This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 2hMEPKgmv19pj1ThscGS0TlqPUbr5pMIznNE0/AimKo= Subject key identifier: 99:72:94:E9:43:0C:AD:D5:17:F3:17:2F:63:C1:E1:67:D3:FC:F9:79 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B4F6035B1ADD2E42D52360B39E86FB1F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 148C Signing time: Wed 24 Dec 2025 08:01:03 +0000 Manifest this update: Wed 24 Dec 2025 08:01:03 +0000 Manifest next update: Thu 25 Dec 2025 08:01:03 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 13: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 14: FowJlWGJ75catmAvy76DNBRSo-Q.roa (hash: 81vaXaueXrO3XB2IcIbnwYS31i0uEEFUqvZGfzbTxlE=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: XmyNmnC80IrJzCiPMytd5tdWkugSXTWm7hpFhF4wpCk=) 19: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 20: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 21: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 22: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 23: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 24: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 25: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 26: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 27: uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa (hash: tKpEQyO7QtsNWedY5Awj4bLBL8ot/Tw/yYR9I0s7bqM=) 28: vxRAQIV12C4JH31qwlp7JWImxWU.roa (hash: odp13BbwnzelbJu4ViI2Eueefgtk7P0dbj2vlEhz0Ro=) 29: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 30: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:35:b1:ad:d2:e4:2d:52:36:0b:39:e8:6f:b1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 24 08:01:03 2025 GMT Not After : Dec 25 08:01:03 2025 GMT Subject: CN=997294e9430cadd517f3172f63c1e167d3fcf979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:eb:54:16:52:09:53:5b:5c:67:33:c7:f6: fd:38:62:2f:f2:ba:1c:d6:9f:11:a5:b2:1a:79:3d: eb:53:cc:24:d2:0e:52:d5:f0:26:09:b1:b4:3e:b2: 1a:38:bb:9e:0c:68:02:d2:7e:82:77:77:a4:14:10: 09:28:77:90:d5:54:69:10:b9:33:61:eb:02:d1:f0: 98:9b:e5:fb:c8:33:b3:56:52:8f:10:a0:72:19:ca: df:d4:4e:5d:50:61:7b:a5:4f:41:4f:7c:c9:d7:5b: d6:17:bd:23:24:67:aa:00:3e:68:b5:b7:44:d4:c6: 7d:e7:f8:27:d3:40:52:34:e1:d2:b2:85:26:4b:d2: 67:aa:2e:c2:06:70:fe:e9:69:44:56:90:db:67:b3: f2:14:ca:f8:78:55:10:98:4a:98:f3:57:50:0f:f5: 5d:90:f9:1f:f5:10:4c:75:7c:36:50:22:07:a6:b9: cb:08:71:15:a5:df:f2:d1:9b:1a:46:57:fb:8b:fb: ce:c9:46:b3:15:31:df:6b:ba:6e:32:f1:e9:77:3d: 71:b6:26:45:51:5b:79:41:7d:6f:b2:53:8e:07:44: fd:fe:1f:45:b6:3d:fe:63:db:a0:2f:66:40:bc:75: 4c:be:6b:aa:77:05:79:f9:51:37:c0:9e:57:e2:1c: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:94:E9:43:0C:AD:D5:17:F3:17:2F:63:C1:E1:67:D3:FC:F9:79 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1d:59:76:fd:0f:d7:cb:d3:94:bd:f8:53:48:e0:39:ec:40: 6f:33:b8:22:1d:53:b4:bb:67:d1:cd:24:40:94:21:f7:b2:60: 4a:19:04:7d:4b:dd:c2:b0:9e:cf:4d:e2:49:90:af:c7:e0:6c: 76:59:02:d0:bf:97:27:cd:62:d5:e6:58:4a:05:0d:af:01:5a: 5c:df:fd:0f:c6:09:bb:f6:e5:9b:f3:99:ce:77:8c:65:be:c2: 9f:1a:af:7b:e5:f3:67:60:a5:b4:26:dc:6e:d5:2b:77:40:02: 63:0c:8f:3c:2e:ea:ba:13:f6:4a:a6:ee:f6:7e:69:ec:50:cd: 82:e3:6f:61:e5:9c:b5:9e:0b:40:29:97:c8:31:df:9c:5b:b6: e3:41:1f:59:88:37:51:65:98:95:7b:db:c5:37:7d:1d:dd:f2: 7c:da:88:e9:5b:19:c8:d1:49:be:3c:40:25:cc:87:92:10:2c: 61:c9:02:8c:ca:0c:e8:68:5a:ed:15:e3:18:48:ff:bb:5d:a0: b8:5b:99:c6:ce:a5:41:19:3a:7b:7d:7b:90:e1:77:96:24:02: b7:4c:98:eb:61:51:76:f7:35:c2:b5:6b:2f:10:11:be:6f:be: 36:00:07:c9:92:02:f8:09:25:fc:e7:bf:9d:1c:45:80:1e:6d: ec:2d:22:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYDWxrdLkLVI2Cznob7HyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjI0MDgwMTAzWhcNMjUxMjI1MDgwMTAzWjAzMTEwLwYDVQQD Eyg5OTcyOTRlOTQzMGNhZGQ1MTdmMzE3MmY2M2MxZTE2N2QzZmNmOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydvrVBZSCVNbXGczx/b9OGIv8roc 1p8RpbIaeT3rU8wk0g5S1fAmCbG0PrIaOLueDGgC0n6Cd3ekFBAJKHeQ1VRpELkz YesC0fCYm+X7yDOzVlKPEKByGcrf1E5dUGF7pU9BT3zJ11vWF70jJGeqAD5otbdE 1MZ95/gn00BSNOHSsoUmS9Jnqi7CBnD+6WlEVpDbZ7PyFMr4eFUQmEqY81dQD/Vd kPkf9RBMdXw2UCIHprnLCHEVpd/y0ZsaRlf7i/vOyUazFTHfa7puMvHpdz1xtiZF UVt5QX1vslOOB0T9/h9Ftj3+Y9ugL2ZAvHVMvmuqdwV5+VE3wJ5X4hwL6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlylOlDDK3VF/MXL2PB4WfT/Pl5MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR1Zdv0P 18vTlL34U0jgOexAbzO4Ih1TtLtn0c0kQJQh97JgShkEfUvdwrCez03iSZCvx+Bs dlkC0L+XJ81i1eZYSgUNrwFaXN/9D8YJu/blm/OZzneMZb7Cnxqve+XzZ2CltCbc btUrd0ACYwyPPC7quhP2Sqbu9n5p7FDNguNvYeWctZ4LQCmXyDHfnFu240EfWYg3 UWWYlXvbxTd9Hd3yfNqI6VsZyNFJvjxAJcyHkhAsYckCjMoM6Gha7RXjGEj/u12g uFuZxs6lQRk6e317kOF3liQCt0yY62FRdvc1wrVrLxARvm++NgAHyZIC+Akl/Oe/ nRxFgB5t7C0ixw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:24 2025 by rpki-client