This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: CQFRylTf59zpmLfaNDtNCv69yPWB++7TdAhiNb2msfE= Subject key identifier: 71:0C:A9:F2:3A:71:63:82:90:2B:34:F9:94:44:6B:89:71:F5:85:E5 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019AAC1582E5D480DBE2EED9BCDD07F7BE21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1432 Signing time: Sat 22 Nov 2025 15:01:22 +0000 Manifest this update: Sat 22 Nov 2025 15:01:22 +0000 Manifest next update: Sun 23 Nov 2025 15:01:22 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: RQeU6VfS0ssTtsRcB3QymoPqmk+ZM+MPyAKDYSNgk7M=) 19: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:82:e5:d4:80:db:e2:ee:d9:bc:dd:07:f7:be:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 22 15:01:22 2025 GMT Not After : Nov 23 15:01:22 2025 GMT Subject: CN=710ca9f23a716382902b34f994446b8971f585e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:8e:a5:f1:17:ce:9a:ce:aa:f7:55:4d:05: fb:bf:18:cd:30:13:cb:d5:16:d9:d1:3e:31:cb:e7: 3e:1d:d5:b4:04:7d:d1:03:cc:25:55:db:8b:2d:ad: 3d:e7:35:a1:8f:74:ac:28:92:57:ba:6a:d7:bf:e2: 5d:70:a9:63:ca:8d:ea:e7:01:05:f2:7a:8b:c9:00: 21:4e:f0:34:28:b3:97:2f:9e:2c:fa:e8:ec:50:fe: ca:3b:6d:55:4b:bf:5a:20:d2:77:9e:f8:6d:92:17: 6c:ce:d1:34:c2:df:89:a2:26:aa:55:e7:b7:0a:e9: 8a:7a:0b:9f:29:91:d5:91:3a:02:ba:7f:50:e6:ba: 81:f3:b6:37:57:5d:ef:05:b9:64:30:e9:53:a9:12: 48:9e:a3:05:d3:79:1c:64:8c:72:e3:fd:74:d7:22: 6a:ed:47:23:bc:1f:c7:a7:ff:39:66:68:20:b4:09: 84:ce:d1:21:37:f5:d9:09:82:bc:98:ca:12:37:2a: fe:11:2c:69:f8:84:b7:1e:75:8e:dc:b6:d4:3f:0b: 84:6e:89:1d:fc:ee:c0:28:f3:72:c2:1c:cb:af:ec: 11:e2:ba:ed:ab:bc:d2:5f:8f:7e:35:49:30:cf:55: a9:06:26:23:a2:71:4f:23:aa:62:91:ce:26:b7:05: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0C:A9:F2:3A:71:63:82:90:2B:34:F9:94:44:6B:89:71:F5:85:E5 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:bf:ee:38:7a:46:b5:93:57:fa:c2:f8:4c:b0:f1:66:15:69: ec:d2:f4:6c:fd:6c:bb:b2:6a:bb:6a:09:9f:f0:0c:81:63:89: 2d:b0:86:c7:70:26:96:54:a6:4b:9b:05:1d:99:b6:31:b7:9d: 95:1e:65:f4:99:08:35:92:2a:c5:bd:b1:95:3b:e5:58:59:64: 89:e5:11:e5:a1:e9:05:53:01:42:35:53:09:3b:36:84:d3:92: c7:7f:fd:35:ee:d7:65:05:49:6a:1b:1b:0f:f1:db:a0:68:a2: e3:1c:95:3b:f6:03:bd:16:55:6c:44:da:46:91:cf:a8:62:3a: c1:a5:90:7f:dc:a3:aa:35:36:99:b4:09:ac:39:57:7d:be:e4: db:eb:90:2c:4f:39:37:de:38:a8:14:9d:88:d0:b6:b9:9d:d4: 1d:f4:24:1e:7e:3d:eb:21:3e:a9:d3:e1:93:7b:3e:f1:f6:8a: d5:a9:11:1b:91:31:b5:2f:d3:3e:68:5b:8a:69:fe:07:f5:32: 5a:04:f1:52:71:6d:47:92:a7:1c:78:1d:23:36:ba:ba:2c:44: e0:5b:84:ee:ac:92:eb:d6:68:3f:6c:95:65:dc:06:87:de:99: 71:4b:d1:f0:0a:42:58:3f:e2:0b:82:5f:af:fe:36:16:9d:af: 6d:ea:fe:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFYLl1IDb4u7ZvN0H974hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTIyMTUwMTIyWhcNMjUxMTIzMTUwMTIyWjAzMTEwLwYDVQQD Eyg3MTBjYTlmMjNhNzE2MzgyOTAyYjM0Zjk5NDQ0NmI4OTcxZjU4NWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA2OpfEXzprOqvdVTQX7vxjNMBPL 1RbZ0T4xy+c+HdW0BH3RA8wlVduLLa095zWhj3SsKJJXumrXv+JdcKljyo3q5wEF 8nqLyQAhTvA0KLOXL54s+ujsUP7KO21VS79aINJ3nvhtkhdsztE0wt+JoiaqVee3 CumKegufKZHVkToCun9Q5rqB87Y3V13vBblkMOlTqRJInqMF03kcZIxy4/101yJq 7UcjvB/Hp/85ZmggtAmEztEhN/XZCYK8mMoSNyr+ESxp+IS3HnWO3LbUPwuEbokd /O7AKPNywhzLr+wR4rrtq7zSX49+NUkwz1WpBiYjonFPI6pikc4mtwVoLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEMqfI6cWOCkCs0+ZREa4lx9YXlMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0b/uOHpG tZNX+sL4TLDxZhVp7NL0bP1su7Jqu2oJn/AMgWOJLbCGx3AmllSmS5sFHZm2Mbed lR5l9JkINZIqxb2xlTvlWFlkieUR5aHpBVMBQjVTCTs2hNOSx3/9Ne7XZQVJahsb D/HboGii4xyVO/YDvRZVbETaRpHPqGI6waWQf9yjqjU2mbQJrDlXfb7k2+uQLE85 N944qBSdiNC2uZ3UHfQkHn496yE+qdPhk3s+8faK1akRG5ExtS/TPmhbimn+B/Uy WgTxUnFtR5KnHHgdIza6uixE4FuE7qyS69ZoP2yVZdwGh96ZcUvR8ApCWD/iC4Jf r/42Fp2vber+lA== -----END CERTIFICATE-----Generated at Sat Nov 22 18:12:45 2025 by rpki-client