This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: g09MRq7qAg1J8056xKYb/vQIjO6WvxbkGQP8k/0AOfA= Subject key identifier: 8B:FD:78:0A:11:77:44:C4:0E:C0:20:C6:6D:1C:74:46:67:A1:09:D8 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 567DE58501A56017E8953F98EE3178BD7AAB802F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0336 Signing time: Wed 24 Dec 2025 06:12:53 +0000 Manifest this update: Wed 24 Dec 2025 06:07:53 +0000 Manifest next update: Thu 25 Dec 2025 09:11:53 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: vREaV8YRddPlYN3O1/O9eWq3whXtQ9a5DSinQFQBwtQ=) 4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7d:e5:85:01:a5:60:17:e8:95:3f:98:ee:31:78:bd:7a:ab:80:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 24 06:07:53 2025 GMT Not After : Dec 25 09:11:53 2025 GMT Subject: CN=8BFD780A117744C40EC020C66D1C744667A109D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:38:96:f2:9f:35:31:c8:55:aa:29:13:97: 94:58:51:f6:ba:a1:f1:cf:9d:45:93:b9:e4:7f:86: 6c:96:0e:1f:49:79:bc:12:be:f1:7b:21:0d:a4:86: 18:d6:54:97:d6:59:09:df:a5:de:d3:35:dd:0e:b9: 51:8e:ee:d4:dd:01:74:d6:35:94:c4:bc:22:b4:dc: 67:c7:86:38:5d:f8:40:89:80:64:34:e4:54:d1:a6: 56:87:21:35:75:99:3f:f2:b8:43:76:cd:a2:7d:58: 53:e0:e2:59:49:6b:3d:99:79:0a:9f:93:5d:79:4a: e3:aa:c8:09:35:99:29:0a:2b:84:b6:28:13:35:aa: 1c:4f:06:66:36:94:74:09:77:88:d0:59:59:cd:2f: fb:92:38:8e:b9:ff:42:e2:fd:52:87:f9:4d:cc:fb: 5c:96:ca:56:ce:f4:81:ef:4d:f1:ae:6f:1b:55:97: 45:1d:b3:46:36:75:82:7e:8e:28:fe:5e:3b:97:f7: 7a:d8:5b:c2:e5:44:ca:d7:a2:df:94:c7:36:11:09: 8a:01:23:e4:b5:c7:c6:fe:04:ae:b1:d0:e0:12:07: af:cb:f7:56:f4:9a:7f:3f:2c:4c:1e:55:2d:dc:80: c3:a8:0a:cf:97:f2:6c:22:44:04:ce:a2:43:65:90: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FD:78:0A:11:77:44:C4:0E:C0:20:C6:6D:1C:74:46:67:A1:09:D8 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:87:81:73:ed:52:5a:3f:23:a2:63:0b:cf:1e:68:87:e0:3b: 9c:ee:41:83:27:da:8a:a6:9e:1c:96:29:86:41:4b:b3:6e:63: af:69:a9:53:28:99:30:d7:c2:cf:80:c3:75:e1:65:d7:c8:6b: 37:21:13:58:90:3f:d0:4b:50:76:2c:2a:95:3e:83:7f:63:09: 0e:cb:81:ba:d1:b8:ac:ac:c2:ce:5d:50:93:ec:d1:66:e9:57: 1d:2f:7e:ed:0a:5e:40:85:91:64:90:f1:4c:b5:1a:8d:b0:97: c2:0f:e1:e2:f5:77:29:38:90:73:fd:b4:2c:e7:ce:9b:c7:fd: 99:85:0f:de:73:b3:e8:3d:a6:f8:42:89:25:bd:07:4d:53:eb: 63:88:05:b8:5c:29:fa:b5:e4:74:50:99:4a:d8:be:0e:44:25: 74:08:08:e8:4c:cf:58:a0:02:1a:c7:70:ea:5f:03:a4:2b:b1: 83:ee:96:a3:24:70:d0:21:56:b9:38:cf:3c:0e:24:0e:e4:be: da:fa:ee:e1:f1:b1:aa:39:56:7a:e7:10:a6:73:f3:72:1c:98: fc:fc:04:45:b0:ad:d8:ae:03:41:b6:80:0f:fc:49:7c:51:19: 69:f6:5e:78:53:17:ae:93:d5:a2:a0:19:8d:f7:49:45:88:18: 70:55:c9:23 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVn3lhQGlYBfolT+Y7jF4vXqrgC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMjQwNjA3NTNaFw0yNTEyMjUwOTExNTNaMDMxMTAvBgNV BAMTKDhCRkQ3ODBBMTE3NzQ0QzQwRUMwMjBDNjZEMUM3NDQ2NjdBMTA5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VDiW8p81MchVqikTl5RYUfa6 ofHPnUWTueR/hmyWDh9JebwSvvF7IQ2khhjWVJfWWQnfpd7TNd0OuVGO7tTdAXTW NZTEvCK03GfHhjhd+ECJgGQ05FTRplaHITV1mT/yuEN2zaJ9WFPg4llJaz2ZeQqf k115SuOqyAk1mSkKK4S2KBM1qhxPBmY2lHQJd4jQWVnNL/uSOI65/0Li/VKH+U3M +1yWylbO9IHvTfGubxtVl0Uds0Y2dYJ+jij+XjuX93rYW8LlRMrXot+UxzYRCYoB I+S1x8b+BK6x0OASB6/L91b0mn8/LEweVS3cgMOoCs+X8mwiRATOokNlkKy/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUi/14ChF3RMQOwCDGbRx0RmehCdgwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYeBc+1SWj8jomMLzx5o h+A7nO5BgyfaiqaeHJYphkFLs25jr2mpUyiZMNfCz4DDdeFl18hrNyETWJA/0EtQ diwqlT6Df2MJDsuButG4rKzCzl1Qk+zRZulXHS9+7QpeQIWRZJDxTLUajbCXwg/h 4vV3KTiQc/20LOfOm8f9mYUP3nOz6D2m+EKJJb0HTVPrY4gFuFwp+rXkdFCZSti+ DkQldAgI6EzPWKACGsdw6l8DpCuxg+6WoyRw0CFWuTjPPA4kDuS+2vru4fGxqjlW eucQpnPzchyY/PwERbCt2K4DQbaAD/xJfFEZafZeeFMXrpPVoqAZjfdJRYgYcFXJ Iw== -----END CERTIFICATE-----Generated at Wed Dec 24 19:03:47 2025 by rpki-client