This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: QbwkTL7qUhS/cOcQHImLspvT5kb9VMJxixgVTu2v+/8= Subject key identifier: 68:F5:A2:5A:96:C2:6C:48:F6:21:BD:C9:F7:DE:E7:60:CE:64:64:E1 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 28DBF76041F87CB932639FFB8BD1DF225A0EC7B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 030F Signing time: Tue 25 Nov 2025 08:12:37 +0000 Manifest this update: Tue 25 Nov 2025 08:07:37 +0000 Manifest next update: Wed 26 Nov 2025 11:16:37 +0000 Files and hashes: 1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: kw1ySbHyr0gWweTTGw8EB6adFW0/NlubiJPA8oToSww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:db:f7:60:41:f8:7c:b9:32:63:9f:fb:8b:d1:df:22:5a:0e:c7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 25 08:07:37 2025 GMT Not After : Nov 26 11:16:37 2025 GMT Subject: CN=68F5A25A96C26C48F621BDC9F7DEE760CE6464E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:c6:4d:78:3c:3c:2a:ad:73:67:d6:d5:f8: 27:61:79:c7:45:68:c0:2a:1f:08:44:b7:32:ba:e3: a1:6b:1a:24:e9:ee:36:97:13:dd:37:e2:fd:1a:44: 32:f7:e4:4b:6f:a4:c3:f8:c3:9e:c6:dd:35:63:53: 09:2d:5f:0e:fc:9b:b9:fe:9e:07:e6:68:7e:82:eb: fd:08:03:bc:de:df:f0:89:bb:e8:ae:54:6e:bd:8b: 02:79:a9:35:4a:a6:2b:75:47:5d:08:50:37:ee:7c: 17:cf:be:39:4c:39:1e:5d:04:fb:20:67:47:77:8f: 3f:06:fb:97:01:92:c6:22:c0:27:33:2b:05:88:89: 40:31:76:aa:bd:0b:8c:dd:01:d6:ae:be:57:d7:d1: 04:f4:eb:ae:6a:84:54:e5:41:56:c5:97:65:d6:6a: 1c:5b:b7:2d:19:d9:21:3b:f8:48:34:c7:a2:28:cc: 49:07:ed:53:0c:97:4f:0d:48:c2:22:00:b9:a9:38: ed:e2:b6:26:31:ea:ae:f9:22:50:df:f4:16:03:71: 85:8a:2e:11:1b:94:81:ce:14:76:ed:fa:09:7f:a2: 2d:ba:1c:fe:99:ca:8e:d3:17:e7:05:15:2f:b6:59: 0b:4c:d0:18:8b:8a:34:7c:56:02:ad:7b:d7:28:fd: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:A2:5A:96:C2:6C:48:F6:21:BD:C9:F7:DE:E7:60:CE:64:64:E1 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:09:fe:d7:79:b8:d7:0d:7f:55:19:e9:a2:a3:e7:1c:77:9f: f5:52:38:5d:11:b8:57:2c:62:69:7d:84:9e:3b:75:2c:a3:fd: a4:c4:62:45:01:05:6c:b3:e2:64:dc:14:22:39:fd:16:42:fd: 56:ce:01:11:44:b8:be:43:61:16:b3:5a:09:db:33:be:9e:dc: e7:ec:3b:ce:c7:eb:e6:27:18:ea:4a:bf:60:a7:53:98:c5:a5: 76:85:a9:ae:2f:9f:0c:f6:20:ea:2f:5a:c0:6c:44:53:f0:36: f4:0e:16:89:c0:ee:e5:d4:1e:4b:70:1b:d7:3c:99:f9:c3:1a: ca:82:0f:74:be:30:dc:84:39:f7:8f:b3:d3:42:cd:a2:d8:2c: 94:4a:7b:8e:60:fb:83:ef:2e:d5:38:aa:10:56:27:bb:a0:7e: 44:94:dd:a5:99:44:05:00:fe:60:4b:d5:60:8a:b6:9b:8b:e1: 9c:1a:26:ca:5b:ad:78:a5:97:91:43:c9:8d:2f:cc:37:24:7c: 50:83:47:14:bb:b5:66:2e:2f:04:5a:08:36:96:00:8c:09:5a: 95:ae:22:fd:0d:2d:23:d8:60:a6:77:e6:e0:df:53:4a:9d:86: 3b:82:74:60:b4:f4:31:a8:0c:0c:8a:3c:92:59:91:eb:06:b1: ca:d5:10:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKNv3YEH4fLkyY5/7i9HfIloOx7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjUwODA3MzdaFw0yNTExMjYxMTE2MzdaMDMxMTAvBgNV BAMTKDY4RjVBMjVBOTZDMjZDNDhGNjIxQkRDOUY3REVFNzYwQ0U2NDY0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxcZNeDw8Kq1zZ9bV+CdhecdF aMAqHwhEtzK646FrGiTp7jaXE9034v0aRDL35EtvpMP4w57G3TVjUwktXw78m7n+ ngfmaH6C6/0IA7ze3/CJu+iuVG69iwJ5qTVKpit1R10IUDfufBfPvjlMOR5dBPsg Z0d3jz8G+5cBksYiwCczKwWIiUAxdqq9C4zdAdauvlfX0QT0665qhFTlQVbFl2XW ahxbty0Z2SE7+Eg0x6IozEkH7VMMl08NSMIiALmpOO3itiYx6q75IlDf9BYDcYWK LhEblIHOFHbt+gl/oi26HP6Zyo7TF+cFFS+2WQtM0BiLijR8VgKte9co/QnZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaPWiWpbCbEj2Ib3J997nYM5kZOEwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewn+13m41w1/VRnpoqPn HHef9VI4XRG4VyxiaX2Enjt1LKP9pMRiRQEFbLPiZNwUIjn9FkL9Vs4BEUS4vkNh FrNaCdszvp7c5+w7zsfr5icY6kq/YKdTmMWldoWpri+fDPYg6i9awGxEU/A29A4W icDu5dQeS3Ab1zyZ+cMayoIPdL4w3IQ594+z00LNotgslEp7jmD7g+8u1TiqEFYn u6B+RJTdpZlEBQD+YEvVYIq2m4vhnBomyluteKWXkUPJjS/MNyR8UINHFLu1Zi4v BFoINpYAjAlala4i/Q0tI9hgpnfm4N9TSp2GO4J0YLT0MagMDIo8klmR6waxytUQ WA== -----END CERTIFICATE-----Generated at Tue Nov 25 14:33:07 2025 by rpki-client