This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: dBHggonHsTbQS4Z8hl063bKxo8taS5yZztQECcr/BBU= Subject key identifier: 96:F0:FD:F4:62:4D:20:ED:49:C9:05:6B:EB:6C:05:D7:29:74:19:69 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 55830EBFABEC83640EECE59ECE265ECC5B6D1438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 030E Signing time: Mon 24 Nov 2025 16:02:37 +0000 Manifest this update: Mon 24 Nov 2025 15:57:37 +0000 Manifest next update: Tue 25 Nov 2025 16:11:37 +0000 Files and hashes: 1: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: HSnlXCEehQ57CL3mAvTX1uULSZeE/gdD7PWlAwZkdBw=) 4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 16:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:0e:bf:ab:ec:83:64:0e:ec:e5:9e:ce:26:5e:cc:5b:6d:14:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 24 15:57:37 2025 GMT Not After : Nov 25 16:11:37 2025 GMT Subject: CN=96F0FDF4624D20ED49C9056BEB6C05D729741969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:47:92:20:4f:4a:d3:1c:fa:ad:05:95:ce: 9f:64:1d:25:de:ce:41:b2:ee:90:42:63:a3:38:3f: ae:72:50:38:32:5b:14:a5:85:74:a7:7e:7b:73:33: e8:ca:f1:87:20:b9:2b:47:dd:dc:39:e7:85:30:73: fa:68:e6:bf:a3:be:16:d5:e1:e7:53:6c:9d:b2:6d: 9d:53:9d:94:4b:5b:cc:1f:d7:35:66:53:a7:92:2a: bb:bd:e2:3f:e0:ac:48:8e:5d:5d:e2:30:5b:01:51: ce:c1:9e:0f:41:b4:7e:c0:92:17:d8:c1:42:38:95: a8:4b:44:e8:1c:57:e7:d0:27:cc:9c:f2:89:e6:06: 63:3e:52:ed:5d:f3:c5:e3:cd:67:49:71:24:45:0d: e9:17:30:bc:ff:c6:10:de:a1:75:cb:70:7e:13:78: 66:59:ba:93:35:df:62:75:75:c3:12:f2:39:15:16: 4c:46:46:48:54:3b:ae:1c:2a:03:cb:9a:89:a8:ad: 23:5d:e8:29:32:16:c1:ac:0c:ef:f7:b5:32:59:0f: 97:30:87:85:b9:25:eb:1e:9b:41:1a:a8:09:08:9e: c2:27:f9:42:b2:f6:94:5b:bd:5a:2c:0e:6e:21:f3: 8b:ad:6b:d5:45:c6:4a:40:81:25:52:33:00:af:04: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F0:FD:F4:62:4D:20:ED:49:C9:05:6B:EB:6C:05:D7:29:74:19:69 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:41:93:53:d1:7f:3f:d9:41:3a:24:46:09:bf:0b:d2:ac:b9: ee:85:a2:ae:0d:a1:24:db:0f:e6:93:70:34:61:2c:22:b0:06: 65:d6:11:d1:c1:d9:bc:d3:37:5b:1f:52:2b:ec:fd:3d:10:a8: 78:ee:1f:c1:30:3b:a6:ee:96:a9:f6:05:0a:7e:2c:5b:3d:33: 6b:a0:07:1b:27:23:0c:1d:ff:c9:aa:93:00:41:ed:10:ab:9c: 8f:f2:f8:81:84:2c:c8:2d:a3:4c:1f:33:87:3c:12:46:23:92: 6e:b1:b1:e5:16:14:b1:72:47:82:84:40:34:ae:d5:b6:a6:53: 1b:0a:b4:ee:f6:41:f0:11:4c:b7:f8:54:43:92:c1:ec:17:15: b7:fc:f5:7a:57:c5:81:d1:79:60:18:88:dd:76:a6:ad:b3:03: ca:eb:8f:12:ea:8b:c6:4a:34:3a:50:ef:48:e0:0c:dd:55:29: 78:14:a9:84:71:87:4d:ea:a2:b5:6c:2c:75:00:48:2c:22:c2: a1:08:49:c5:fa:d2:ed:99:b9:a4:ad:da:eb:78:ba:8a:d7:31: 59:00:dc:10:72:96:54:18:73:b9:9d:04:b8:42:15:b8:a6:51: 77:92:50:0f:9b:fd:f7:19:93:2f:09:47:f1:9f:79:10:8d:97: 79:4b:05:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVYMOv6vsg2QO7OWeziZezFttFDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjQxNTU3MzdaFw0yNTExMjUxNjExMzdaMDMxMTAvBgNV BAMTKDk2RjBGREY0NjI0RDIwRUQ0OUM5MDU2QkVCNkMwNUQ3Mjk3NDE5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfx0eSIE9K0xz6rQWVzp9kHSXe zkGy7pBCY6M4P65yUDgyWxSlhXSnfntzM+jK8YcguStH3dw554Uwc/po5r+jvhbV 4edTbJ2ybZ1TnZRLW8wf1zVmU6eSKru94j/grEiOXV3iMFsBUc7Bng9BtH7AkhfY wUI4lahLROgcV+fQJ8yc8onmBmM+Uu1d88XjzWdJcSRFDekXMLz/xhDeoXXLcH4T eGZZupM132J1dcMS8jkVFkxGRkhUO64cKgPLmomorSNd6CkyFsGsDO/3tTJZD5cw h4W5Jesem0EaqAkInsIn+UKy9pRbvVosDm4h84uta9VFxkpAgSVSMwCvBCCRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlvD99GJNIO1JyQVr62wF1yl0GWkwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkGTU9F/P9lBOiRGCb8L 0qy57oWirg2hJNsP5pNwNGEsIrAGZdYR0cHZvNM3Wx9SK+z9PRCoeO4fwTA7pu6W qfYFCn4sWz0za6AHGycjDB3/yaqTAEHtEKucj/L4gYQsyC2jTB8zhzwSRiOSbrGx 5RYUsXJHgoRANK7VtqZTGwq07vZB8BFMt/hUQ5LB7BcVt/z1elfFgdF5YBiI3Xam rbMDyuuPEuqLxko0OlDvSOAM3VUpeBSphHGHTeqitWwsdQBILCLCoQhJxfrS7Zm5 pK3a63i6itcxWQDcEHKWVBhzuZ0EuEIVuKZRd5JQD5v99xmTLwlH8Z95EI2XeUsF qg== -----END CERTIFICATE-----Generated at Tue Nov 25 00:33:59 2025 by rpki-client