This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: SYbC7bR2jdtPxC9di3Uyy5AGAlB9BTrKZPpKGULOrE0= Subject key identifier: 62:47:E8:9E:B4:95:C7:93:26:43:BA:82:BD:D9:9E:95:18:29:34:1A Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B360E89824F4DA9131D2AE62445CCE08C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 147D Signing time: Fri 19 Dec 2025 10:01:20 +0000 Manifest this update: Fri 19 Dec 2025 10:01:20 +0000 Manifest next update: Sat 20 Dec 2025 10:01:20 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: 8ggPPkcTtwpIduaFZ2ucNmOC18E.roa (hash: Xv8NACdtijEIpq02xKtXJiaJWlriVPKXLxQsvd28ePU=) 12: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: F027_GP5pmh6_Thty6xAGao2ml0.roa (hash: 3Cg2lriFIgTA68tyGGL6VuH3WUWBtVlXvUjAgL25IQM=) 16: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 17: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 18: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 19: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: dvpAre/bWWDckY6qz0Xm45C7cbaNOFgZXTCzNrAMnKY=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 24: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 25: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 26: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 27: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 28: uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa (hash: tKpEQyO7QtsNWedY5Awj4bLBL8ot/Tw/yYR9I0s7bqM=) 29: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 30: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:89:82:4f:4d:a9:13:1d:2a:e6:24:45:cc:e0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 19 10:01:20 2025 GMT Not After : Dec 20 10:01:20 2025 GMT Subject: CN=6247e89eb495c7932643ba82bdd99e951829341a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:9d:c5:16:8f:9e:84:16:50:cf:d0:0f:cc: 1d:9e:a0:68:f4:70:be:d7:2a:50:fc:ee:3e:b0:c4: c9:1e:07:ec:97:0a:84:6d:c2:1c:4c:8e:c9:09:e9: d7:b7:74:bc:08:37:6d:80:d8:b3:f1:04:99:2d:39: 85:07:03:98:42:29:25:aa:2f:1d:31:8c:ba:5d:b5: 22:56:96:7c:65:73:d5:b3:4b:b1:92:d4:da:e7:1d: 73:8a:8b:b8:3c:f2:37:71:fc:6b:39:62:67:43:d5: 15:86:0c:64:c6:7e:d4:a0:a9:d0:66:a7:03:96:d3: f7:b8:2b:ae:db:03:11:7b:90:bd:ae:ee:bb:9d:43: 46:95:9f:45:48:10:6c:ab:5a:ce:b5:b9:73:29:2f: 4f:47:8b:37:d4:37:61:c5:a7:80:84:a8:7c:f9:dd: 3f:1e:8b:95:17:c5:81:e6:1f:0e:c5:d5:63:2e:9e: 5e:76:da:48:48:07:0d:a8:df:62:db:dd:c6:57:95: b2:75:6a:7b:6e:7b:16:7e:d1:ba:5f:71:78:26:df: dd:61:99:66:aa:6e:38:c2:2a:22:18:f6:17:f3:44: ea:ad:67:1e:28:0b:50:22:1f:b3:77:46:fe:53:90: 46:52:3c:05:5f:3e:bd:59:fb:0c:bd:1d:48:1b:58: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:47:E8:9E:B4:95:C7:93:26:43:BA:82:BD:D9:9E:95:18:29:34:1A X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:61:a1:44:2a:16:3a:99:1c:c9:51:dd:f1:ca:a2:3f:ee:0f: f6:e1:52:e0:5a:52:db:6f:dd:0e:c3:54:18:fd:e3:88:17:90: 52:10:14:4c:46:f8:e5:b8:7d:5e:49:3d:6b:fd:45:28:19:5e: aa:4b:78:aa:11:1b:66:f0:81:60:81:0e:4b:dc:f1:15:09:22: 4a:61:fa:4e:f3:7d:5d:c5:fa:71:f6:1a:d6:fc:b9:33:ab:54: d6:f9:78:77:04:76:7c:ce:11:11:08:f2:11:7b:dd:5c:7a:c9: 04:25:d7:a6:6b:05:cd:e3:35:80:73:5e:9e:fd:4e:3c:91:c7: f6:dc:12:fd:3c:6c:74:16:e1:6c:8a:6d:20:02:a0:65:1d:b7: ff:bc:b6:b9:02:62:8d:ef:d9:ff:ae:d4:6d:a1:9d:c5:f2:a9: 46:3c:99:d7:ef:9c:cb:de:10:73:39:f1:ae:55:28:77:23:bc: f2:51:7c:07:60:cf:a7:c5:f7:1b:d3:90:88:29:8c:c7:0d:f9: 7d:e3:c5:87:d8:41:23:e2:40:8b:44:a0:f9:40:f3:1a:73:24: aa:e0:30:a2:26:16:16:55:4c:18:28:fa:c3:17:98:ae:33:ee: 2e:c3:71:65:88:c7:1e:22:a8:ff:a5:e9:de:92:cd:15:37:3a: 0c:e4:ea:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DomCT02pEx0q5iRFzOCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjE5MTAwMTIwWhcNMjUxMjIwMTAwMTIwWjAzMTEwLwYDVQQD Eyg2MjQ3ZTg5ZWI0OTVjNzkzMjY0M2JhODJiZGQ5OWU5NTE4MjkzNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA2dxRaPnoQWUM/QD8wdnqBo9HC+ 1ypQ/O4+sMTJHgfslwqEbcIcTI7JCenXt3S8CDdtgNiz8QSZLTmFBwOYQiklqi8d MYy6XbUiVpZ8ZXPVs0uxktTa5x1ziou4PPI3cfxrOWJnQ9UVhgxkxn7UoKnQZqcD ltP3uCuu2wMRe5C9ru67nUNGlZ9FSBBsq1rOtblzKS9PR4s31DdhxaeAhKh8+d0/ HouVF8WB5h8OxdVjLp5edtpISAcNqN9i293GV5WydWp7bnsWftG6X3F4Jt/dYZlm qm44wioiGPYX80TqrWceKAtQIh+zd0b+U5BGUjwFXz69WfsMvR1IG1gKlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJH6J60lceTJkO6gr3ZnpUYKTQaMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGGhRCoW OpkcyVHd8cqiP+4P9uFS4FpS22/dDsNUGP3jiBeQUhAUTEb45bh9Xkk9a/1FKBle qkt4qhEbZvCBYIEOS9zxFQkiSmH6TvN9XcX6cfYa1vy5M6tU1vl4dwR2fM4REQjy EXvdXHrJBCXXpmsFzeM1gHNenv1OPJHH9twS/TxsdBbhbIptIAKgZR23/7y2uQJi je/Z/67UbaGdxfKpRjyZ1++cy94QcznxrlUodyO88lF8B2DPp8X3G9OQiCmMxw35 fePFh9hBI+JAi0Sg+UDzGnMkquAwoiYWFlVMGCj6wxeYrjPuLsNxZYjHHiKo/6Xp 3pLNFTc6DOTqyw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:01:34 2025 by rpki-client