This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: uW0Q6nyRBGke7bNsMVVfjj3y/CHIvNh9DA1/psdSx/A= Subject key identifier: B2:43:79:43:A7:D5:A8:35:07:F2:82:89:D9:DB:8D:60:FC:88:05:61 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 43B44CAEBE92DAFD776448086B9393334A9BA477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 035A Signing time: Mon 19 Jan 2026 12:43:21 +0000 Manifest this update: Mon 19 Jan 2026 12:38:21 +0000 Manifest next update: Tue 20 Jan 2026 14:27:21 +0000 Files and hashes: 1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 4: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: XHwXdrzmI0fGaL0vI9cAGDKD5JHFWKQcOM57Dd6e9QE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b4:4c:ae:be:92:da:fd:77:64:48:08:6b:93:93:33:4a:9b:a4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 19 12:38:21 2026 GMT Not After : Jan 20 14:27:21 2026 GMT Subject: CN=B2437943A7D5A83507F28289D9DB8D60FC880561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:a3:a7:aa:cb:64:4b:32:b6:c1:85:57:c2: 6d:8e:f3:85:4a:cb:15:34:52:ee:e0:68:39:b5:84: 54:88:12:8d:b1:51:a1:24:2b:40:aa:3b:af:47:be: 0c:6b:68:bc:fa:fa:2d:8c:30:47:1a:6e:7d:f5:2e: 9c:71:8a:bd:93:59:e6:60:3e:10:3d:55:e6:e4:ff: 5a:b1:00:b8:77:70:11:eb:62:be:ba:59:0e:ac:6e: f8:f6:11:8d:33:ee:8c:31:9e:19:c8:ed:81:e8:78: c2:0c:4e:29:59:fb:b1:60:66:89:b3:69:6c:a6:ee: 6f:30:ce:f7:65:0c:2b:09:4e:7b:78:b1:70:e8:8b: 21:7e:bd:24:ff:f3:8a:24:dd:d4:0a:f5:bd:b8:00: 07:28:31:ad:f5:2a:00:b2:83:4b:2e:49:25:0c:c2: 6c:04:f0:68:89:4e:d3:b8:0d:91:89:94:a6:b8:c5: 6f:a0:28:1c:4b:e6:4a:44:b6:40:cf:92:56:92:00: cc:bd:82:c0:21:cf:23:f7:64:b0:02:db:29:96:05: af:f6:13:a4:00:e2:98:44:0e:41:ef:63:ba:b0:88: 61:cc:67:78:b6:88:66:51:97:e5:69:7c:d2:a5:40: 80:32:57:15:da:bb:91:d2:59:ae:17:16:0f:e8:bc: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:43:79:43:A7:D5:A8:35:07:F2:82:89:D9:DB:8D:60:FC:88:05:61 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:93:76:c3:2a:65:19:b5:c2:0b:8d:9d:3f:78:45:f4:2c:ac: fb:a5:13:50:93:78:7e:64:8d:28:a3:8e:1c:78:05:06:bf:c8: 40:de:cb:db:77:5f:e0:5f:02:9a:9f:33:b9:c4:c8:44:db:60: a3:52:26:61:9e:fe:dd:ea:a8:05:aa:54:c3:24:49:76:ee:53: 1d:9a:aa:8c:cb:30:f6:89:d5:f7:d0:e1:38:24:18:68:63:c4: 36:21:23:80:67:0a:4a:57:ff:a5:f5:68:f6:97:57:6d:7d:ed: 2d:d8:2f:ff:93:45:3e:7c:07:4e:32:15:bc:43:09:18:68:05: c8:36:2d:11:8e:a7:8c:b7:7c:fa:e2:f7:f0:9d:6e:98:52:a5: 3d:e6:e7:40:00:1b:81:7d:92:04:67:ee:dd:cf:e1:87:e0:44: a0:54:a0:52:ff:d5:d7:f8:d4:76:c8:d1:d7:ca:f8:33:87:c7: e5:a5:68:56:74:da:75:a1:ad:f0:f8:57:ac:dc:68:78:56:4b: 01:eb:b9:9e:db:35:4f:b5:27:16:ab:41:4c:89:bf:9d:ec:d8: e2:ef:c6:f6:91:b0:b2:83:74:80:07:ce:4f:ff:10:14:6c:88: 10:ab:1b:85:b3:d9:5a:5f:a8:89:54:3e:df:7d:b8:fc:39:a4: ac:54:f7:63 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ7RMrr6S2v13ZEgIa5OTM0qbpHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMTkxMjM4MjFaFw0yNjAxMjAxNDI3MjFaMDMxMTAvBgNV BAMTKEIyNDM3OTQzQTdENUE4MzUwN0YyODI4OUQ5REI4RDYwRkM4ODA1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliqOnqstkSzK2wYVXwm2O84VK yxU0Uu7gaDm1hFSIEo2xUaEkK0CqO69HvgxraLz6+i2MMEcabn31Lpxxir2TWeZg PhA9Vebk/1qxALh3cBHrYr66WQ6sbvj2EY0z7owxnhnI7YHoeMIMTilZ+7FgZomz aWym7m8wzvdlDCsJTnt4sXDoiyF+vST/84ok3dQK9b24AAcoMa31KgCyg0suSSUM wmwE8GiJTtO4DZGJlKa4xW+gKBxL5kpEtkDPklaSAMy9gsAhzyP3ZLAC2ymWBa/2 E6QA4phEDkHvY7qwiGHMZ3i2iGZRl+VpfNKlQIAyVxXau5HSWa4XFg/ovIZVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUskN5Q6fVqDUH8oKJ2duNYPyIBWEwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZN2wyplGbXCC42dP3hF 9Cys+6UTUJN4fmSNKKOOHHgFBr/IQN7L23df4F8Cmp8zucTIRNtgo1ImYZ7+3eqo BapUwyRJdu5THZqqjMsw9onV99DhOCQYaGPENiEjgGcKSlf/pfVo9pdXbX3tLdgv /5NFPnwHTjIVvEMJGGgFyDYtEY6njLd8+uL38J1umFKlPebnQAAbgX2SBGfu3c/h h+BEoFSgUv/V1/jUdsjR18r4M4fH5aVoVnTadaGt8PhXrNxoeFZLAeu5nts1T7Un FqtBTIm/nezY4u/G9pGwsoN0gAfOT/8QFGyIEKsbhbPZWl+oiVQ+3324/DmkrFT3 Yw== -----END CERTIFICATE-----Generated at Tue Jan 20 05:52:56 2026 by rpki-client