This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: 6WEZJPdwsgTmo41huQP1jAoSy2ZPzIBxrA7yNR+8N4M= Subject key identifier: E6:C3:CC:9A:93:DD:5E:13:16:26:2E:84:17:3F:90:DA:4B:4D:E2:8E Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 22CA6E8E709D98BFF09D0D081B2737E877ECA61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 035E Signing time: Thu 22 Jan 2026 09:58:21 +0000 Manifest this update: Thu 22 Jan 2026 09:53:21 +0000 Manifest next update: Fri 23 Jan 2026 12:44:21 +0000 Files and hashes: 1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: usJA4AiKHrLQmPeGRC7E0xvSjGU+VKatEezOXKo9Rp8=) 2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 3: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 12:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ca:6e:8e:70:9d:98:bf:f0:9d:0d:08:1b:27:37:e8:77:ec:a6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 22 09:53:21 2026 GMT Not After : Jan 23 12:44:21 2026 GMT Subject: CN=E6C3CC9A93DD5E1316262E84173F90DA4B4DE28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:f2:e0:a3:b5:a2:52:d5:42:ca:d8:f9:b6: 6d:18:f5:a5:45:82:8a:ad:e6:89:bf:84:31:76:ca: cd:dd:f8:47:00:2d:3e:46:a2:0f:0f:4c:e6:1e:ff: 1a:3d:fa:95:e7:1c:b9:24:86:26:e8:0d:ed:2d:1a: 23:28:42:de:01:bf:32:fa:1a:3e:f6:01:dc:59:af: 48:b0:eb:9b:46:bc:b9:fc:b1:55:6d:ac:b6:53:4d: b0:d3:4a:fd:10:3d:41:9b:43:8d:59:15:2d:d6:a2: 2a:5c:08:51:99:80:9e:a0:d0:3e:6e:1d:40:c3:da: de:9d:5f:95:c2:2b:63:ee:1a:f6:12:6a:0e:57:19: 64:a7:7a:2d:44:5c:41:3c:7c:40:f1:ea:3a:d6:fa: e0:cc:11:ed:0d:58:6a:b3:6d:76:8f:9c:e1:73:11: 78:59:3f:e3:b1:b8:d7:f0:c4:aa:7b:9f:d9:ca:15: 01:ee:c9:73:c7:a0:7f:19:dd:d0:c8:23:fe:fa:4b: de:cc:1a:cf:12:eb:6a:24:b4:2d:9f:83:e9:c0:22: d1:2a:1f:64:cf:3b:a5:51:80:0e:d6:88:79:ef:13: eb:cb:ff:3d:13:76:e3:3d:02:7a:74:35:5a:de:ab: 67:f4:37:5c:00:3e:88:4e:48:c3:57:c0:a3:bd:c9: 58:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C3:CC:9A:93:DD:5E:13:16:26:2E:84:17:3F:90:DA:4B:4D:E2:8E X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8e:7b:8e:ff:70:3a:e9:32:b9:7e:62:e1:c7:1c:52:44:5b: b8:d0:9e:a8:e9:82:07:ff:ac:b0:89:a7:3f:a1:10:fc:de:09: 35:78:53:22:83:56:8c:67:c7:92:41:a5:03:d4:2d:07:00:e6: a0:75:f7:f7:4a:74:07:9d:52:e3:32:80:5e:c7:6b:de:67:93: 48:6e:a4:2a:d9:46:26:0a:c8:1e:47:28:66:a9:f7:92:05:7a: 74:d2:26:b9:22:9a:fa:21:13:12:f9:8e:08:ac:17:5a:e0:20: 43:18:31:c0:74:22:49:68:b5:01:a5:36:ff:99:1a:d7:16:a2: ed:9e:56:5d:d3:81:97:0d:62:cb:35:56:19:5f:a7:60:3b:69: b1:6e:e4:a1:e2:00:5c:a3:cd:84:93:40:4e:7b:b2:6a:96:ee: ac:15:e3:3e:00:9b:d1:60:a6:11:b9:9d:8e:1e:19:35:2b:14: 1b:57:17:b4:41:86:9b:dd:7d:58:2f:75:ec:b7:37:52:30:18: db:72:23:f7:aa:c9:5f:d4:18:d7:84:79:05:5c:34:9e:b2:3c: 28:4e:85:93:2c:a5:25:28:68:20:8a:c3:cd:8b:9e:2e:68:0f: ba:01:fe:bb:87:c4:1c:37:7a:bc:ae:f2:3a:99:6d:77:d3:52: 12:71:f9:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIspujnCdmL/wnQ0IGyc36Hfsph8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMjIwOTUzMjFaFw0yNjAxMjMxMjQ0MjFaMDMxMTAvBgNV BAMTKEU2QzNDQzlBOTNERDVFMTMxNjI2MkU4NDE3M0Y5MERBNEI0REUyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOvLgo7WiUtVCytj5tm0Y9aVF goqt5om/hDF2ys3d+EcALT5Gog8PTOYe/xo9+pXnHLkkhiboDe0tGiMoQt4BvzL6 Gj72AdxZr0iw65tGvLn8sVVtrLZTTbDTSv0QPUGbQ41ZFS3WoipcCFGZgJ6g0D5u HUDD2t6dX5XCK2PuGvYSag5XGWSnei1EXEE8fEDx6jrW+uDMEe0NWGqzbXaPnOFz EXhZP+OxuNfwxKp7n9nKFQHuyXPHoH8Z3dDII/76S97MGs8S62oktC2fg+nAItEq H2TPO6VRgA7WiHnvE+vL/z0TduM9Anp0NVreq2f0N1wAPohOSMNXwKO9yVjHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5sPMmpPdXhMWJi6EFz+Q2ktN4o4wHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo57jv9wOukyuX5i4ccc UkRbuNCeqOmCB/+ssImnP6EQ/N4JNXhTIoNWjGfHkkGlA9QtBwDmoHX390p0B51S 4zKAXsdr3meTSG6kKtlGJgrIHkcoZqn3kgV6dNImuSKa+iETEvmOCKwXWuAgQxgx wHQiSWi1AaU2/5ka1xai7Z5WXdOBlw1iyzVWGV+nYDtpsW7koeIAXKPNhJNATnuy apburBXjPgCb0WCmEbmdjh4ZNSsUG1cXtEGGm919WC917Lc3UjAY23Ij96rJX9QY 14R5BVw0nrI8KE6FkyylJShoIIrDzYueLmgPugH+u4fEHDd6vK7yOpltd9NSEnH5 /A== -----END CERTIFICATE-----Generated at Fri Jan 23 05:51:05 2026 by rpki-client