This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: FwftelemTyKSk4JD+L5M89ni5ytONzsO9qTIIxlonTo= Subject key identifier: 2F:A8:F4:2E:EA:04:61:8D:E2:82:D7:B8:F1:54:E5:EE:22:98:2E:DC Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 4F7714A4DBCE48E9DCF2E1AC3934A6170ED44BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 031E Signing time: Sat 06 Dec 2025 10:02:40 +0000 Manifest this update: Sat 06 Dec 2025 09:57:40 +0000 Manifest next update: Sun 07 Dec 2025 13:50:40 +0000 Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 0btidL+MFPsY/sFSWSsMdwcokay3x9DeKZrjNVxNEJk=) 3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:77:14:a4:db:ce:48:e9:dc:f2:e1:ac:39:34:a6:17:0e:d4:4b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 6 09:57:40 2025 GMT Not After : Dec 7 13:50:40 2025 GMT Subject: CN=2FA8F42EEA04618DE282D7B8F154E5EE22982EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:4a:7c:b2:22:27:16:4e:d6:14:de:af:da: 3c:52:f0:9c:ab:71:e3:e2:fd:35:8f:39:3d:f8:11: 58:6e:47:e0:d0:0c:2b:f3:6d:52:a9:47:08:21:54: 8b:cd:7e:25:73:60:81:31:d2:81:17:07:d8:18:ca: 5c:e0:3f:53:9a:6b:c8:7f:ac:97:1d:78:52:69:d6: 0e:af:91:38:a7:28:49:11:40:fe:ee:16:a7:80:52: 08:06:98:38:37:cb:f6:0e:1e:cd:4c:8a:5a:79:9b: 77:d8:0b:c2:ef:18:73:e7:99:e2:cf:8b:b7:ce:df: 9f:d3:78:20:18:cd:d4:a7:30:68:c4:02:5a:85:c9: d0:34:3e:05:f4:d1:69:9f:89:3d:4e:91:95:a5:b5: da:a7:8a:05:72:12:3c:8c:78:73:17:2c:26:c0:9d: cf:1e:be:85:92:32:b4:a6:60:3c:ff:8a:80:b7:1a: 37:92:ff:84:82:90:4b:f1:81:d0:eb:cb:d2:b4:8d: ef:c6:52:bb:07:36:6e:55:ba:56:ce:c9:d9:62:42: ab:6b:8e:a1:e9:18:95:a2:e9:2b:bc:6e:0e:18:bf: 9f:52:dd:f1:fa:dc:b8:75:80:a2:36:25:28:b5:0d: 7f:79:bd:dd:f5:40:9a:ad:31:d5:26:95:d2:bc:ea: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A8:F4:2E:EA:04:61:8D:E2:82:D7:B8:F1:54:E5:EE:22:98:2E:DC X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3f:dd:61:b7:1a:7e:f4:d9:3f:e7:54:a1:a5:d9:d8:39:78: 48:59:28:ea:27:f0:15:26:db:1d:7a:9d:68:9c:25:e7:d4:90: b4:39:b9:15:52:3b:3e:89:c1:c7:e2:bc:6b:8f:61:b3:78:35: 4e:38:6d:6b:5b:16:13:17:47:bd:ed:34:ee:5a:c7:81:dc:e3: 65:04:9f:3d:54:63:5e:3d:3b:80:1b:2e:b8:69:c1:08:95:3a: b0:64:5c:b9:f3:4a:74:a1:6e:ed:18:15:9b:dd:9c:80:48:e2: 83:16:68:bb:11:18:25:0a:ed:c6:80:7b:0b:70:26:77:f4:74: 06:52:00:29:22:f0:df:0a:7a:53:66:e9:e2:ac:13:3a:e8:93: 0a:bf:30:75:78:62:da:eb:cb:8c:d6:07:74:9d:bd:0d:d1:24: 63:e0:00:b6:39:61:b0:b2:d3:b0:f5:11:12:31:22:e0:b0:b9: 10:47:f4:eb:72:e2:e9:a0:ff:c2:a3:d6:ba:6d:e5:f2:f1:0e: 47:6a:d3:92:b4:f1:ac:44:cb:14:08:43:69:09:a5:4b:21:6b: bc:1f:fd:02:20:ca:4a:3c:1c:da:3b:fa:a9:5d:42:50:ad:33: ad:9c:7f:70:4d:2f:14:a6:fe:7e:85:0e:b8:d9:36:a4:6b:bb: 7c:1a:37:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT3cUpNvOSOnc8uGsOTSmFw7US/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDYwOTU3NDBaFw0yNTEyMDcxMzUwNDBaMDMxMTAvBgNV BAMTKDJGQThGNDJFRUEwNDYxOERFMjgyRDdCOEYxNTRFNUVFMjI5ODJFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1Up8siInFk7WFN6v2jxS8Jyr cePi/TWPOT34EVhuR+DQDCvzbVKpRwghVIvNfiVzYIEx0oEXB9gYylzgP1Oaa8h/ rJcdeFJp1g6vkTinKEkRQP7uFqeAUggGmDg3y/YOHs1Milp5m3fYC8LvGHPnmeLP i7fO35/TeCAYzdSnMGjEAlqFydA0PgX00WmfiT1OkZWltdqnigVyEjyMeHMXLCbA nc8evoWSMrSmYDz/ioC3GjeS/4SCkEvxgdDry9K0je/GUrsHNm5VulbOydliQqtr jqHpGJWi6Su8bg4Yv59S3fH63Lh1gKI2JSi1DX95vd31QJqtMdUmldK86mUtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL6j0LuoEYY3igte48VTl7iKYLtwwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT/dYbcafvTZP+dUoaXZ 2Dl4SFko6ifwFSbbHXqdaJwl59SQtDm5FVI7PonBx+K8a49hs3g1Tjhta1sWExdH ve007lrHgdzjZQSfPVRjXj07gBsuuGnBCJU6sGRcufNKdKFu7RgVm92cgEjigxZo uxEYJQrtxoB7C3Amd/R0BlIAKSLw3wp6U2bp4qwTOuiTCr8wdXhi2uvLjNYHdJ29 DdEkY+AAtjlhsLLTsPUREjEi4LC5EEf063Li6aD/wqPWum3l8vEOR2rTkrTxrETL FAhDaQmlSyFrvB/9AiDKSjwc2jv6qV1CUK0zrZx/cE0vFKb+foUOuNk2pGu7fBo3 WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:35 2025 by rpki-client