This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: DSMBi7qXtG1NfjVtMcHa+toagvy25jpc/mYQWiXXSTU= Subject key identifier: 83:B6:D5:69:DE:57:5B:C9:33:40:19:2D:BA:71:8D:AD:03:5F:19:4A Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 324572171F8181A4D591DECE714F359CB0E39E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0313 Signing time: Fri 28 Nov 2025 08:42:40 +0000 Manifest this update: Fri 28 Nov 2025 08:37:40 +0000 Manifest next update: Sat 29 Nov 2025 09:51:40 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: d74J6nplGlUwPBBuT7mclVgiM8NVItD/E9/sJVvN4v8=) 3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 09:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:45:72:17:1f:81:81:a4:d5:91:de:ce:71:4f:35:9c:b0:e3:9e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 28 08:37:40 2025 GMT Not After : Nov 29 09:51:40 2025 GMT Subject: CN=83B6D569DE575BC93340192DBA718DAD035F194A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:b2:bb:ef:b2:eb:b2:03:2d:f4:72:e5:39: 85:16:fd:9c:75:34:01:6b:7a:d1:17:73:0c:bc:be: 2b:de:d5:a9:36:7e:de:56:58:21:b9:b5:31:18:c9: 9d:a0:2d:e8:d9:cb:4d:26:3b:26:23:31:56:28:47: 0c:43:4c:53:75:2b:8c:2f:ec:8f:d2:37:b2:cc:1f: 32:75:a2:41:2b:3d:e5:0d:27:c8:d9:85:b6:0e:79: ed:34:29:65:69:68:e8:95:85:df:55:a3:5b:0c:b9: c7:1f:cd:10:9f:1e:1a:77:b2:b9:80:10:15:5d:07: 75:73:69:27:ba:72:4f:a3:47:12:53:0e:7d:10:29: ad:2c:cc:32:9d:a3:d0:35:b6:c0:78:e2:b9:2b:4b: c7:f9:7c:27:fc:f8:b7:13:e8:60:26:c2:95:ac:56: 50:5b:3d:f2:ad:48:17:41:59:db:17:52:7f:60:81: 27:b7:50:cc:cb:d2:37:3d:97:32:e6:44:08:f0:c6: 32:f8:15:52:5e:8d:5c:9b:b8:fa:88:4b:31:41:d0: 5b:28:1c:1a:cc:31:bf:a4:5a:77:be:55:df:cd:7f: ea:cf:52:91:22:fa:69:b9:71:96:ee:de:d7:55:72: 0e:03:ec:f3:ae:11:0a:0f:f2:82:b9:8d:28:06:5e: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:D5:69:DE:57:5B:C9:33:40:19:2D:BA:71:8D:AD:03:5F:19:4A X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7b:c3:d7:2a:09:78:be:98:ce:43:82:e2:9d:08:8e:fe:6f: 42:2b:ae:8b:01:2a:d6:e1:e4:22:ff:49:f0:5e:ba:31:ee:3e: d3:3f:4f:77:ce:8a:34:8f:d8:f6:6d:cb:4b:70:b7:a4:53:d2: 33:76:8a:b0:37:c2:2f:22:10:c5:3e:91:56:a2:de:72:68:54: 35:a4:21:49:58:c2:44:fc:df:a1:99:fe:57:a7:12:cb:ab:57: db:78:1c:b9:3c:ec:87:fa:54:56:c5:ca:17:d2:ac:e2:ef:c8: 3f:b6:cc:93:6f:a1:8a:9c:b4:e8:5d:a8:be:ae:8c:57:25:5a: 95:75:5d:b4:3f:0a:30:42:5c:37:81:64:78:fd:d7:36:fe:07: 98:19:00:0c:e9:ea:39:15:ba:27:c7:ce:62:f1:df:3a:77:9b: 44:54:22:84:e9:75:9b:0d:eb:4b:9d:68:5f:76:87:fd:28:6b: b3:d7:44:26:c6:85:9c:0b:8c:13:ab:45:a0:20:6c:f6:b3:75: e4:aa:4e:8f:fd:b3:d7:d4:a7:99:90:2e:14:df:dd:18:ba:11: 37:79:dc:97:9a:cb:f8:da:be:24:ff:59:a5:57:5f:2b:84:1b: 91:62:96:f2:61:c8:7e:e3:89:6f:33:0d:ca:cb:56:b0:c5:6b: f3:dd:33:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMkVyFx+BgaTVkd7OcU81nLDjnjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjgwODM3NDBaFw0yNTExMjkwOTUxNDBaMDMxMTAvBgNV BAMTKDgzQjZENTY5REU1NzVCQzkzMzQwMTkyREJBNzE4REFEMDM1RjE5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1rK777LrsgMt9HLlOYUW/Zx1 NAFretEXcwy8vive1ak2ft5WWCG5tTEYyZ2gLejZy00mOyYjMVYoRwxDTFN1K4wv 7I/SN7LMHzJ1okErPeUNJ8jZhbYOee00KWVpaOiVhd9Vo1sMuccfzRCfHhp3srmA EBVdB3VzaSe6ck+jRxJTDn0QKa0szDKdo9A1tsB44rkrS8f5fCf8+LcT6GAmwpWs VlBbPfKtSBdBWdsXUn9ggSe3UMzL0jc9lzLmRAjwxjL4FVJejVybuPqISzFB0Fso HBrMMb+kWne+Vd/Nf+rPUpEi+mm5cZbu3tdVcg4D7POuEQoP8oK5jSgGXtMDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUg7bVad5XW8kzQBktunGNrQNfGUowHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXvD1yoJeL6YzkOC4p0I jv5vQiuuiwEq1uHkIv9J8F66Me4+0z9Pd86KNI/Y9m3LS3C3pFPSM3aKsDfCLyIQ xT6RVqLecmhUNaQhSVjCRPzfoZn+V6cSy6tX23gcuTzsh/pUVsXKF9Ks4u/IP7bM k2+hipy06F2ovq6MVyValXVdtD8KMEJcN4FkeP3XNv4HmBkADOnqORW6J8fOYvHf OnebRFQihOl1mw3rS51oX3aH/Shrs9dEJsaFnAuME6tFoCBs9rN15KpOj/2z19Sn mZAuFN/dGLoRN3ncl5rL+Nq+JP9ZpVdfK4QbkWKW8mHIfuOJbzMNystWsMVr890z iA== -----END CERTIFICATE-----Generated at Sat Nov 29 01:59:48 2025 by rpki-client