This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: HdJx0BCr6IPCicc1FK6D+x2bPP7pui+7GCjAEf8P/No= Subject key identifier: 46:C7:AF:4B:5B:08:AD:5D:C2:BA:54:1F:D2:BF:B7:5C:CA:6E:8B:E2 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019AAFF22D192D33E2DD8A691F74F7B5D736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1434 Signing time: Sun 23 Nov 2025 09:01:15 +0000 Manifest this update: Sun 23 Nov 2025 09:01:15 +0000 Manifest next update: Mon 24 Nov 2025 09:01:15 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: lMKoU0B6NZSR0R7NlhvbOmNsilfmW5385/wPmGuOlxs=) 19: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:af:f2:2d:19:2d:33:e2:dd:8a:69:1f:74:f7:b5:d7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 23 09:01:15 2025 GMT Not After : Nov 24 09:01:15 2025 GMT Subject: CN=46c7af4b5b08ad5dc2ba541fd2bfb75cca6e8be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:6d:79:73:17:5b:d1:88:69:00:29:72:97: 64:d8:fa:d4:e8:ef:eb:f6:45:f2:95:a3:31:e4:0f: 42:4c:1d:3c:1b:f8:62:a0:54:54:51:3b:e1:1b:11: 7a:7d:f8:7c:b8:33:19:93:5f:f8:bc:f7:79:51:f0: 04:bc:f8:07:58:9b:98:94:19:89:3c:10:46:46:97: 40:77:b9:c3:92:16:7d:3f:47:74:0a:be:62:bc:3f: 22:a0:0c:63:93:5a:c0:96:b9:8e:fa:41:a8:e0:ac: 6a:a1:0a:a6:14:fb:bd:d7:07:dc:dc:91:58:ca:4e: 8a:e9:06:aa:ac:24:6d:1f:75:8f:9b:87:85:1b:40: b2:f0:09:53:81:f6:fd:23:ee:f9:24:a7:a7:9d:49: f0:7b:dd:7a:28:3e:46:18:ad:4e:c9:61:8c:21:a9: f3:9d:34:6f:05:89:28:9a:93:9b:a9:63:48:cd:d2: 57:1d:10:8e:ef:83:74:0a:93:2f:d2:3e:90:01:3e: ad:9f:cb:13:6d:b3:82:e8:f3:f5:9c:87:aa:b6:32: 37:a9:48:a7:62:ad:1b:99:71:08:ba:5d:4a:90:96: 21:b9:57:e6:e4:11:fd:41:f4:1f:46:c7:6d:f8:03: c3:03:a5:ff:21:b8:68:5c:de:f3:1f:7f:69:b5:a4: 73:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C7:AF:4B:5B:08:AD:5D:C2:BA:54:1F:D2:BF:B7:5C:CA:6E:8B:E2 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7a:bb:4b:e7:64:5c:88:91:64:56:ae:1f:17:75:2b:0a:50: 6a:83:45:3f:84:7a:c0:eb:8a:49:bb:e7:74:cd:99:d8:79:97: 66:d6:d5:8d:ef:e4:e6:78:04:c9:f2:41:3c:a2:0d:e2:34:dc: e3:6d:59:97:bc:fc:93:ed:d0:0d:22:dd:da:4d:b8:f7:f9:9b: 94:6d:05:1e:bf:5a:e4:23:09:14:66:79:ce:54:a2:f1:4a:2f: 7f:56:dd:fb:e0:85:a7:df:5a:3b:e2:8e:ee:5f:dd:c4:fe:10: 2a:60:e3:82:1d:a1:77:7d:80:40:49:12:81:a7:8e:62:73:ae: 0c:cc:2c:01:74:1f:3e:ae:49:88:f0:1d:17:9d:0f:25:7b:ea: 58:05:f7:38:1e:45:e6:14:bd:eb:ef:56:7a:b8:bb:05:ce:a5: b9:55:4d:60:c3:1b:d6:f0:30:ce:ca:e1:d7:63:61:07:25:c2: 6c:2a:c0:6d:c2:bf:33:23:98:eb:76:b1:80:00:2f:9c:c0:fd: 77:85:6b:43:d6:f5:fe:ed:cc:46:ee:b0:85:fc:d0:19:5c:7f: 9c:e1:82:0e:0b:ff:ef:b7:93:f5:26:79:d5:a2:64:82:6d:ce: 04:23:e6:c0:2b:b5:34:ef:8d:dd:7f:5b:3e:e2:51:56:2f:46: a5:1b:a7:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqv8i0ZLTPi3YppH3T3tdc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTIzMDkwMTE1WhcNMjUxMTI0MDkwMTE1WjAzMTEwLwYDVQQD Eyg0NmM3YWY0YjViMDhhZDVkYzJiYTU0MWZkMmJmYjc1Y2NhNmU4YmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloZteXMXW9GIaQApcpdk2PrU6O/r 9kXylaMx5A9CTB08G/hioFRUUTvhGxF6ffh8uDMZk1/4vPd5UfAEvPgHWJuYlBmJ PBBGRpdAd7nDkhZ9P0d0Cr5ivD8ioAxjk1rAlrmO+kGo4KxqoQqmFPu91wfc3JFY yk6K6QaqrCRtH3WPm4eFG0Cy8AlTgfb9I+75JKennUnwe916KD5GGK1OyWGMIanz nTRvBYkompObqWNIzdJXHRCO74N0CpMv0j6QAT6tn8sTbbOC6PP1nIeqtjI3qUin Yq0bmXEIul1KkJYhuVfm5BH9QfQfRsdt+APDA6X/IbhoXN7zH39ptaRznQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbHr0tbCK1dwrpUH9K/t1zKboviMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3q7S+dk XIiRZFauHxd1KwpQaoNFP4R6wOuKSbvndM2Z2HmXZtbVje/k5ngEyfJBPKIN4jTc 421Zl7z8k+3QDSLd2k249/mblG0FHr9a5CMJFGZ5zlSi8Uovf1bd++CFp99aO+KO 7l/dxP4QKmDjgh2hd32AQEkSgaeOYnOuDMwsAXQfPq5JiPAdF50PJXvqWAX3OB5F 5hS96+9Weri7Bc6luVVNYMMb1vAwzsrh12NhByXCbCrAbcK/MyOY63axgAAvnMD9 d4VrQ9b1/u3MRu6whfzQGVx/nOGCDgv/77eT9SZ51aJkgm3OBCPmwCu1NO+N3X9b PuJRVi9GpRunDQ== -----END CERTIFICATE-----Generated at Sun Nov 23 18:45:26 2025 by rpki-client