This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: i17diewK9ikbldk6lnkK0DMgC7FmiBhOL+MpW8v3Q3c= Subject key identifier: 47:D6:22:E1:91:5D:0B:9A:64:18:60:30:0D:3D:33:50:D0:E3:64:E4 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 5DE76CC8D432C22281C417B032823C873E3222DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 036A Signing time: Sat 31 Jan 2026 05:58:32 +0000 Manifest this update: Sat 31 Jan 2026 05:53:32 +0000 Manifest next update: Sun 01 Feb 2026 09:40:32 +0000 Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: AAMzox/9bsEf835UU63apRs9z8pEPcJ73Smz/w47v+E=) 4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e7:6c:c8:d4:32:c2:22:81:c4:17:b0:32:82:3c:87:3e:32:22:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 31 05:53:32 2026 GMT Not After : Feb 1 09:40:32 2026 GMT Subject: CN=47D622E1915D0B9A641860300D3D3350D0E364E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:65:8e:ca:29:59:23:70:6a:39:95:57:d3: 05:ea:da:b0:aa:21:3b:c9:cc:7d:20:6e:c6:9f:97: 59:28:5d:f7:48:fd:a4:8e:97:98:df:18:92:d6:e2: 59:49:19:8f:19:f0:73:e4:92:0e:9a:4f:17:7c:64: 11:69:60:cc:61:7e:9f:f6:eb:31:8d:02:b2:3f:0a: b4:45:42:52:6c:be:32:9a:74:90:e0:c2:d0:ac:33: 99:ff:22:64:d6:e4:d3:b4:ea:64:48:15:db:00:64: 6a:ed:cd:d2:69:b7:dd:a4:d9:69:aa:b1:30:1e:ab: b2:fa:fc:98:76:c7:3f:53:7a:0d:92:a1:b6:4c:61: f2:a6:b4:46:43:ce:63:02:96:1a:df:12:5b:a0:29: ac:71:95:5f:a0:d7:1e:25:92:f6:8d:a4:38:e7:6f: 1f:92:8e:60:5c:f5:cf:79:48:5a:80:f6:6a:ba:8e: ab:0a:89:a7:62:2a:5e:c2:84:69:6b:0c:be:82:d1: c1:7e:a4:3c:7a:ad:0a:25:53:76:1f:03:e3:6c:f0: 69:19:64:5b:c6:57:b0:87:cd:82:b8:0d:20:6c:b0: 6e:a6:db:ad:5e:25:48:1c:28:08:17:db:f2:6e:b8: 35:cf:aa:ed:ad:3b:6e:9f:7a:25:f1:70:2f:41:5b: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D6:22:E1:91:5D:0B:9A:64:18:60:30:0D:3D:33:50:D0:E3:64:E4 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:81:73:e4:ff:2c:eb:f6:52:ad:64:70:54:8c:50:4a:24:6b: 96:9e:21:a9:fc:cc:bd:c0:92:c6:8d:20:2a:11:87:70:2f:4c: 9e:58:90:7e:2a:0d:d0:5a:45:de:92:89:f8:a3:68:20:6e:16: fb:f0:9d:ec:25:34:7a:20:e7:bd:2e:34:d4:09:74:a1:86:4b: c0:f8:26:28:d4:1d:1a:54:c5:0c:bd:65:0f:8e:8b:75:df:68: 72:30:86:93:b4:d6:f3:33:e6:49:af:18:0a:6b:dd:22:11:8e: f9:8c:84:58:3d:71:12:fb:48:12:dc:35:54:42:64:40:3f:a0: ae:f4:8a:e9:c7:9c:f0:07:4e:09:e6:88:06:a4:96:1d:4f:ee: be:58:cd:eb:a1:3f:cd:02:76:7a:60:34:81:ba:9f:48:e2:d2: 06:7e:fa:55:73:8e:5d:70:01:07:34:1f:ae:21:9a:80:dd:f0: 42:ea:2e:29:86:a8:b3:61:38:c2:c8:bf:1c:27:83:f0:37:b5: 68:e3:ed:51:b5:c8:e9:eb:14:60:ae:72:56:39:c6:85:2d:e8: 29:78:68:71:12:95:86:16:cf:64:d6:63:65:e5:22:37:d1:b0: c8:ce:15:86:5e:2b:46:cf:b1:d8:89:ea:c7:ff:6e:34:0a:b0: 47:56:75:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXedsyNQywiKBxBewMoI8hz4yIt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMzEwNTUzMzJaFw0yNjAyMDEwOTQwMzJaMDMxMTAvBgNV BAMTKDQ3RDYyMkUxOTE1RDBCOUE2NDE4NjAzMDBEM0QzMzUwRDBFMzY0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTmWOyilZI3BqOZVX0wXq2rCq ITvJzH0gbsafl1koXfdI/aSOl5jfGJLW4llJGY8Z8HPkkg6aTxd8ZBFpYMxhfp/2 6zGNArI/CrRFQlJsvjKadJDgwtCsM5n/ImTW5NO06mRIFdsAZGrtzdJpt92k2Wmq sTAeq7L6/Jh2xz9Teg2SobZMYfKmtEZDzmMClhrfElugKaxxlV+g1x4lkvaNpDjn bx+SjmBc9c95SFqA9mq6jqsKiadiKl7ChGlrDL6C0cF+pDx6rQolU3YfA+Ns8GkZ ZFvGV7CHzYK4DSBssG6m261eJUgcKAgX2/JuuDXPqu2tO26feiXxcC9BW7HlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUR9Yi4ZFdC5pkGGAwDT0zUNDjZOQwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYFz5P8s6/ZSrWRwVIxQ SiRrlp4hqfzMvcCSxo0gKhGHcC9MnliQfioN0FpF3pKJ+KNoIG4W+/Cd7CU0eiDn vS401Al0oYZLwPgmKNQdGlTFDL1lD46Ldd9ocjCGk7TW8zPmSa8YCmvdIhGO+YyE WD1xEvtIEtw1VEJkQD+grvSK6cec8AdOCeaIBqSWHU/uvljN66E/zQJ2emA0gbqf SOLSBn76VXOOXXABBzQfriGagN3wQuouKYaos2E4wsi/HCeD8De1aOPtUbXI6esU YK5yVjnGhS3oKXhocRKVhhbPZNZjZeUiN9GwyM4Vhl4rRs+x2Inqx/9uNAqwR1Z1 BQ== -----END CERTIFICATE-----Generated at Sat Jan 31 11:42:42 2026 by rpki-client