This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json) Hash identifier: 8xkOV/+Jz1h2CKbqTSZEtub1iaoIhmRC2byrldrmb7w= Subject key identifier: 6F:F1:D6:11:9C:8C:81:88:5A:96:5B:95:AA:FE:42:EC:2E:61:A3:93 Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f Certificate serial: 019AF31C38693CDD5F1171DF67DDABAE49B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:44 +0000 Manifest this update: Sat 06 Dec 2025 10:01:44 +0000 Manifest next update: Sun 07 Dec 2025 10:01:44 +0000 Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: K9Ah5M30X0Y6hXxgLYTRb43hAw9uoPNRvfamR+knfzI=) 2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:38:69:3c:dd:5f:11:71:df:67:dd:ab:ae:49:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f Validity Not Before: Dec 6 10:01:44 2025 GMT Not After : Dec 7 10:01:44 2025 GMT Subject: CN=6ff1d6119c8c81885a965b95aafe42ec2e61a393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:6c:d5:1c:ac:5a:6a:41:e5:01:d3:ca:be: 02:0d:3a:88:87:5e:47:c3:4f:7e:e5:b7:6e:d3:9f: 1f:fe:a7:21:ed:fe:45:6d:3a:c8:bf:76:f0:f6:2e: 27:3b:8b:b4:9f:9a:c1:38:74:b6:14:77:ed:9f:ca: e8:43:52:b4:03:67:36:47:6d:49:0f:71:37:a3:2b: 62:8e:27:ac:72:eb:c0:7e:14:2f:16:17:f1:d9:72: b0:bc:60:c8:1b:39:82:9f:9b:58:6b:5f:2e:75:d5: ec:6b:92:a8:1f:78:27:93:59:a7:2e:eb:76:4f:6c: 32:36:3e:65:f1:bf:bb:e6:08:92:e7:92:5b:c6:06: ac:5c:0c:91:8d:0d:1a:3c:ca:1e:28:48:12:63:2c: 23:e8:56:d1:01:98:7a:ab:b1:ff:4c:f7:a9:55:60: 52:5f:46:e3:45:25:cf:7e:a1:00:be:30:e4:48:f6: 84:2c:47:6c:8f:08:00:87:0a:18:ee:00:ca:07:20: 6f:96:50:f0:2f:dc:b4:a5:94:64:39:ba:0f:4b:94: 2c:9a:44:4b:d0:ab:5b:38:25:7f:ca:3b:fb:5c:98: ca:e3:4f:39:c6:0f:db:bc:a9:a1:13:6b:cd:2d:12: 5b:27:2a:35:df:5a:9b:c4:c6:b9:80:c1:2c:7a:af: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:D6:11:9C:8C:81:88:5A:96:5B:95:AA:FE:42:EC:2E:61:A3:93 X509v3 Authority Key Identifier: keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d1:69:ab:e9:dc:bf:13:71:e4:ff:ee:a2:71:4a:58:93:d5: 94:a6:2b:01:c3:a8:81:2a:f4:21:b9:c7:44:d5:2f:8c:d3:3b: ed:35:c0:f3:53:48:35:fa:a8:12:80:b7:72:ab:ad:e1:58:ad: f1:46:88:20:87:f3:6d:ea:ef:09:e3:ad:da:94:69:5b:d1:c5: eb:de:6d:be:67:0f:58:e8:d4:a8:64:22:bf:cd:86:95:7c:c2: 20:23:0e:0f:fa:fe:88:19:51:96:77:df:0e:67:34:e9:ae:dd: 45:8d:64:d0:5b:33:e9:5a:1f:2a:ff:87:c2:8b:36:b3:3b:24: 4c:f2:56:1a:91:31:e3:36:3e:7c:3d:83:fc:80:63:d5:1d:46: b4:12:15:8d:1b:aa:13:75:ba:b7:16:21:58:3e:56:6b:e2:cd: 9c:e4:ef:d9:68:cc:92:63:e9:b1:4a:08:86:49:42:4f:e9:27: f8:23:96:9d:04:b6:3e:48:48:e8:c3:a7:a6:ac:f5:55:be:26: de:fa:ba:7c:25:e8:de:b0:24:ef:f7:87:d2:3d:40:ca:0f:96: 14:8a:e9:ab:6e:e4:0e:6d:b5:45:a1:a7:17:4d:89:89:0a:c1: 09:23:07:eb:69:d7:b3:fd:31:19:b3:ba:0d:43:5a:81:df:93: 3d:7e:0f:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDhpPN1fEXHfZ92rrkm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmQ5YTk1YmFjZTE5Nzg1YzQwNjQ3NjYzZjMxZDkwNTYy NjFjMmYwHhcNMjUxMjA2MTAwMTQ0WhcNMjUxMjA3MTAwMTQ0WjAzMTEwLwYDVQQD Eyg2ZmYxZDYxMTljOGM4MTg4NWE5NjViOTVhYWZlNDJlYzJlNjFhMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRxs1RysWmpB5QHTyr4CDTqIh15H w09+5bdu058f/qch7f5FbTrIv3bw9i4nO4u0n5rBOHS2FHftn8roQ1K0A2c2R21J D3E3oytijiescuvAfhQvFhfx2XKwvGDIGzmCn5tYa18uddXsa5KoH3gnk1mnLut2 T2wyNj5l8b+75giS55JbxgasXAyRjQ0aPMoeKEgSYywj6FbRAZh6q7H/TPepVWBS X0bjRSXPfqEAvjDkSPaELEdsjwgAhwoY7gDKByBvllDwL9y0pZRkOboPS5QsmkRL 0KtbOCV/yjv7XJjK4085xg/bvKmhE2vNLRJbJyo131qbxMa5gMEseq9Y8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/x1hGcjIGIWpZblar+QuwuYaOTMB8GA1UdIwQY MBaAFDVtmpW6zhl4XEBkdmPzHZBWJhwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMt NGVmZGU2ZWIzMmQ0LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMtNGVmZGU2ZWIzMmQ0 LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftFpq+nc vxNx5P/uonFKWJPVlKYrAcOogSr0IbnHRNUvjNM77TXA81NINfqoEoC3cqut4Vit 8UaIIIfzbervCeOt2pRpW9HF695tvmcPWOjUqGQiv82GlXzCICMOD/r+iBlRlnff Dmc06a7dRY1k0Fsz6VofKv+Hwos2szskTPJWGpEx4zY+fD2D/IBj1R1GtBIVjRuq E3W6txYhWD5Wa+LNnOTv2WjMkmPpsUoIhklCT+kn+COWnQS2PkhI6MOnpqz1Vb4m 3vq6fCXo3rAk7/eH0j1Ayg+WFIrpq27kDm21RaGnF02JiQrBCSMH62nXs/0xGbO6 DUNagd+TPX4P+w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:37 2025 by rpki-client