This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: GhrYnUtFTULdPqGtskSLECXHdNNBvtaBNchTdQo5zBg= Subject key identifier: 39:6F:28:8E:76:5B:4C:90:5C:99:93:3E:CE:B7:3A:FF:1D:BE:95:BC Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 3B59857FF97098F3FF48E601268F5F7FDA1E4D85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0359 Signing time: Sun 18 Jan 2026 16:58:21 +0000 Manifest this update: Sun 18 Jan 2026 16:53:21 +0000 Manifest next update: Mon 19 Jan 2026 20:41:21 +0000 Files and hashes: 1: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: Ul7rFYucjtP+Um6HSfIETaxhK6Jj7UF/NisuGcOyaOk=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:59:85:7f:f9:70:98:f3:ff:48:e6:01:26:8f:5f:7f:da:1e:4d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 18 16:53:21 2026 GMT Not After : Jan 19 20:41:21 2026 GMT Subject: CN=396F288E765B4C905C99933ECEB73AFF1DBE95BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:75:4c:93:e1:6c:7b:96:62:fd:0f:ac:e6: 6e:a4:c9:97:1c:2e:3d:a6:43:66:3f:df:02:66:8b: 82:5a:c0:5b:76:d5:31:d6:69:08:31:fd:9b:75:1c: 8e:1c:3d:55:f2:ed:c3:89:9f:46:0b:05:57:df:19: 63:7a:08:c3:83:42:03:b1:d2:35:af:bc:94:23:5d: f6:74:bf:ab:21:bb:92:2a:51:6c:18:f9:d6:e7:36: 8a:85:15:a5:05:6e:99:c8:a3:e6:62:84:53:e7:95: 49:1d:b9:cf:38:ce:90:06:91:8a:84:10:d3:88:92: f4:58:33:c4:ac:6c:ab:5a:06:52:d3:15:bc:34:94: 2c:12:2a:e4:6b:31:59:e0:d4:16:04:87:ee:47:a8: 72:9e:0c:89:35:fc:86:60:43:2a:ef:d1:e4:8f:39: 6f:03:63:00:03:cc:08:72:0e:0c:c5:08:47:57:45: 16:95:26:d0:9c:5f:e9:72:cd:52:28:31:3e:80:63: e3:69:70:86:bf:80:8f:40:c1:04:c3:37:d2:22:de: 08:ec:51:6c:35:b2:82:af:7c:bc:dd:12:fe:13:8f: ad:75:58:02:de:db:95:bf:d3:0f:c7:5f:35:73:9c: 8f:92:e7:29:ed:15:6b:18:ea:a8:e2:93:ae:a8:1c: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6F:28:8E:76:5B:4C:90:5C:99:93:3E:CE:B7:3A:FF:1D:BE:95:BC X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:e8:a7:68:d2:e7:43:01:54:5d:f0:67:5d:6d:40:e0:13: 3f:0c:e1:9d:8f:1e:aa:ca:df:d5:49:be:9c:69:69:24:5b:8d: 9a:82:d5:ee:a5:a9:f6:d9:7e:2b:98:a5:86:dc:fb:f6:9c:96: bf:a4:08:f9:b4:5b:a2:f1:75:44:12:36:e0:26:8a:d4:39:bc: 36:c3:97:3b:0d:13:bf:9e:0c:0d:15:c4:49:f8:82:d6:53:43: 63:20:2a:01:52:13:cf:54:4e:64:ef:fa:4f:86:74:c2:59:0e: 92:ba:73:5a:7f:58:e4:a6:73:c0:30:78:6f:ba:89:51:d0:c1: 57:c3:f9:34:85:35:7c:3e:6e:af:01:8a:c8:57:bc:46:e5:19: 89:29:5b:31:50:83:c9:78:64:31:87:51:f0:fd:fd:ba:dd:fe: 6e:f2:f6:1d:ec:6c:16:74:b1:80:cc:b1:01:e0:b3:91:7b:15: 8b:85:07:ba:bf:cb:e6:e5:48:4b:01:53:0a:62:6b:d4:9d:a3: e7:9b:7a:0e:bb:6c:95:59:8c:7d:6a:63:ca:00:e8:53:aa:20: d9:60:41:1d:05:ee:fc:9b:25:0e:80:8f:82:b8:f9:a4:c9:5c: 08:96:78:35:09:e2:0d:82:34:62:24:ca:d4:56:71:e0:8e:65: d3:38:80:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO1mFf/lwmPP/SOYBJo9ff9oeTYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMTgxNjUzMjFaFw0yNjAxMTkyMDQxMjFaMDMxMTAvBgNV BAMTKDM5NkYyODhFNzY1QjRDOTA1Qzk5OTMzRUNFQjczQUZGMURCRTk1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEs3VMk+Fse5Zi/Q+s5m6kyZcc Lj2mQ2Y/3wJmi4JawFt21THWaQgx/Zt1HI4cPVXy7cOJn0YLBVffGWN6CMODQgOx 0jWvvJQjXfZ0v6shu5IqUWwY+dbnNoqFFaUFbpnIo+ZihFPnlUkduc84zpAGkYqE ENOIkvRYM8SsbKtaBlLTFbw0lCwSKuRrMVng1BYEh+5HqHKeDIk1/IZgQyrv0eSP OW8DYwADzAhyDgzFCEdXRRaVJtCcX+lyzVIoMT6AY+NpcIa/gI9AwQTDN9Ii3gjs UWw1soKvfLzdEv4Tj611WALe25W/0w/HXzVznI+S5yntFWsY6qjik66oHBwBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOW8ojnZbTJBcmZM+zrc6/x2+lbwwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK87op2jS50MBVF3wZ11t QOATPwzhnY8eqsrf1Um+nGlpJFuNmoLV7qWp9tl+K5ilhtz79pyWv6QI+bRbovF1 RBI24CaK1Dm8NsOXOw0Tv54MDRXESfiC1lNDYyAqAVITz1ROZO/6T4Z0wlkOkrpz Wn9Y5KZzwDB4b7qJUdDBV8P5NIU1fD5urwGKyFe8RuUZiSlbMVCDyXhkMYdR8P39 ut3+bvL2HexsFnSxgMyxAeCzkXsVi4UHur/L5uVISwFTCmJr1J2j55t6DrtslVmM fWpjygDoU6og2WBBHQXu/JslDoCPgrj5pMlcCJZ4NQniDYI0YiTK1FZx4I5l0ziA tg== -----END CERTIFICATE-----Generated at Mon Jan 19 03:53:19 2026 by rpki-client