This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 9Z1LBDnSMTs6uGE/nIlX89t3TaZ2bu6aB9n0e0rtLRk= Subject key identifier: AE:C3:7B:DA:96:2E:64:19:2D:71:4F:AD:D1:13:EB:5B:45:CF:81:C1 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019AA26CF9E2A450A86D9E583FB47A5C18FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 142D Signing time: Thu 20 Nov 2025 18:00:42 +0000 Manifest this update: Thu 20 Nov 2025 18:00:42 +0000 Manifest next update: Fri 21 Nov 2025 18:00:42 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: koXHo5iOSzCugoDRUPA4idUP//2iQvFNvMZz1FI6OfE=) 19: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:6c:f9:e2:a4:50:a8:6d:9e:58:3f:b4:7a:5c:18:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 20 18:00:42 2025 GMT Not After : Nov 21 18:00:42 2025 GMT Subject: CN=aec37bda962e64192d714fadd113eb5b45cf81c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:a8:34:0d:9b:57:79:84:e8:ea:b7:cb:0c: d4:5d:f5:6f:ab:2d:72:ec:ad:62:d7:c0:2c:3c:12: 9e:47:0f:16:bf:e8:89:60:d3:ae:58:21:7d:48:6f: 01:ab:9e:64:aa:37:a1:37:67:1f:9f:c9:22:2f:5b: 33:f5:fe:bf:0a:e1:40:05:4b:e3:9a:c9:31:ec:50: d2:51:46:42:d0:74:4c:fc:30:4a:fd:4c:aa:a0:a0: 3f:9f:f7:6f:7b:7b:c1:ba:8e:c6:3e:78:e7:8c:fc: a8:a2:54:af:98:5b:50:22:93:56:7e:5a:5b:69:30: 6b:86:45:9d:93:26:f2:87:80:98:3e:60:67:63:c3: dc:a6:e7:cf:71:a1:48:47:ee:5f:4d:dd:cc:74:e7: 6c:8f:9c:4c:fd:2f:be:f9:e3:34:99:9a:6d:04:db: 7f:81:ea:70:03:cd:87:ea:64:4b:77:6b:4a:99:d7: b9:4d:a5:06:f8:42:74:10:ed:50:31:97:b8:42:a7: bd:6e:6f:12:d5:8f:31:3b:63:c1:41:65:9c:e1:b3: a1:8a:f3:bb:a8:8a:78:6e:dc:8c:86:74:53:2d:bf: dc:9c:33:7c:c0:65:a6:9d:a1:11:f4:5a:6b:a2:1d: 53:80:ef:79:9f:38:6a:dd:78:52:68:c2:65:d5:ca: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C3:7B:DA:96:2E:64:19:2D:71:4F:AD:D1:13:EB:5B:45:CF:81:C1 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b7:a5:dc:d1:10:e0:87:b1:d6:cc:8f:bd:e1:f4:a3:bf:bd: a5:52:f5:01:1d:bb:e7:2d:b7:e2:62:14:13:42:68:6a:dd:63: a2:c9:47:34:82:9e:6c:00:9f:a1:28:3a:81:c8:58:cb:ec:a9: 0b:96:99:32:85:39:32:84:ed:bd:51:27:a8:9e:57:58:fa:a9: fa:44:0e:f3:2c:87:4c:2b:93:05:ce:02:7c:03:db:23:e7:56: 56:51:4e:c8:93:28:ab:0f:c2:9c:76:04:e0:5b:c0:8c:e7:43: ee:6b:a3:8b:b2:cc:59:52:4b:09:66:19:63:42:70:e5:4f:6d: 56:ed:42:a0:31:91:a9:d9:de:24:76:1e:d7:7d:69:70:98:31: 2d:2a:19:ef:f5:b9:c9:74:78:b9:cc:57:28:f0:21:73:08:9b: 11:cd:bc:fb:41:72:b0:dc:af:7b:ad:f9:29:5a:74:e8:c5:44: 7b:2c:13:7f:f9:eb:65:94:a2:48:65:28:ce:f5:7e:60:b3:62: 5e:6d:dc:8c:17:b6:a0:9c:1c:3a:b8:72:ae:13:bd:29:32:d7: f8:9b:67:fa:2f:43:9c:bc:24:95:0b:a6:c3:e1:d8:18:52:a5: a2:e6:76:4a:1e:ea:0f:74:4d:ee:1f:7a:c0:01:03:c8:9f:44: 4c:7a:a4:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqibPnipFCobZ5YP7R6XBj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTIwMTgwMDQyWhcNMjUxMTIxMTgwMDQyWjAzMTEwLwYDVQQD EyhhZWMzN2JkYTk2MmU2NDE5MmQ3MTRmYWRkMTEzZWI1YjQ1Y2Y4MWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xWoNA2bV3mE6Oq3ywzUXfVvqy1y 7K1i18AsPBKeRw8Wv+iJYNOuWCF9SG8Bq55kqjehN2cfn8kiL1sz9f6/CuFABUvj mskx7FDSUUZC0HRM/DBK/UyqoKA/n/dve3vBuo7GPnjnjPyoolSvmFtQIpNWflpb aTBrhkWdkybyh4CYPmBnY8PcpufPcaFIR+5fTd3MdOdsj5xM/S+++eM0mZptBNt/ gepwA82H6mRLd2tKmde5TaUG+EJ0EO1QMZe4Qqe9bm8S1Y8xO2PBQWWc4bOhivO7 qIp4btyMhnRTLb/cnDN8wGWmnaER9Fproh1TgO95nzhq3XhSaMJl1crNqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7De9qWLmQZLXFPrdET61tFz4HBMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLel3NEQ 4Iex1syPveH0o7+9pVL1AR275y234mIUE0Joat1joslHNIKebACfoSg6gchYy+yp C5aZMoU5MoTtvVEnqJ5XWPqp+kQO8yyHTCuTBc4CfAPbI+dWVlFOyJMoqw/CnHYE 4FvAjOdD7muji7LMWVJLCWYZY0Jw5U9tVu1CoDGRqdneJHYe131pcJgxLSoZ7/W5 yXR4ucxXKPAhcwibEc28+0FysNyve635KVp06MVEeywTf/nrZZSiSGUozvV+YLNi Xm3cjBe2oJwcOrhyrhO9KTLX+Jtn+i9DnLwklQumw+HYGFKlouZ2Sh7qD3RN7h96 wAEDyJ9ETHqkYA== -----END CERTIFICATE-----Generated at Fri Nov 21 01:55:02 2025 by rpki-client