This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 2lYZ0fn1scsjli1MoqF9p3YU17q/+/Ug0/HHrzy4ItY= Subject key identifier: B9:99:72:05:42:95:1A:71:E6:EA:70:E6:73:93:81:15:2C:A9:11:38 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019AFFFBB1A7D854BB4E62DB2A39713D0F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 145F Signing time: Mon 08 Dec 2025 22:01:16 +0000 Manifest this update: Mon 08 Dec 2025 22:01:16 +0000 Manifest next update: Tue 09 Dec 2025 22:01:16 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 13: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 14: F027_GP5pmh6_Thty6xAGao2ml0.roa (hash: 3Cg2lriFIgTA68tyGGL6VuH3WUWBtVlXvUjAgL25IQM=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: J2XraGtnvsgxI0MCjQGxzmGiNfq2syXWhpjrLFkJNRU=) 19: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 20: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 21: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 22: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 23: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 24: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 25: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 26: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 27: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 28: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 29: w1gkOlnqiWnrW_xkYkv3EsGlRT0.roa (hash: bsBlgK649HEcOCZObiNbWwsOwY2QTRWbzYBskG9A/Qw=) 30: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 31: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:fb:b1:a7:d8:54:bb:4e:62:db:2a:39:71:3d:0f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 8 22:01:16 2025 GMT Not After : Dec 9 22:01:16 2025 GMT Subject: CN=b999720542951a71e6ea70e6739381152ca91138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:8d:82:0d:59:d4:b5:14:30:dc:50:e8:45: d6:32:77:ba:a3:c2:f9:22:16:19:6a:d3:dd:38:90: 21:18:da:00:b3:36:37:01:31:00:1f:66:32:78:9d: 81:ee:05:19:3b:6d:93:f3:32:e9:7f:aa:d4:2d:e7: 84:96:3b:28:fd:6d:ac:5d:f2:3a:6f:8a:31:ff:ce: 9a:88:57:e1:eb:ae:2c:d3:65:5e:0a:37:53:c1:c8: 97:a2:bd:e6:64:86:41:3e:5d:67:cb:6d:72:e6:b8: 27:cc:d0:92:7a:90:77:32:16:9b:01:d1:1c:46:0c: a7:76:67:b3:1f:ac:cd:3a:b9:8c:b6:08:19:6d:81: a7:9c:82:17:f4:85:49:4e:2b:c5:56:dc:db:14:44: 02:24:86:70:5d:20:7b:c5:fe:26:65:e4:49:a5:5b: d4:48:a0:09:ec:4d:9e:a8:66:a1:12:77:8c:2a:28: 2d:b9:7e:57:06:1e:c6:c7:81:dd:f0:05:a1:d1:10: 58:00:da:e3:dd:38:16:73:b9:f4:e0:ba:b1:3b:97: ee:b2:6e:18:ea:87:cf:0a:f2:d6:86:7f:85:c0:53: 93:f9:30:df:72:01:48:53:d5:ec:cf:55:42:7f:29: 0d:7a:0c:5b:00:71:53:af:47:0b:45:fd:67:ec:1e: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:99:72:05:42:95:1A:71:E6:EA:70:E6:73:93:81:15:2C:A9:11:38 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:7a:67:7c:c0:2d:1b:40:df:49:74:2a:72:55:b9:ce:22:2f: 03:c0:f3:c0:15:e9:8f:1a:21:98:44:28:5c:31:61:af:01:03: 56:8d:8b:99:93:1f:fb:89:d6:2f:13:77:bb:1a:2d:b4:38:8c: 78:13:db:5c:c2:6f:5c:a6:10:13:0c:70:13:f9:6b:ff:6b:a1: 0c:35:c0:4c:ac:4e:5e:1d:52:e2:09:73:0f:55:52:f7:9a:b5: 35:24:ed:b1:6e:f8:a2:bd:b9:5c:3b:8e:91:7b:62:14:56:44: 7a:3a:ad:67:ac:67:ee:bc:cf:34:f0:a6:ea:7c:9a:6d:a3:57: c7:58:3e:a0:a4:57:4d:f0:66:9c:a1:4e:8c:cb:76:85:46:09: 6a:da:5c:03:86:b6:49:65:df:64:fd:a0:d0:70:fc:86:fb:a4: d4:07:e7:05:92:28:13:45:2e:8f:55:29:d5:cb:d5:bf:3e:92: 2d:08:fe:99:43:87:90:71:f1:58:86:65:23:e1:e6:85:e8:89: 44:ba:16:b9:c8:23:af:ae:98:5e:83:d8:3c:bc:54:ac:87:c8: c2:33:13:31:ea:e2:52:56:db:83:88:72:61:d4:9c:18:e5:88: 71:b8:c7:02:29:78:9e:d2:e4:41:06:b6:ee:f9:b5:20:ce:6f: bb:55:f5:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr/+7Gn2FS7TmLbKjlxPQ8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjA4MjIwMTE2WhcNMjUxMjA5MjIwMTE2WjAzMTEwLwYDVQQD EyhiOTk5NzIwNTQyOTUxYTcxZTZlYTcwZTY3MzkzODExNTJjYTkxMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDWNgg1Z1LUUMNxQ6EXWMne6o8L5 IhYZatPdOJAhGNoAszY3ATEAH2YyeJ2B7gUZO22T8zLpf6rULeeEljso/W2sXfI6 b4ox/86aiFfh664s02VeCjdTwciXor3mZIZBPl1ny21y5rgnzNCSepB3MhabAdEc RgyndmezH6zNOrmMtggZbYGnnIIX9IVJTivFVtzbFEQCJIZwXSB7xf4mZeRJpVvU SKAJ7E2eqGahEneMKigtuX5XBh7Gx4Hd8AWh0RBYANrj3TgWc7n04LqxO5fusm4Y 6ofPCvLWhn+FwFOT+TDfcgFIU9Xsz1VCfykNegxbAHFTr0cLRf1n7B7SWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmZcgVClRpx5upw5nOTgRUsqRE4MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz3pnfMAt G0DfSXQqclW5ziIvA8DzwBXpjxohmEQoXDFhrwEDVo2LmZMf+4nWLxN3uxottDiM eBPbXMJvXKYQEwxwE/lr/2uhDDXATKxOXh1S4glzD1VS95q1NSTtsW74or25XDuO kXtiFFZEejqtZ6xn7rzPNPCm6nyabaNXx1g+oKRXTfBmnKFOjMt2hUYJatpcA4a2 SWXfZP2g0HD8hvuk1AfnBZIoE0Uuj1Up1cvVvz6SLQj+mUOHkHHxWIZlI+HmheiJ RLoWucgjr66YXoPYPLxUrIfIwjMTMeriUlbbg4hyYdScGOWIcbjHAil4ntLkQQa2 7vm1IM5vu1X1Mw== -----END CERTIFICATE-----Generated at Tue Dec 9 04:06:02 2025 by rpki-client