This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: DoMcPWKkLv3VeTF05XLLOhOrlROky+ao/HGhe5GEVfk=
Subject key identifier: F6:C9:07:23:F5:1B:8F:11:93:E7:3D:85:F4:1C:7B:16:8A:41:4B:2C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019C2A75382D8B28698CB282BA5722E60BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 1503
Signing time: Wed 04 Feb 2026 21:00:50 +0000
Manifest this update: Wed 04 Feb 2026 21:00:50 +0000
Manifest next update: Thu 05 Feb 2026 21:00:50 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
6: 6zhEBi2rGIO6yvp94BAc87oo8NE.roa (hash: buQwiuRKOBq+4oEs1t78Z05UhT+uvb28X3BhlGXBURY=)
7: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
8: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
9: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
10: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=)
11: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
12: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
13: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
14: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
15: Mb53TN6yKD50A2de1Ozhdge4mrQ.roa (hash: 2V1e3M/tFnuzlchzZk/LCxvBGVvryU2uaQdSfsUPEKA=)
16: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: zgsFJByaPjByParpQewHBebtA14Gh0TCpvxPvJt9j6U=)
17: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
18: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
19: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
20: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
21: ZG3wywvA41qfbz9i4FHPo7ZoiQY.roa (hash: D9m8ewpfk0R2qV4OYq5Yah9WUER9Xli2U4ySGQlIqKI=)
22: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
23: d86MwxgfI9gjW7CGjwxI-JaRW1s.roa (hash: xIHPRrrCU0ih0D3JryzXxRHn67n+x1kgKoKVs/EKszE=)
24: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
25: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
26: laoq5W7HYkYx_OxTQ0mAaU-nLuU.roa (hash: DnEkXC+hsSS//DzJYtB8xpxphGulUc/FEkbBxzWWEJs=)
27: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
28: q5nWFGJRWtF973Oh4L4NdFyWU7w.roa (hash: cPGcwwvhLGFvvVWvZDvkrAQGcbfROxYZMG3UWVyN8E0=)
29: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
30: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
31: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
32: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:75:38:2d:8b:28:69:8c:b2:82:ba:57:22:e6:0b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 4 21:00:50 2026 GMT
Not After : Feb 5 21:00:50 2026 GMT
Subject: CN=f6c90723f51b8f1193e73d85f41c7b168a414b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:7e:88:f2:37:f0:10:9c:b9:18:90:6e:50:
36:01:c3:c0:1b:98:25:df:3f:ba:c9:9b:5c:fc:67:
2e:0c:80:95:cd:6f:38:79:49:fd:0b:1c:50:68:a5:
e6:4a:bb:9f:23:66:4c:0c:26:91:7c:ed:65:c8:57:
fd:c4:c1:f1:06:50:0f:93:17:99:82:b4:25:72:45:
3a:b6:ae:fc:e7:57:8f:51:aa:31:61:59:4d:55:bf:
23:38:51:74:39:f1:32:a4:d7:1f:2e:0d:85:fc:ed:
42:e0:59:ea:57:9d:97:74:f4:ea:a7:7e:af:e5:9e:
2b:b0:8e:e7:a5:ea:2b:a3:c1:bd:c0:f1:bd:8d:4c:
e6:0f:d7:1c:6b:8a:42:22:e7:98:64:a5:e4:14:29:
6e:c6:cd:5a:3d:4d:ee:24:88:65:cf:b1:2d:72:c9:
e9:73:bf:b3:c0:5d:db:4d:45:60:1d:46:6a:6b:f0:
9c:8c:be:55:0a:cb:ff:4e:c2:4d:35:ff:33:24:d2:
0b:a8:9d:6d:12:66:60:5e:40:e5:12:80:43:bc:11:
ad:0b:de:c9:9a:a0:a4:1c:3f:89:5e:37:99:f4:e0:
39:1c:20:f9:76:b2:27:87:34:06:e4:d8:33:0e:9e:
e0:cc:30:9d:3d:48:63:14:7b:d1:e3:77:45:42:f5:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:07:23:F5:1B:8F:11:93:E7:3D:85:F4:1C:7B:16:8A:41:4B:2C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5f:bf:3a:9a:e6:b7:d1:f8:bc:bc:1c:57:83:33:62:da:90:
34:f9:24:cc:75:6a:84:d3:1e:f5:db:20:96:65:38:d1:a9:7e:
dc:16:54:d0:02:74:72:57:93:35:bc:12:d5:7a:4a:2c:90:c8:
f6:12:df:84:9e:fa:3c:d5:07:d6:eb:fc:bc:78:32:34:a2:d8:
c9:61:e0:49:e1:bf:23:92:ad:f2:ba:2a:63:f1:57:89:2c:fd:
97:93:5c:6c:70:58:02:6c:45:69:a4:3d:dd:7a:90:0b:8b:05:
c7:63:60:10:2e:0c:4f:31:c3:da:91:1c:d7:fb:34:6a:12:83:
f0:42:71:3b:63:04:a2:56:b2:06:4f:d4:2c:69:35:6e:0d:91:
ef:4e:33:31:30:d6:8b:8b:50:4e:7e:ec:1e:9d:d4:66:84:9e:
c8:84:f1:d4:96:a6:40:55:1b:98:1f:d1:36:ac:44:a4:fa:f9:
53:bc:e4:16:94:4a:36:7e:57:b7:3b:d4:7d:b6:81:73:00:99:
94:62:dc:cb:83:d6:1b:44:2e:13:ca:f0:f1:a9:09:82:7c:bc:
6b:39:80:b4:89:5a:51:0c:15:75:cd:d1:07:fb:27:3d:87:90:
c2:70:cd:98:e4:08:51:f7:ed:52:0c:26:fd:c0:47:6b:0a:d2:
3f:1b:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 04:27:55 2026 by rpki-client