This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: a1ibKm4KuKD+LirwSmvRMEc5Av4fkq8SdRiqD+oux8U= Subject key identifier: 7D:28:22:4B:5A:A0:75:33:6B:B5:4D:43:88:05:69:A2:1A:A2:F4:3A Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 53167B73A0EF01694D1594D297242EB20075179E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 034D Signing time: Fri 09 Jan 2026 17:53:06 +0000 Manifest this update: Fri 09 Jan 2026 17:48:06 +0000 Manifest next update: Sat 10 Jan 2026 19:32:06 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: DuRlw/sqtamHNJ0rBpKXj8FU1srwmh4i38S2Iu/Sta4=) 4: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:16:7b:73:a0:ef:01:69:4d:15:94:d2:97:24:2e:b2:00:75:17:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 9 17:48:06 2026 GMT Not After : Jan 10 19:32:06 2026 GMT Subject: CN=7D28224B5AA075336BB54D43880569A21AA2F43A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:7f:62:97:a9:07:2e:d6:d7:5a:4d:ae:f7: 1e:cd:72:56:6c:28:04:a1:0b:72:d9:a2:ec:86:15: 74:1c:d5:a5:98:c5:34:d7:d6:ef:a1:ba:80:46:f5: 13:2e:52:40:01:1e:88:d2:8e:24:50:23:a7:e4:ae: e4:08:fe:b2:fc:d7:a8:58:9d:94:48:61:5b:48:59: bc:15:d7:cc:15:bc:04:9c:b7:93:30:da:5f:f1:15: 8e:10:64:ce:3e:07:7c:31:61:f4:09:40:3a:07:b3: 7b:27:60:b8:28:28:9d:a2:30:e0:e9:e3:e6:af:a5: 4a:34:b4:7e:b5:cf:e3:ba:35:45:62:db:f2:4d:fc: bc:90:0b:63:a5:16:11:d0:ae:f5:23:c8:99:24:07: 67:5b:55:b8:8c:a5:bb:cd:70:ba:25:02:1c:dd:7d: 25:f1:8c:f2:28:d2:7f:d1:84:0e:7a:59:14:3f:64: e0:e5:9c:a5:f7:7b:21:ea:d7:80:85:e8:37:28:12: 21:1a:72:64:4a:90:75:c3:44:ea:cb:b7:b0:58:8d: ef:ff:bf:5f:da:67:2c:2c:31:7e:53:f2:95:71:66: 25:5b:35:ad:3f:18:db:c2:84:d5:60:93:ac:ff:7a: 9a:30:3c:a6:af:86:0f:a9:51:f8:10:16:28:82:77: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:22:4B:5A:A0:75:33:6B:B5:4D:43:88:05:69:A2:1A:A2:F4:3A X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:45:d3:ff:e3:60:f7:58:0c:ec:9c:6b:a0:cb:b9:f5:01:c7: 9e:3d:25:95:68:e2:8e:90:36:e0:0a:ee:5d:6e:89:c1:97:fc: 0b:3e:c6:01:d7:76:ad:40:25:ab:1a:e9:db:a8:99:56:3e:57: 93:6b:8e:79:2d:10:8c:45:91:b5:22:ed:1a:b0:c8:40:5b:89: b6:fc:92:f0:d5:33:7f:45:3b:79:2d:df:aa:4b:b6:ef:63:e9: 7f:7c:41:97:12:1a:fe:a7:88:d3:d6:a0:58:14:a9:ab:eb:03: b9:41:8f:89:60:de:7d:7a:48:e3:5a:9b:e8:2b:73:9f:cc:d7: da:1c:5e:9c:a9:e5:36:77:e9:71:09:68:17:93:80:e2:99:18: 8b:6c:ff:26:09:fa:8d:db:14:49:f1:43:6d:e2:70:df:ff:b3: 40:52:f1:64:f3:ea:e1:a3:f0:5e:bb:f9:d7:c3:3e:46:b5:da: ed:f1:8f:f2:02:93:18:02:16:dd:51:90:3b:db:6f:4d:c9:09: 26:7a:cc:41:80:9f:f4:18:c9:48:40:3d:c1:cf:02:72:ce:cb: d0:2e:2c:22:f0:e5:bc:dd:2b:2a:d3:79:55:b6:f1:20:8b:92: 5b:16:66:1b:ee:9c:6f:74:ca:03:a9:b4:0e:1c:1d:76:a6:88: 09:cf:0b:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUxZ7c6DvAWlNFZTSlyQusgB1F54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMDkxNzQ4MDZaFw0yNjAxMTAxOTMyMDZaMDMxMTAvBgNV BAMTKDdEMjgyMjRCNUFBMDc1MzM2QkI1NEQ0Mzg4MDU2OUEyMUFBMkY0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgn9il6kHLtbXWk2u9x7NclZs KAShC3LZouyGFXQc1aWYxTTX1u+huoBG9RMuUkABHojSjiRQI6fkruQI/rL816hY nZRIYVtIWbwV18wVvASct5Mw2l/xFY4QZM4+B3wxYfQJQDoHs3snYLgoKJ2iMODp 4+avpUo0tH61z+O6NUVi2/JN/LyQC2OlFhHQrvUjyJkkB2dbVbiMpbvNcLolAhzd fSXxjPIo0n/RhA56WRQ/ZODlnKX3eyHq14CF6DcoEiEacmRKkHXDROrLt7BYje// v1/aZywsMX5T8pVxZiVbNa0/GNvChNVgk6z/epowPKavhg+pUfgQFiiCd04fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfSgiS1qgdTNrtU1DiAVpohqi9DowHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEXT/+Ng91gM7JxroMu5 9QHHnj0llWjijpA24AruXW6JwZf8Cz7GAdd2rUAlqxrp26iZVj5Xk2uOeS0QjEWR tSLtGrDIQFuJtvyS8NUzf0U7eS3fqku272Ppf3xBlxIa/qeI09agWBSpq+sDuUGP iWDefXpI41qb6Ctzn8zX2hxenKnlNnfpcQloF5OA4pkYi2z/Jgn6jdsUSfFDbeJw 3/+zQFLxZPPq4aPwXrv518M+RrXa7fGP8gKTGAIW3VGQO9tvTckJJnrMQYCf9BjJ SEA9wc8Ccs7L0C4sIvDlvN0rKtN5VbbxIIuSWxZmG+6cb3TKA6m0DhwddqaICc8L 8Q== -----END CERTIFICATE-----Generated at Sat Jan 10 08:56:09 2026 by rpki-client