyrfXYsByRxcls=) 24: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (hash: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=) 25: rUdLZ9H9NmIsZBannjA8IlEwiOU.roa (hash: UpDDwAK8lbQbhgQsmAizBJjhr50ngPTJj4DgWqUhhss=) 26: uazolYHYZBtijCrhgDu0uI9nLCk.roa (hash: PFT6HKinQsQ7x3TcytDfopexTxqZWQMq9Ui5wk2to2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:57:97:57:ed:e6:32:82:3a:b3:a2:6f:37:9d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Dec 19 02:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=743ecd3449122a898c4869377a3ecdcf4413ecbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:6a:dd:49:1e:25:a3:8e:d7:5e:3e:21:c5: e5:cf:76:e8:d7:a4:b4:c2:b9:6f:3d:a1:fa:5f:0c: ed:c5:5e:5c:45:55:31:bd:88:b8:c7:a9:70:c9:84: 2e:ff:27:5c:7e:29:60:83:dd:aa:27:cc:53:79:59: 0b:c6:fb:2b:2b:19:fa:1d:2f:6c:86:30:47:8a:50: d1:8e:6a:e3:60:05:7d:30:9d:b8:35:f6:87:e1:31: bf:7a:41:51:7a:f5:33:a9:a6:3d:19:90:d4:e4:b0: 06:b9:8e:d4:60:f1:3c:c9:2b:ce:a5:8f:ff:77:97: 01:95:a5:33:af:68:0b:e6:d2:92:fc:4a:c5:f1:f4: 13:46:5a:75:aa:2e:08:f7:26:4b:c9:ff:10:81:a7: 69:26:94:d0:40:67:91:ad:9a:5f:8d:f3:8f:8e:91: 94:c8:9e:68:0b:93:f6:aa:71:5a:19:04:c5:c1:0d: 4c:08:bd:50:a8:c9:b4:1e:5c:28:fd:01:69:74:33: 59:8c:b0:6d:7d:e1:d4:bc:30:24:61:d3:c9:20:f8: 34:65:12:8c:87:a1:ab:b5:52:e8:63:af:6a:0d:1d: 52:75:7b:ed:66:d5:4d:14:90:6b:1d:70:d6:35:f9: 0b:b2:93:3a:8a:59:8a:4f:0c:9d:f8:27:fc:b5:d8: 69:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3E:CD:34:49:12:2A:89:8C:48:69:37:7A:3E:CD:CF:44:13:EC:BD X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:55:7a:5b:cf:00:71:e3:76:a7:82:1d:15:27:58:2f:46:f8: 06:8b:ef:60:6b:0e:1b:ba:51:43:94:a7:22:a1:49:d9:cc:30: c5:d8:d4:f0:65:98:52:f2:91:02:88:29:7e:9f:4c:af:93:eb: 7e:59:65:d9:dd:73:13:6e:2c:e8:64:c1:66:60:b3:52:02:24: 0d:0a:2d:a3:a6:89:5c:77:81:23:0b:82:13:4b:9f:a5:50:ce: 38:ee:ab:94:72:33:1c:6b:7e:93:41:92:1a:70:3a:7c:57:0a: 55:4c:87:69:c7:8e:47:ee:f4:f8:47:2b:d0:ba:43:8b:f7:50: f8:a9:f5:75:cb:d1:6c:8f:a3:20:4a:fd:52:c0:80:38:b1:f8: 44:33:c2:17:b2:b8:90:06:31:07:7c:e4:7d:52:55:5a:ae:a1: 9c:50:b3:c4:d8:9f:aa:ef:fc:88:8c:10:fa:4b:1e:77:d0:ae: dc:5e:d2:27:cb:62:08:37:67:56:e7:95:56:df:9f:06:67:9f: c4:6c:b0:e3:77:7c:77:ed:5b:0b:8e:32:ef:17:fb:9d:91:70: 9f:5b:34:66:8f:8e:89:33:03:f4:c6:e7:3a:30:e8:c3:0e:15: ec:b2:fb:b6:8e:78:c9:c7:c8:d6:a4:12:64:0c:5d:5a:49:05: 67:20:23:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VleXV+3mMoI6s6JvN519MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUxMjE5MDIwMDMyWhcNMjUxMjIwMDIwMDMyWjAzMTEwLwYDVQQD Eyg3NDNlY2QzNDQ5MTIyYTg5OGM0ODY5Mzc3YTNlY2RjZjQ0MTNlY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD1q3UkeJaOO114+IcXlz3bo16S0 wrlvPaH6XwztxV5cRVUxvYi4x6lwyYQu/ydcfilgg92qJ8xTeVkLxvsrKxn6HS9s hjBHilDRjmrjYAV9MJ24NfaH4TG/ekFRevUzqaY9GZDU5LAGuY7UYPE8ySvOpY// d5cBlaUzr2gL5tKS/ErF8fQTRlp1qi4I9yZLyf8QgadpJpTQQGeRrZpfjfOPjpGU yJ5oC5P2qnFaGQTFwQ1MCL1QqMm0Hlwo/QFpdDNZjLBtfeHUvDAkYdPJIPg0ZRKM h6GrtVLoY69qDR1SdXvtZtVNFJBrHXDWNfkLspM6ilmKTwyd+Cf8tdhpPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ+zTRJEiqJjEhpN3o+zc9EE+y9MB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFV6W88A ceN2p4IdFSdYL0b4BovvYGsOG7pRQ5SnIqFJ2cwwxdjU8GWYUvKRAogpfp9Mr5Pr flll2d1zE24s6GTBZmCzUgIkDQoto6aJXHeBIwuCE0ufpVDOOO6rlHIzHGt+k0GS GnA6fFcKVUyHaceOR+70+Ecr0LpDi/dQ+Kn1dcvRbI+jIEr9UsCAOLH4RDPCF7K4 kAYxB3zkfVJVWq6hnFCzxNifqu/8iIwQ+ksed9Cu3F7SJ8tiCDdnVueVVt+fBmef xGyw43d8d+1bC44y7xf7nZFwn1s0Zo+OiTMD9MbnOjDoww4V7LL7to54ycfI1qQS ZAxdWkkFZyAj0A== -----END CERTIFICATE-----Generated at Fri Dec 19 12:03:43 2025 by rpki-client