This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: hxu9i4tCwc8GcjhmZR4G9W9Pul2UpE4j2HVs7FVgLi8= Subject key identifier: 50:19:02:71:78:6B:A0:DC:3D:75:A4:23:78:6D:65:25:28:FF:96:03 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 539420E19259348BD1AB3BA0B222ACB89FAB3973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0319 Signing time: Tue 02 Dec 2025 18:12:40 +0000 Manifest this update: Tue 02 Dec 2025 18:07:40 +0000 Manifest next update: Wed 03 Dec 2025 20:28:40 +0000 Files and hashes: 1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: IAQh3svgCxLF33A49Ddn5JY9Xj3Nc5VMRFjM55eMxI8=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 12:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:94:20:e1:92:59:34:8b:d1:ab:3b:a0:b2:22:ac:b8:9f:ab:39:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 2 18:07:40 2025 GMT Not After : Dec 3 20:28:40 2025 GMT Subject: CN=50190271786BA0DC3D75A423786D652528FF9603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:24:94:63:bf:38:c4:6a:82:f0:ec:94:5c: 97:96:47:c5:b5:9c:52:0a:3b:d4:f0:b3:8d:35:ff: 36:0a:3e:e9:db:f8:6a:a1:86:34:92:7d:27:58:a6: 30:2b:c9:99:2e:1e:70:b4:0c:45:02:c4:7d:7e:71: aa:b9:99:d3:81:c0:8e:9f:15:62:ad:ae:2e:53:e1: b6:fe:17:59:cb:f5:63:67:e0:26:a9:a3:dd:a0:8e: 2a:e8:21:83:7a:b1:62:d1:76:a6:8a:b9:7b:11:75: 40:86:24:32:09:9e:45:51:cb:07:8b:0e:7b:be:af: 2b:fd:fe:a1:e0:cb:1e:c4:7a:0c:5b:e8:a9:74:35: 8b:18:ee:af:2e:3b:00:ab:4a:d3:8f:39:0a:7b:6e: 96:f8:9f:e3:af:b9:d9:88:3a:ac:bf:9e:06:bf:27: 6c:ff:37:ae:94:d2:9a:1a:cd:21:84:55:c8:07:54: 54:c3:58:80:94:f4:e0:e1:84:de:77:77:7e:a3:20: 81:03:54:08:47:f2:ee:32:0c:00:d5:a0:25:63:85: 4b:ae:7c:28:f5:fc:90:00:6e:c0:17:68:60:84:73: ac:03:76:48:d1:f8:0b:6d:dd:98:0a:a1:fb:d9:e7: 04:9b:c2:fa:b4:8d:3d:c0:01:17:58:6c:1c:d8:8a: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:02:71:78:6B:A0:DC:3D:75:A4:23:78:6D:65:25:28:FF:96:03 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:39:8e:87:f6:bd:8f:d5:17:30:89:00:6a:ba:2e:9e:b0:2a: c9:7f:e2:d8:da:22:db:ba:6b:f5:84:c8:34:a8:62:60:ef:31: 23:ac:22:ca:d9:32:cc:4c:50:ce:85:8d:42:10:76:29:fa:23: 57:0e:47:6f:93:24:ce:93:10:42:d4:33:5c:79:48:c4:eb:1b: 96:71:42:e6:1a:e0:31:78:0a:be:f1:ff:bd:94:44:3a:c2:ec: 3d:85:92:0f:49:38:65:b5:3d:de:9b:08:08:91:ae:8d:0c:fe: fb:b3:30:bb:fe:ac:18:6e:bc:62:29:d3:ff:b7:fa:79:fe:4c: ef:b9:29:e3:d3:ab:7e:0f:70:e7:52:4e:34:d6:af:5c:01:5b: 8c:3d:08:fa:4a:ec:93:11:52:f3:98:c8:76:fe:73:d0:88:48: b2:28:fc:a5:c9:0a:f6:ef:e1:aa:cd:5e:3f:28:0e:5e:49:1a: 52:93:be:72:87:74:1f:75:94:5f:56:57:14:34:7d:d4:22:e1: 9e:54:fc:07:89:d3:5f:55:42:1e:71:e9:63:e3:5e:58:2b:8c: ae:2c:9f:33:64:a4:f0:59:01:01:62:49:44:08:1c:0f:68:7c: 29:81:d4:8c:18:54:0e:35:09:7d:aa:11:54:70:17:4f:21:9e: 92:e5:43:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU5Qg4ZJZNIvRqzugsiKsuJ+rOXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDIxODA3NDBaFw0yNTEyMDMyMDI4NDBaMDMxMTAvBgNV BAMTKDUwMTkwMjcxNzg2QkEwREMzRDc1QTQyMzc4NkQ2NTI1MjhGRjk2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXySUY784xGqC8OyUXJeWR8W1 nFIKO9Tws401/zYKPunb+GqhhjSSfSdYpjAryZkuHnC0DEUCxH1+caq5mdOBwI6f FWKtri5T4bb+F1nL9WNn4Capo92gjiroIYN6sWLRdqaKuXsRdUCGJDIJnkVRyweL Dnu+ryv9/qHgyx7Eegxb6Kl0NYsY7q8uOwCrStOPOQp7bpb4n+OvudmIOqy/nga/ J2z/N66U0poazSGEVcgHVFTDWICU9ODhhN53d36jIIEDVAhH8u4yDADVoCVjhUuu fCj1/JAAbsAXaGCEc6wDdkjR+Att3ZgKofvZ5wSbwvq0jT3AARdYbBzYilLjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUBkCcXhroNw9daQjeG1lJSj/lgMwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDmOh/a9j9UXMIkAarou nrAqyX/i2Noi27pr9YTINKhiYO8xI6wiytkyzExQzoWNQhB2KfojVw5Hb5MkzpMQ QtQzXHlIxOsblnFC5hrgMXgKvvH/vZREOsLsPYWSD0k4ZbU93psICJGujQz++7Mw u/6sGG68YinT/7f6ef5M77kp49Orfg9w51JONNavXAFbjD0I+krskxFS85jIdv5z 0IhIsij8pckK9u/hqs1ePygOXkkaUpO+cod0H3WUX1ZXFDR91CLhnlT8B4nTX1VC HnHpY+NeWCuMriyfM2Sk8FkBAWJJRAgcD2h8KYHUjBhUDjUJfaoRVHAXTyGekuVD rg== -----END CERTIFICATE-----Generated at Tue Dec 2 20:52:44 2025 by rpki-client