This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: 5vz6STSFFTuGZRUPGE6BzLft/fTFuHKu0j8KJdBJCDg= Subject key identifier: EE:C7:AC:00:BB:2D:CF:45:32:58:DC:58:57:F0:50:CE:0B:37:E1:D5 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 318827C6004D8B15D7A5C36263BE6E7877D9055C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0311 Signing time: Wed 26 Nov 2025 20:07:40 +0000 Manifest this update: Wed 26 Nov 2025 20:02:40 +0000 Manifest next update: Thu 27 Nov 2025 21:43:40 +0000 Files and hashes: 1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: A1jOMZeJy99ikPXSLoPXYHBsw+cpBHmN1f5vtLLup0w=) 5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 21:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:88:27:c6:00:4d:8b:15:d7:a5:c3:62:63:be:6e:78:77:d9:05:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 26 20:02:40 2025 GMT Not After : Nov 27 21:43:40 2025 GMT Subject: CN=EEC7AC00BB2DCF453258DC5857F050CE0B37E1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:70:fb:48:7c:2b:f3:52:23:8c:3d:46:61: d4:7f:de:c0:9b:8b:e6:22:9f:50:e7:14:07:b8:4e: 72:00:9c:c6:d4:fb:0b:a7:dd:13:db:fd:3a:93:c1: 9a:ed:f8:25:87:82:19:01:0d:15:8f:9b:a8:5c:4f: a6:a7:89:72:0d:aa:f7:1b:4d:e2:51:45:c8:56:c0: 78:eb:91:77:23:8d:6b:29:cd:61:c2:0f:31:80:01: a8:c6:49:96:bb:65:39:e9:22:24:03:71:90:04:e8: df:47:7c:3f:b5:e2:38:f9:06:1a:d0:1b:5c:f1:ef: 55:1a:62:1c:5b:20:53:55:1b:b7:e4:b7:15:f7:28: ef:ea:57:ad:86:b5:69:68:68:a7:4c:9e:d3:07:11: 87:2d:e4:98:e7:97:89:af:74:87:5b:87:06:3d:22: 9f:6a:9f:ce:b8:64:53:de:e2:f5:39:6e:d2:6e:3e: b4:52:4a:67:76:aa:50:47:47:ee:45:0b:92:db:bd: 03:16:8e:e0:77:6d:7d:95:36:03:d4:00:68:81:cf: 3b:e3:bb:a5:e3:c5:07:f4:59:19:92:44:87:f9:b7: e0:20:2d:5c:42:c9:d7:20:2b:a9:ed:aa:ef:cb:80: d9:a6:f2:d5:3e:cb:e7:b2:a9:89:f8:af:12:c1:71: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C7:AC:00:BB:2D:CF:45:32:58:DC:58:57:F0:50:CE:0B:37:E1:D5 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:06:f8:07:3f:7c:b2:52:13:70:65:fc:5a:e6:c4:16:87: ce:5e:9c:6e:49:77:97:8c:70:e5:1d:f6:11:31:14:6f:5a:57: 03:3f:24:1c:0e:5c:2e:87:b2:77:e7:cc:68:4e:52:69:a4:f7: 87:48:b2:34:90:b0:7d:b6:e2:52:ca:4a:04:1c:55:73:85:7b: 2b:60:19:7e:a0:44:2c:7b:3c:54:07:0a:95:90:b9:ba:e0:d2: 40:5e:59:6b:e6:fb:c2:59:13:a6:3a:76:ff:b9:1f:9b:56:83: df:19:22:c0:0d:24:01:f8:64:f6:95:51:5e:ff:4b:2d:15:1d: 3a:b2:31:f4:3b:04:8c:9c:d2:4f:bd:11:4e:3b:6f:72:21:85: ac:c9:a7:7a:55:c9:85:01:eb:34:0c:f9:db:b9:db:c3:6f:63: 01:27:18:7b:c7:a2:8c:2e:9c:dc:c4:60:41:d9:9d:b1:90:4e: 73:cd:85:14:ef:f2:7b:87:c6:84:93:9c:32:fa:dd:7d:8a:90: 94:c2:de:fb:65:d9:df:ea:4a:c7:07:58:23:86:c7:12:a0:9d: 52:dd:1c:53:0e:6b:97:ee:c3:14:29:15:22:94:1e:c2:35:d4: 56:04:8a:68:7d:e6:b4:e7:c5:a2:da:f2:61:26:c6:6a:69:ac: 62:ec:46:86 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMYgnxgBNixXXpcNiY75ueHfZBVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjYyMDAyNDBaFw0yNTExMjcyMTQzNDBaMDMxMTAvBgNV BAMTKEVFQzdBQzAwQkIyRENGNDUzMjU4REM1ODU3RjA1MENFMEIzN0UxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5w3D7SHwr81IjjD1GYdR/3sCb i+Yin1DnFAe4TnIAnMbU+wun3RPb/TqTwZrt+CWHghkBDRWPm6hcT6aniXINqvcb TeJRRchWwHjrkXcjjWspzWHCDzGAAajGSZa7ZTnpIiQDcZAE6N9HfD+14jj5BhrQ G1zx71UaYhxbIFNVG7fktxX3KO/qV62GtWloaKdMntMHEYct5Jjnl4mvdIdbhwY9 Ip9qn864ZFPe4vU5btJuPrRSSmd2qlBHR+5FC5LbvQMWjuB3bX2VNgPUAGiBzzvj u6XjxQf0WRmSRIf5t+AgLVxCydcgK6ntqu/LgNmm8tU+y+eyqYn4rxLBcUJtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7sesALstz0UyWNxYV/BQzgs34dUwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMwG+Ac/fLJSE3Bl/Frm xBaHzl6cbkl3l4xw5R32ETEUb1pXAz8kHA5cLoeyd+fMaE5SaaT3h0iyNJCwfbbi UspKBBxVc4V7K2AZfqBELHs8VAcKlZC5uuDSQF5Za+b7wlkTpjp2/7kfm1aD3xki wA0kAfhk9pVRXv9LLRUdOrIx9DsEjJzST70RTjtvciGFrMmnelXJhQHrNAz527nb w29jAScYe8eijC6c3MRgQdmdsZBOc82FFO/ye4fGhJOcMvrdfYqQlMLe+2XZ3+pK xwdYI4bHEqCdUt0cUw5rl+7DFCkVIpQewjXUVgSKaH3mtOfFotryYSbGammsYuxG hg== -----END CERTIFICATE-----Generated at Thu Nov 27 05:24:14 2025 by rpki-client