This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: 2hofIwnwdT093t7JX40UPJ4OcrtxTR9VCLJ6z7+fGSw= Subject key identifier: D3:2E:0F:C7:F9:05:C5:39:73:FB:A0:C1:21:FC:ED:C4:CF:B0:79:A9 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 7D59A42188CDC926686CD785C7FB9E1B1DEA03CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0342 Signing time: Thu 01 Jan 2026 14:52:59 +0000 Manifest this update: Thu 01 Jan 2026 14:47:59 +0000 Manifest next update: Fri 02 Jan 2026 15:22:59 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 3: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: zyMUWrrFCpwL75iGT2+zeAOXOlk65XYTAZLT5FhV11M=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 15:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:59:a4:21:88:cd:c9:26:68:6c:d7:85:c7:fb:9e:1b:1d:ea:03:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 1 14:47:59 2026 GMT Not After : Jan 2 15:22:59 2026 GMT Subject: CN=D32E0FC7F905C53973FBA0C121FCEDC4CFB079A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:1f:64:be:d9:f0:dd:d8:09:93:40:40:c2: ab:ac:fb:ce:28:98:1a:fa:33:fc:0a:e6:32:16:cb: c3:00:99:a2:f5:93:1b:24:f9:69:b9:f8:a7:c0:f1: b2:83:ff:44:93:62:49:62:56:ac:9d:28:be:5a:21: dd:03:a1:4b:a6:b9:94:30:ce:01:74:37:40:93:26: 4b:7c:2c:42:2a:c9:ac:5c:95:01:73:cb:cb:94:0c: 53:ea:99:c9:83:1f:07:02:68:f9:53:cb:28:3a:fa: 25:50:ea:c5:40:b8:79:a6:74:31:7c:b6:0b:55:da: 7e:fd:ce:d5:d4:70:ff:1c:c0:d0:d4:48:53:dc:c9: 35:c3:a2:70:c7:79:32:f0:af:ac:b7:6d:0a:03:47: 07:93:82:fc:50:dc:ff:ae:b3:7e:69:13:2b:46:cf: 57:c7:f3:dd:53:fe:fd:f9:a2:5c:54:a2:0b:b4:5e: b7:88:75:80:b8:d1:f7:70:38:9a:07:c3:6e:a2:a9: 64:65:00:13:6c:64:cb:b0:4c:b2:7c:02:7a:93:6a: 55:89:83:3e:12:81:c5:e2:13:d1:28:06:f5:d4:63: fa:d1:53:53:43:07:ed:48:57:ce:60:08:66:b4:90: d3:54:4e:e5:e3:a9:70:4e:ab:eb:22:38:d9:49:aa: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2E:0F:C7:F9:05:C5:39:73:FB:A0:C1:21:FC:ED:C4:CF:B0:79:A9 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3b:ab:ee:31:1e:d3:a6:eb:11:e1:74:3c:34:de:02:05:3c: df:cf:dc:fd:52:06:a4:08:fa:27:59:3c:5c:eb:c0:bb:25:b2: 09:0b:37:ce:53:b3:e6:7f:ca:5a:15:9f:a6:91:68:9e:10:b8: 72:80:9a:a0:ef:74:fb:16:ec:01:99:de:d0:df:30:28:d4:7d: e7:60:57:9f:3b:d0:cf:90:95:9d:e8:43:2d:77:ff:5e:5b:8f: 03:da:07:f0:e9:ec:5b:5d:fc:b8:d9:9b:67:92:9b:9f:3e:00: bc:c1:a2:7d:39:6f:44:7f:d0:bd:6e:05:11:95:cb:db:f8:ab: 41:88:14:b9:d2:b2:9b:35:4a:5b:35:1d:40:39:39:46:90:f5: da:72:58:98:73:d3:1f:d6:24:93:8f:63:f1:bc:b7:85:7b:df: 44:65:10:a9:52:c7:e9:0c:41:87:60:a3:82:c6:ec:e9:c9:cb: a6:03:b4:d7:ef:52:f3:aa:fe:16:7c:20:a1:7b:bb:dc:6e:c5: d3:03:88:58:6d:b1:92:d3:60:3f:e7:ac:d6:eb:39:97:7d:0c: 15:b7:ca:ed:df:67:7b:4f:ec:1d:c0:37:a0:f9:9f:45:80:a3: bb:28:ef:a2:62:a8:7f:25:de:06:0e:72:84:8e:08:62:dd:ba: a3:61:2d:49 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfVmkIYjNySZobNeFx/ueGx3qA8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMDExNDQ3NTlaFw0yNjAxMDIxNTIyNTlaMDMxMTAvBgNV BAMTKEQzMkUwRkM3RjkwNUM1Mzk3M0ZCQTBDMTIxRkNFREM0Q0ZCMDc5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvB9kvtnw3dgJk0BAwqus+84o mBr6M/wK5jIWy8MAmaL1kxsk+Wm5+KfA8bKD/0STYkliVqydKL5aId0DoUumuZQw zgF0N0CTJkt8LEIqyaxclQFzy8uUDFPqmcmDHwcCaPlTyyg6+iVQ6sVAuHmmdDF8 tgtV2n79ztXUcP8cwNDUSFPcyTXDonDHeTLwr6y3bQoDRweTgvxQ3P+us35pEytG z1fH891T/v35olxUogu0XreIdYC40fdwOJoHw26iqWRlABNsZMuwTLJ8AnqTalWJ gz4SgcXiE9EoBvXUY/rRU1NDB+1IV85gCGa0kNNUTuXjqXBOq+siONlJqhrJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0y4Px/kFxTlz+6DBIfztxM+weakwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjur7jEe06brEeF0PDTe AgU838/c/VIGpAj6J1k8XOvAuyWyCQs3zlOz5n/KWhWfppFonhC4coCaoO90+xbs AZne0N8wKNR952BXnzvQz5CVnehDLXf/XluPA9oH8OnsW138uNmbZ5Kbnz4AvMGi fTlvRH/QvW4FEZXL2/irQYgUudKymzVKWzUdQDk5RpD12nJYmHPTH9Ykk49j8by3 hXvfRGUQqVLH6QxBh2Cjgsbs6cnLpgO01+9S86r+FnwgoXu73G7F0wOIWG2xktNg P+es1us5l30MFbfK7d9ne0/sHcA3oPmfRYCjuyjvomKofyXeBg5yhI4IYt26o2Et SQ== -----END CERTIFICATE-----Generated at Fri Jan 2 02:43:41 2026 by rpki-client