This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: QtuRzQde6Cy7FH6JRFDoOkAQCr/UpjWr0fg953bc0vI= Subject key identifier: 96:76:C6:7E:1A:60:96:79:56:0E:0B:57:56:46:54:74:93:0F:16:78 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 4D986931A8E93B809775AA7FF9C1A3BCF80ED7F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0364 Signing time: Mon 26 Jan 2026 20:13:25 +0000 Manifest this update: Mon 26 Jan 2026 20:08:25 +0000 Manifest next update: Tue 27 Jan 2026 22:54:25 +0000 Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: /D0eor4ENwZ86mkldXvM9uhi5ZN5vCAEKGk1qek+HRE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:98:69:31:a8:e9:3b:80:97:75:aa:7f:f9:c1:a3:bc:f8:0e:d7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 26 20:08:25 2026 GMT Not After : Jan 27 22:54:25 2026 GMT Subject: CN=9676C67E1A609679560E0B5756465474930F1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:a2:de:85:ac:52:21:a3:22:77:8d:e0:93: fe:0e:12:a1:55:eb:a8:c1:99:e2:92:b6:ee:7a:c9: c1:e5:e3:15:c0:0f:70:f8:69:54:26:36:d6:56:b1: f8:5a:0f:c0:bd:27:0a:cc:72:1d:03:b1:c0:72:a0: 89:db:81:b7:51:8e:7a:9f:0f:cc:44:18:9f:73:06: fa:8f:99:85:9c:6b:9e:13:1a:1f:13:eb:2d:99:c0: 7f:0c:0e:98:79:6f:c5:0e:4a:3a:52:b1:b2:97:f3: d7:ff:68:f8:e5:73:4d:52:e3:1f:7d:d7:a1:20:21: 41:6e:ab:2a:e3:10:84:da:33:31:d3:83:dd:d6:ec: 62:7e:03:1f:bd:ee:34:d8:08:2d:87:16:63:f3:cd: ad:54:e4:08:79:12:ef:c7:27:07:2f:5f:d5:20:d9: 4c:76:ab:3c:3d:3c:6e:37:44:3a:a9:dc:8b:19:95: 33:55:92:57:7b:6f:e6:15:86:dd:95:75:8d:fa:72: c2:8c:32:95:3c:59:9f:0a:2a:0d:5b:bf:1e:3a:e7: df:ad:32:50:21:bb:8e:c5:8f:e5:68:54:74:b8:8f: e7:4f:6b:fe:ba:f9:8e:14:d3:22:39:41:7d:e2:6d: d5:95:b2:3f:58:42:a3:d8:94:f2:e2:37:bb:fd:59: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:76:C6:7E:1A:60:96:79:56:0E:0B:57:56:46:54:74:93:0F:16:78 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d5:41:74:15:ee:c7:f6:2e:01:d0:29:b1:7c:ca:42:44:56: 62:74:70:68:0c:da:7d:6e:3f:51:d6:da:fb:48:e6:3d:31:16: 2b:4e:63:77:dc:2f:a8:6e:68:01:1d:a2:c8:fa:9e:dd:d7:71: b0:62:ae:6e:67:f2:18:57:16:f1:f0:39:bd:78:fd:31:4f:44: 7b:93:07:fd:91:99:8f:d7:8b:9e:54:bf:60:1b:21:f5:23:2c: 68:33:be:11:c0:d0:a2:9f:1e:84:bf:59:40:8c:93:38:8c:8e: c1:02:8b:8f:a6:4c:29:a9:7c:7b:b2:b6:5b:f5:1e:79:c2:f6: fa:7c:52:66:69:e5:eb:f4:d3:5a:cb:f5:15:b8:58:b0:51:da: 01:d9:86:73:5e:eb:f2:5b:48:5b:36:68:17:36:27:50:9a:79: cb:ca:8f:9b:19:22:0d:45:fa:69:0d:b5:64:3e:06:e7:a7:3c: a3:e9:dd:3a:9b:91:69:a2:d7:c7:c1:f0:f1:74:75:2f:dc:2e: 32:8e:7c:56:bf:71:0b:96:4d:26:f3:14:de:de:94:c4:73:dc: 9b:23:cf:df:d4:ee:59:12:e5:2d:63:a6:3a:bb:8d:42:a1:3d: 42:25:f7:c3:dd:21:2f:20:2f:eb:54:5d:fa:24:c9:87:d8:4c: ac:34:36:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTZhpMajpO4CXdap/+cGjvPgO1/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMjYyMDA4MjVaFw0yNjAxMjcyMjU0MjVaMDMxMTAvBgNV BAMTKDk2NzZDNjdFMUE2MDk2Nzk1NjBFMEI1NzU2NDY1NDc0OTMwRjE2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbKLehaxSIaMid43gk/4OEqFV 66jBmeKStu56ycHl4xXAD3D4aVQmNtZWsfhaD8C9JwrMch0DscByoInbgbdRjnqf D8xEGJ9zBvqPmYWca54TGh8T6y2ZwH8MDph5b8UOSjpSsbKX89f/aPjlc01S4x99 16EgIUFuqyrjEITaMzHTg93W7GJ+Ax+97jTYCC2HFmPzza1U5Ah5Eu/HJwcvX9Ug 2Ux2qzw9PG43RDqp3IsZlTNVkld7b+YVht2VdY36csKMMpU8WZ8KKg1bvx4659+t MlAhu47Fj+VoVHS4j+dPa/66+Y4U0yI5QX3ibdWVsj9YQqPYlPLiN7v9WThlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlnbGfhpglnlWDgtXVkZUdJMPFngwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9VBdBXux/YuAdApsXzK QkRWYnRwaAzafW4/Udba+0jmPTEWK05jd9wvqG5oAR2iyPqe3ddxsGKubmfyGFcW 8fA5vXj9MU9Ee5MH/ZGZj9eLnlS/YBsh9SMsaDO+EcDQop8ehL9ZQIyTOIyOwQKL j6ZMKal8e7K2W/UeecL2+nxSZmnl6/TTWsv1FbhYsFHaAdmGc17r8ltIWzZoFzYn UJp5y8qPmxkiDUX6aQ21ZD4G56c8o+ndOpuRaaLXx8Hw8XR1L9wuMo58Vr9xC5ZN JvMU3t6UxHPcmyPP39TuWRLlLWOmOruNQqE9QiX3w90hLyAv61Rd+iTJh9hMrDQ2 9w== -----END CERTIFICATE-----Generated at Tue Jan 27 10:49:33 2026 by rpki-client