This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json) Hash identifier: oSlcTnoI61sDPrZOi4Oc0DkU6B7QrBkSbEB5pL88lYw= Subject key identifier: 69:70:8A:75:E6:12:56:3A:55:3C:42:3B:B4:CC:BE:D9:34:E4:D3:DC Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f Certificate serial: 019BAB6EA8F079F97C007BEB985B3CD46E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft Manifest number: 17C0 Signing time: Sun 11 Jan 2026 05:01:54 +0000 Manifest this update: Sun 11 Jan 2026 05:01:54 +0000 Manifest next update: Mon 12 Jan 2026 05:01:54 +0000 Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=) 2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: 5kPSkKA5fjKqR4gDjomrFkLX0skyXuCy7WAuYnq5JXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:6e:a8:f0:79:f9:7c:00:7b:eb:98:5b:3c:d4:6e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f Validity Not Before: Jan 11 05:01:54 2026 GMT Not After : Jan 12 05:01:54 2026 GMT Subject: CN=69708a75e612563a553c423bb4ccbed934e4d3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:f1:e1:ec:f1:f2:90:46:c6:33:04:ee:63: c8:7a:40:fc:24:08:52:01:ce:3c:65:09:34:ea:b9: 91:ab:d6:c6:43:7a:45:2c:b2:2f:7f:13:41:8a:8e: be:b4:a1:09:b1:cb:0d:bb:f4:23:97:4c:cc:01:18: f6:f3:b9:b6:92:c5:75:dc:39:65:57:ed:19:8f:b2: 32:7f:18:df:f0:a5:00:b9:68:ab:de:d8:a1:4d:34: 9b:8b:c2:ed:05:a7:3d:0b:38:ae:27:29:80:37:ea: ec:93:92:11:62:32:3f:1a:a1:4b:58:cc:7a:50:3d: 12:bd:88:23:c9:9e:9f:46:f8:d4:af:dc:7a:a6:98: e3:b7:1c:47:c3:ab:a0:ee:06:c2:14:bd:f7:3b:ab: 2c:cd:14:0e:af:cf:d9:69:1d:43:df:01:32:d0:55: 51:f8:85:e1:34:cf:ae:1e:6c:c1:2c:f8:74:bb:da: f4:28:1c:f0:d1:f8:2a:04:da:a4:03:49:37:ad:1d: 72:f2:5a:a8:b4:89:d4:82:5b:ba:27:4f:71:8b:da: 0b:63:ca:09:63:41:03:2a:69:da:eb:04:3c:41:bd: be:fc:57:c7:4f:22:d3:21:18:f1:e4:db:fe:f3:4b: c8:b2:2a:41:46:5a:22:bf:66:3b:88:87:36:8a:cb: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:70:8A:75:E6:12:56:3A:55:3C:42:3B:B4:CC:BE:D9:34:E4:D3:DC X509v3 Authority Key Identifier: keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:db:67:29:5f:8c:06:55:97:46:b8:86:d5:6a:4b:c9:81:aa: ad:7c:e0:22:09:34:52:82:1d:a0:5b:bc:17:37:1d:30:52:23: 38:12:4f:ae:02:3e:88:4c:2b:ed:81:c5:b8:77:81:65:c5:3d: 37:c4:2b:25:e2:e1:85:19:95:c6:8f:ec:27:52:43:85:35:5c: ab:e9:df:35:16:ba:ec:45:e2:15:e7:a9:b0:f1:b2:ce:cf:e3: 7e:af:d9:f1:19:54:e2:d4:19:25:4b:be:f9:dc:d3:54:12:12: 85:e3:d7:84:67:8a:96:72:0f:5d:f2:ca:ae:88:e6:78:2f:cf: 0b:99:01:85:05:4a:52:f0:f5:ca:2f:f1:16:cd:d9:b4:ee:9c: 84:af:fb:d1:e7:70:0e:72:ce:d5:fc:62:cb:63:3d:9d:a7:42: c1:2c:16:5c:a4:30:ec:0c:b7:0a:e4:05:e5:42:57:6b:82:a7: 98:37:11:8c:37:4f:78:2f:54:ae:c2:d0:c9:b7:85:78:a7:e6: 5a:8c:cf:8d:e3:70:92:a3:86:88:89:39:01:70:a1:4d:dd:ce: 40:9d:37:35:4f:cd:a4:b7:9c:e5:5a:69:17:c7:81:12:ca:7d: 8b:8b:d7:61:3f:7d:a8:0e:68:e5:72:a3:bd:15:63:7b:2a:64: d6:f2:9c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurbqjwefl8AHvrmFs81G5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmQ5YTk1YmFjZTE5Nzg1YzQwNjQ3NjYzZjMxZDkwNTYy NjFjMmYwHhcNMjYwMTExMDUwMTU0WhcNMjYwMTEyMDUwMTU0WjAzMTEwLwYDVQQD Eyg2OTcwOGE3NWU2MTI1NjNhNTUzYzQyM2JiNGNjYmVkOTM0ZTRkM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjerx4ezx8pBGxjME7mPIekD8JAhS Ac48ZQk06rmRq9bGQ3pFLLIvfxNBio6+tKEJscsNu/Qjl0zMARj287m2ksV13Dll V+0Zj7Iyfxjf8KUAuWir3tihTTSbi8LtBac9CziuJymAN+rsk5IRYjI/GqFLWMx6 UD0SvYgjyZ6fRvjUr9x6ppjjtxxHw6ug7gbCFL33O6sszRQOr8/ZaR1D3wEy0FVR +IXhNM+uHmzBLPh0u9r0KBzw0fgqBNqkA0k3rR1y8lqotInUglu6J09xi9oLY8oJ Y0EDKmna6wQ8Qb2+/FfHTyLTIRjx5Nv+80vIsipBRloiv2Y7iIc2isv4hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlwinXmElY6VTxCO7TMvtk05NPcMB8GA1UdIwQY MBaAFDVtmpW6zhl4XEBkdmPzHZBWJhwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMt NGVmZGU2ZWIzMmQ0LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMtNGVmZGU2ZWIzMmQ0 LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9tnKV+M BlWXRriG1WpLyYGqrXzgIgk0UoIdoFu8FzcdMFIjOBJPrgI+iEwr7YHFuHeBZcU9 N8QrJeLhhRmVxo/sJ1JDhTVcq+nfNRa67EXiFeepsPGyzs/jfq/Z8RlU4tQZJUu+ +dzTVBIShePXhGeKlnIPXfLKrojmeC/PC5kBhQVKUvD1yi/xFs3ZtO6chK/70edw DnLO1fxiy2M9nadCwSwWXKQw7Ay3CuQF5UJXa4KnmDcRjDdPeC9UrsLQybeFeKfm WozPjeNwkqOGiIk5AXChTd3OQJ03NU/NpLec5VppF8eBEsp9i4vXYT99qA5o5XKj vRVjeypk1vKcpA== -----END CERTIFICATE-----Generated at Sun Jan 11 07:48:26 2026 by rpki-client