This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 1ZJ+1KO4h8qjgKsBOVaOvNyESP2/xyTPfvxPa9iQgk8= Subject key identifier: 90:00:2D:CE:41:E7:20:11:8F:64:91:F0:18:54:14:70:40:FC:6D:C4 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019AA838B6F569EBCECAC53FFC4AABBCF72C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1430 Signing time: Fri 21 Nov 2025 21:01:20 +0000 Manifest this update: Fri 21 Nov 2025 21:01:20 +0000 Manifest next update: Sat 22 Nov 2025 21:01:20 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: KA/xXUUtmhQvWEg1kJrS4d1Z3OZ1v7g4pEQ/ARVrqs8=) 19: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 18:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a8:38:b6:f5:69:eb:ce:ca:c5:3f:fc:4a:ab:bc:f7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 21 21:01:20 2025 GMT Not After : Nov 22 21:01:20 2025 GMT Subject: CN=90002dce41e720118f6491f01854147040fc6dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:18:3d:59:52:81:a0:02:91:c6:37:8a:e3: 77:4c:e9:a1:71:1e:b2:ac:fe:1a:4f:7a:0b:2e:5e: 0a:49:5f:fa:5d:95:ce:29:8d:fa:92:dc:2c:0d:29: 05:5d:33:ad:f1:c3:85:3e:d6:c8:63:e1:33:aa:78: 66:88:2d:b6:4d:db:bc:88:ab:1d:9f:fa:01:ee:21: 3c:cc:22:fc:e1:ee:11:78:9f:1f:15:d8:5d:10:fc: d2:9a:06:41:e8:46:98:c8:f8:39:9c:77:ec:77:9c: 56:20:b4:de:0e:f3:2a:ce:25:7c:e8:34:0e:4a:1b: 1e:6a:2d:21:2b:e5:34:72:64:c7:4f:25:46:8c:bd: f6:07:32:f4:8a:d5:3f:cc:78:42:68:f0:62:82:66: 3f:0a:ea:3c:3e:35:99:d2:4d:b6:95:b9:6c:07:b9: 3e:5e:30:4c:3f:68:f5:2f:17:a1:e1:40:59:6b:5c: 67:4d:fe:2c:bb:7f:66:39:fc:31:27:b4:64:57:88: 18:3a:7f:08:10:0a:a6:2c:50:b6:be:94:b9:28:a3: 6a:1c:ef:74:9e:6b:10:8e:51:b2:32:86:49:37:0c: 55:1e:50:37:86:c5:ec:a0:d2:99:a9:7c:b3:31:d3: b9:a2:74:71:a3:c4:55:30:3d:c4:e3:10:f7:fb:91: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:00:2D:CE:41:E7:20:11:8F:64:91:F0:18:54:14:70:40:FC:6D:C4 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:13:63:6a:0d:e6:c2:19:c6:0f:da:eb:06:5f:55:4d:04:2d: 73:e1:df:c2:ac:d8:2d:c7:e6:88:2a:75:fc:ac:ce:74:16:37: cc:48:7f:a3:dc:8e:76:d0:8f:e6:76:eb:91:2b:01:44:14:18: c8:08:0d:13:49:2e:91:aa:f5:0a:24:27:54:3f:55:d1:50:0f: cf:61:69:dd:21:2b:c4:22:95:68:5c:e4:12:eb:7b:2d:e7:fc: ac:c1:07:6a:0e:1e:5e:d4:c8:3a:45:fb:67:4d:03:50:38:0d: e0:1b:3e:1e:e2:8c:52:fc:9f:20:11:2b:e7:0d:d4:fb:56:70: d1:3f:5e:05:b6:e1:05:17:da:6f:93:0e:00:3c:fb:6c:56:69: 0b:7e:20:36:88:33:5a:7a:f7:12:4e:21:c2:e6:81:82:89:9d: 4c:c0:0e:e8:a2:25:59:b9:45:e9:55:d7:2f:f9:b5:6a:7c:36: 5a:e1:56:27:d1:98:10:58:33:ce:60:e1:91:f2:ee:74:c5:32: dd:36:fe:52:6d:8a:bf:52:b4:62:68:c4:cd:51:e1:7d:48:e0: 59:50:a7:a8:d5:dd:b5:55:a5:ea:0b:52:0a:83:b6:a8:f2:3c: 30:33:84:9a:dc:bc:3c:8d:aa:65:b4:04:ed:b2:3a:65:99:59: 30:cc:ea:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqoOLb1aevOysU//EqrvPcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTIxMjEwMTIwWhcNMjUxMTIyMjEwMTIwWjAzMTEwLwYDVQQD Eyg5MDAwMmRjZTQxZTcyMDExOGY2NDkxZjAxODU0MTQ3MDQwZmM2ZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpsYPVlSgaACkcY3iuN3TOmhcR6y rP4aT3oLLl4KSV/6XZXOKY36ktwsDSkFXTOt8cOFPtbIY+EzqnhmiC22Tdu8iKsd n/oB7iE8zCL84e4ReJ8fFdhdEPzSmgZB6EaYyPg5nHfsd5xWILTeDvMqziV86DQO Shseai0hK+U0cmTHTyVGjL32BzL0itU/zHhCaPBigmY/Cuo8PjWZ0k22lblsB7k+ XjBMP2j1Lxeh4UBZa1xnTf4su39mOfwxJ7RkV4gYOn8IEAqmLFC2vpS5KKNqHO90 nmsQjlGyMoZJNwxVHlA3hsXsoNKZqXyzMdO5onRxo8RVMD3E4xD3+5G4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAALc5B5yARj2SR8BhUFHBA/G3EMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRNjag3m whnGD9rrBl9VTQQtc+HfwqzYLcfmiCp1/KzOdBY3zEh/o9yOdtCP5nbrkSsBRBQY yAgNE0kukar1CiQnVD9V0VAPz2Fp3SErxCKVaFzkEut7Lef8rMEHag4eXtTIOkX7 Z00DUDgN4Bs+HuKMUvyfIBEr5w3U+1Zw0T9eBbbhBRfab5MOADz7bFZpC34gNogz Wnr3Ek4hwuaBgomdTMAO6KIlWblF6VXXL/m1anw2WuFWJ9GYEFgzzmDhkfLudMUy 3Tb+Um2Kv1K0YmjEzVHhfUjgWVCnqNXdtVWl6gtSCoO2qPI8MDOEmty8PI2qZbQE 7bI6ZZlZMMzqdQ== -----END CERTIFICATE-----Generated at Sat Nov 22 03:39:05 2025 by rpki-client