This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: gNU3b9KmxRx6nOPNqICEI/fnQWdmsrm2AtEcxLeSexc= Subject key identifier: 22:14:7C:BF:BB:1B:50:D1:57:E3:78:7B:D1:5B:EB:25:CE:46:E0:D4 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B47A6B2A4E892FE1D2EFF30E7E73F776E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1488 Signing time: Mon 22 Dec 2025 20:01:05 +0000 Manifest this update: Mon 22 Dec 2025 20:01:05 +0000 Manifest next update: Tue 23 Dec 2025 20:01:05 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 13: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 14: FowJlWGJ75catmAvy76DNBRSo-Q.roa (hash: 81vaXaueXrO3XB2IcIbnwYS31i0uEEFUqvZGfzbTxlE=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: f2EuYMKORVIKgnYLBIPJVMSmtsK5g1RwZ0Tb241ck7Y=) 19: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 20: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 21: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 22: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 23: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 24: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 25: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 26: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 27: uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa (hash: tKpEQyO7QtsNWedY5Awj4bLBL8ot/Tw/yYR9I0s7bqM=) 28: vxRAQIV12C4JH31qwlp7JWImxWU.roa (hash: odp13BbwnzelbJu4ViI2Eueefgtk7P0dbj2vlEhz0Ro=) 29: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 30: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:b2:a4:e8:92:fe:1d:2e:ff:30:e7:e7:3f:77:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 22 20:01:05 2025 GMT Not After : Dec 23 20:01:05 2025 GMT Subject: CN=22147cbfbb1b50d157e3787bd15beb25ce46e0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:ec:3a:46:0a:d3:df:58:1f:4c:ee:9d:44: 7b:b3:7f:77:58:bd:a7:ee:51:81:10:e1:e6:df:0e: 35:af:10:50:d1:48:8a:8e:dd:a7:30:6e:5a:c2:63: 8e:4f:0e:7f:6b:c9:4a:64:cb:1e:3c:f4:3d:4c:6c: 39:58:fb:8a:d7:f1:03:dd:d4:b2:86:68:e9:fa:e4: 8e:27:c5:27:bc:cc:bc:ad:c7:c9:9c:00:9c:7f:85: b4:a8:43:fd:e0:a8:0a:d0:f6:ae:46:94:4b:cb:d8: e0:28:b5:89:14:d3:18:87:72:6a:5e:e0:8f:e8:30: fa:16:67:8a:bd:be:c6:63:24:35:e1:6b:94:1e:d1: c1:95:c3:c1:6a:3a:ca:a0:d6:9e:0a:e4:fb:57:e7: dc:05:20:04:a1:3f:b8:38:7f:ca:2a:de:c5:9a:98: f2:5a:bb:c2:49:00:4d:08:2d:a5:e3:91:30:d2:85: ff:28:08:76:1d:3b:16:53:6b:c1:4d:49:b6:f4:20: 94:7d:cb:1e:4a:a1:23:4c:80:5c:77:d2:64:25:52: 11:56:44:87:64:7c:2b:5e:7c:05:0a:13:bc:c8:58: d7:5b:a2:18:58:e2:9b:50:fb:ae:c4:a1:d9:7c:c0: 08:6f:11:c7:28:6f:22:b6:e1:09:a2:4e:a7:00:a2: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:14:7C:BF:BB:1B:50:D1:57:E3:78:7B:D1:5B:EB:25:CE:46:E0:D4 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fa:e1:e6:2f:fe:7c:04:4b:ae:a9:26:95:ca:10:25:10:c6: f1:ab:74:f3:2c:8b:a9:da:bd:d6:8b:b0:11:86:db:fb:60:4f: 3e:af:2f:32:ab:2c:21:69:32:d5:3b:d0:17:77:0e:c0:d8:8f: eb:64:9e:ce:6a:a4:1f:49:63:96:20:f9:a6:d1:e0:c3:1e:5b: 0b:38:28:0d:55:52:82:d3:ce:62:72:06:c8:46:ff:9d:ea:78: db:48:70:d6:97:28:f1:c3:55:46:e9:71:ca:42:d3:4d:ba:68: 57:15:4d:ca:5f:de:e6:0f:c7:a5:b9:fc:7a:d5:6d:9f:a2:e9: 70:29:a5:14:5d:f1:e1:6c:4c:09:7b:f3:73:85:6a:25:97:68: 3a:f6:10:dc:5a:52:15:95:1a:04:19:bf:6a:67:f0:1c:eb:d1: 42:b2:60:a8:6d:c6:c3:0a:d6:40:5d:b9:67:c3:a2:b0:0d:60: 9c:84:eb:70:f7:7b:e4:57:86:0a:37:da:17:17:95:42:2b:0d: 06:d7:c5:73:6a:ad:d2:a7:90:b2:f4:34:df:87:48:27:7f:2b: 7c:9b:da:c0:02:ad:43:24:81:4c:fe:0f:a0:c6:4c:6e:7b:b4: 71:1f:6c:10:ed:03:94:7a:f0:48:86:f0:ca:22:83:86:5d:4e: 79:bd:eb:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHprKk6JL+HS7/MOfnP3duMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjIyMjAwMTA1WhcNMjUxMjIzMjAwMTA1WjAzMTEwLwYDVQQD EygyMjE0N2NiZmJiMWI1MGQxNTdlMzc4N2JkMTViZWIyNWNlNDZlMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/XsOkYK099YH0zunUR7s393WL2n 7lGBEOHm3w41rxBQ0UiKjt2nMG5awmOOTw5/a8lKZMsePPQ9TGw5WPuK1/ED3dSy hmjp+uSOJ8UnvMy8rcfJnACcf4W0qEP94KgK0PauRpRLy9jgKLWJFNMYh3JqXuCP 6DD6FmeKvb7GYyQ14WuUHtHBlcPBajrKoNaeCuT7V+fcBSAEoT+4OH/KKt7Fmpjy WrvCSQBNCC2l45Ew0oX/KAh2HTsWU2vBTUm29CCUfcseSqEjTIBcd9JkJVIRVkSH ZHwrXnwFChO8yFjXW6IYWOKbUPuuxKHZfMAIbxHHKG8ituEJok6nAKJeHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIUfL+7G1DRV+N4e9Fb6yXORuDUMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPrh5i/+ fARLrqkmlcoQJRDG8at08yyLqdq91ouwEYbb+2BPPq8vMqssIWky1TvQF3cOwNiP 62SezmqkH0ljliD5ptHgwx5bCzgoDVVSgtPOYnIGyEb/nep420hw1pco8cNVRulx ykLTTbpoVxVNyl/e5g/Hpbn8etVtn6LpcCmlFF3x4WxMCXvzc4VqJZdoOvYQ3FpS FZUaBBm/amfwHOvRQrJgqG3GwwrWQF25Z8OisA1gnITrcPd75FeGCjfaFxeVQisN BtfFc2qt0qeQsvQ034dIJ38rfJvawAKtQySBTP4PoMZMbnu0cR9sEO0DlHrwSIbw yiKDhl1Oeb3rTQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:04:43 2025 by rpki-client