This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: CKQz4tTwTyXQjSKCwezJKmUeh4c6yB/8KMfYUfoHBfM= Subject key identifier: 6C:38:99:FE:93:A4:C2:68:07:D4:31:D3:EF:DF:A7:5A:AD:69:5C:C1 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 321F06EA6DC590AB5519B59236510B3C688B8B5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0353 Signing time: Wed 14 Jan 2026 04:13:09 +0000 Manifest this update: Wed 14 Jan 2026 04:08:09 +0000 Manifest next update: Thu 15 Jan 2026 06:52:09 +0000 Files and hashes: 1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: aDmhyLNT8UIUF3LZXSfDtUHPWOqUsW50KYv4SNbKgLg=) 2: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1f:06:ea:6d:c5:90:ab:55:19:b5:92:36:51:0b:3c:68:8b:8b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 14 04:08:09 2026 GMT Not After : Jan 15 06:52:09 2026 GMT Subject: CN=6C3899FE93A4C26807D431D3EFDFA75AAD695CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:94:ed:ac:9d:88:58:66:ea:5c:1c:89:95: c9:d5:a7:c9:20:aa:28:29:24:e2:cc:4d:e1:41:0d: 66:b0:ca:85:e2:ca:38:e7:2d:e6:ca:49:f1:e7:45: d4:ee:00:5d:66:ce:0e:dc:d4:26:60:2c:3c:f4:4a: b7:c7:6f:a6:be:d0:1f:20:79:41:2c:87:64:f6:23: f7:1e:9d:9e:cb:cb:b0:93:61:a1:7a:b9:78:62:47: 25:fa:97:54:64:6f:2d:bf:64:c6:33:ed:f7:99:0e: 41:9d:3b:4c:f2:0b:06:76:92:a3:b8:3d:2b:15:06: a5:25:a6:8b:67:7a:74:65:b1:ec:2c:fd:6a:31:4f: d1:13:a3:0f:18:b3:db:b1:69:fe:13:8f:99:8f:d5: 76:b3:74:f9:d8:ad:5a:04:c2:69:eb:12:6b:34:ba: c6:06:15:f6:9f:ba:95:e3:ef:c6:db:f8:07:56:37: c3:c2:22:5d:91:e6:9a:0f:fa:d9:f0:de:3d:80:d1: 60:2d:2e:e3:a2:74:8c:6a:64:ef:0f:67:44:4e:78: 9f:07:c2:47:1b:16:1c:af:9e:ed:aa:78:4f:17:41: 48:2c:84:6c:40:49:58:fc:69:45:61:26:32:cf:36: fe:e8:6c:3b:40:a8:d4:7c:0b:a3:3e:10:12:d4:bf: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:99:FE:93:A4:C2:68:07:D4:31:D3:EF:DF:A7:5A:AD:69:5C:C1 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:76:ba:4b:f2:eb:f5:e7:55:75:56:83:72:dc:c4:2c:1d:4c: b6:3d:e7:13:28:8a:45:a7:ac:01:1e:d0:e2:2d:83:1b:7f:18: 49:80:4b:29:83:02:10:0d:12:b5:0a:7d:be:ed:bf:79:4a:2d: e9:b9:2b:93:0d:77:c9:c9:1e:bd:70:5e:0b:4a:3a:e8:e7:8c: 00:81:e1:ce:1f:f3:93:77:e8:5d:07:f6:ce:97:39:54:4a:33: 7d:d3:19:4f:83:5d:27:f3:3a:53:02:b5:dd:46:11:06:bf:73: 89:a7:62:25:5d:dd:5b:53:82:ae:8b:d6:ce:13:e9:f8:f6:36: 2c:2c:f3:cb:4d:f4:25:30:f7:5e:4b:21:97:37:a0:30:36:9b: f4:14:09:53:40:da:7e:0d:8f:24:3c:91:1c:04:78:65:18:28: e7:bc:cc:9c:39:5c:e6:61:a4:68:d8:80:32:c6:53:5b:2f:07: 4a:1e:67:c8:14:3d:95:2a:3f:2d:c1:21:69:56:f1:9a:cb:f6: 62:04:7e:40:ce:a2:11:a5:2a:53:07:6c:ab:d3:90:c2:75:21: 9b:11:c6:55:aa:45:19:57:9a:a9:1a:09:95:ee:6c:2f:fa:f4: 62:c3:0e:22:8e:12:94:dc:15:8e:30:1b:7f:dd:c8:11:d4:ae: c5:3f:55:a9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMh8G6m3FkKtVGbWSNlELPGiLi1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMTQwNDA4MDlaFw0yNjAxMTUwNjUyMDlaMDMxMTAvBgNV BAMTKDZDMzg5OUZFOTNBNEMyNjgwN0Q0MzFEM0VGREZBNzVBQUQ2OTVDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQZTtrJ2IWGbqXByJlcnVp8kg qigpJOLMTeFBDWawyoXiyjjnLebKSfHnRdTuAF1mzg7c1CZgLDz0SrfHb6a+0B8g eUEsh2T2I/cenZ7Ly7CTYaF6uXhiRyX6l1Rkby2/ZMYz7feZDkGdO0zyCwZ2kqO4 PSsVBqUlpotnenRlsews/WoxT9ETow8Ys9uxaf4Tj5mP1XazdPnYrVoEwmnrEms0 usYGFfafupXj78bb+AdWN8PCIl2R5poP+tnw3j2A0WAtLuOidIxqZO8PZ0ROeJ8H wkcbFhyvnu2qeE8XQUgshGxASVj8aUVhJjLPNv7obDtAqNR8C6M+EBLUv5M1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbDiZ/pOkwmgH1DHT79+nWq1pXMEwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHa6S/Lr9edVdVaDctzE LB1Mtj3nEyiKRaesAR7Q4i2DG38YSYBLKYMCEA0StQp9vu2/eUot6bkrkw13ycke vXBeC0o66OeMAIHhzh/zk3foXQf2zpc5VEozfdMZT4NdJ/M6UwK13UYRBr9ziadi JV3dW1OCrovWzhPp+PY2LCzzy030JTD3XkshlzegMDab9BQJU0Dafg2PJDyRHAR4 ZRgo57zMnDlc5mGkaNiAMsZTWy8HSh5nyBQ9lSo/LcEhaVbxmsv2YgR+QM6iEaUq Uwdsq9OQwnUhmxHGVapFGVeaqRoJle5sL/r0YsMOIo4SlNwVjjAbf93IEdSuxT9V qQ== -----END CERTIFICATE-----Generated at Wed Jan 14 10:22:33 2026 by rpki-client