This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: NvoAXkT9ZOSFUhGZUDcJ+gnrzHB0ecdSXdHxIwTE33Y= Subject key identifier: F2:B4:4B:94:58:C3:43:0B:51:6D:ED:CE:2A:95:C9:35:C3:40:B1:32 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 48CB8BB9A7886BA6E7C3E55A0ECE68584368A169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 031C Signing time: Thu 04 Dec 2025 23:17:40 +0000 Manifest this update: Thu 04 Dec 2025 23:12:40 +0000 Manifest next update: Fri 05 Dec 2025 23:27:40 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: E49Ug/B8dkIUZaxdhRH5pAXPo9o/1FEtiKeBzQ+KBxs=) 4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 23:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cb:8b:b9:a7:88:6b:a6:e7:c3:e5:5a:0e:ce:68:58:43:68:a1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 4 23:12:40 2025 GMT Not After : Dec 5 23:27:40 2025 GMT Subject: CN=F2B44B9458C3430B516DEDCE2A95C935C340B132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:88:34:48:78:c7:76:cf:a5:bb:27:40:d6: af:0d:4f:1e:09:b6:9b:57:13:d0:14:8b:c9:a8:40: 4b:92:7e:74:aa:23:63:cf:c9:6f:47:9f:a0:ac:5a: 20:8c:df:e3:47:02:2b:09:95:f7:17:7b:8f:1b:06: fb:93:cd:0c:fe:2f:54:2f:a8:4e:c3:7b:7b:96:64: 40:af:05:20:d4:1e:92:c4:8d:20:e0:8b:59:8e:99: c3:c5:8b:5b:86:1d:c5:71:2f:a8:6c:e0:ec:41:7c: 5b:f5:66:72:1e:12:35:30:45:a1:69:6d:94:1c:a5: 4b:40:49:ed:3c:03:2c:83:ac:63:bf:4f:f8:c7:30: 2b:a3:9c:8c:43:a6:ac:f0:b5:ee:e6:71:5e:91:10: 04:63:06:b4:b7:ec:fa:c4:8a:5f:af:db:c1:8f:07: 6e:1c:16:94:63:f1:03:28:00:c1:fd:11:4f:d0:6a: 7e:00:31:19:40:21:85:a3:bb:ac:1d:5b:40:1f:c4: df:28:c6:a9:4b:f8:08:97:c9:1a:69:60:be:61:ee: 3f:26:ee:bc:b1:fd:da:30:78:42:a4:91:55:b5:73: 34:fc:1f:e1:f0:e1:15:25:c5:04:0f:38:d1:71:27: b9:3a:ba:f1:c9:e9:0a:18:97:86:8c:29:fb:4d:a0: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:4B:94:58:C3:43:0B:51:6D:ED:CE:2A:95:C9:35:C3:40:B1:32 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:d8:25:11:a4:a7:68:4f:71:bc:3b:e2:5e:fc:08:b6:35:85: e1:68:6b:e5:3c:bf:76:14:35:17:50:3f:20:3c:56:84:e5:60: 1e:3f:db:fd:55:48:74:29:6c:f5:28:42:ef:d1:fe:89:06:2f: a2:90:f7:d6:a1:34:33:53:73:74:97:f6:58:43:25:3b:2e:9d: 86:df:bb:ff:41:b6:61:6d:62:68:f2:6c:bc:54:2c:05:63:76: 89:95:f8:91:27:c6:00:df:01:58:51:3a:f9:71:71:1c:e5:62: 13:43:fd:02:a4:32:d6:0a:fd:ef:68:d6:8e:b0:55:e7:7d:6e: 5f:da:96:b6:ce:5f:61:c2:6d:89:f8:dd:5f:d8:86:14:81:6c: 08:5e:af:64:63:01:0b:de:be:67:1b:33:1a:7d:3f:88:c9:f1: 9e:a0:2b:9e:1a:b1:d5:80:82:02:00:19:2f:3e:8a:fb:6b:2b: 1d:67:75:d2:59:d9:66:8e:96:ee:ec:77:b8:ca:22:1c:c9:80: ab:29:f6:d3:1e:e4:2c:7d:b4:74:a2:a9:b6:25:0f:22:f3:6c: 45:d8:92:ab:07:25:06:81:29:c5:4d:5e:b4:aa:c4:41:22:4c: e0:7d:3d:10:08:08:ab:96:82:95:25:2e:5c:d3:df:8c:6e:37: d3:2b:9b:a1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSMuLuaeIa6bnw+VaDs5oWENooWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDQyMzEyNDBaFw0yNTEyMDUyMzI3NDBaMDMxMTAvBgNV BAMTKEYyQjQ0Qjk0NThDMzQzMEI1MTZERURDRTJBOTVDOTM1QzM0MEIxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKog0SHjHds+luydA1q8NTx4J tptXE9AUi8moQEuSfnSqI2PPyW9Hn6CsWiCM3+NHAisJlfcXe48bBvuTzQz+L1Qv qE7De3uWZECvBSDUHpLEjSDgi1mOmcPFi1uGHcVxL6hs4OxBfFv1ZnIeEjUwRaFp bZQcpUtASe08AyyDrGO/T/jHMCujnIxDpqzwte7mcV6REARjBrS37PrEil+v28GP B24cFpRj8QMoAMH9EU/Qan4AMRlAIYWju6wdW0AfxN8oxqlL+AiXyRppYL5h7j8m 7ryx/doweEKkkVW1czT8H+Hw4RUlxQQPONFxJ7k6uvHJ6QoYl4aMKftNoObjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8rRLlFjDQwtRbe3OKpXJNcNAsTIwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydglEaSnaE9xvDviXvwI tjWF4Whr5Ty/dhQ1F1A/IDxWhOVgHj/b/VVIdCls9ShC79H+iQYvopD31qE0M1Nz dJf2WEMlOy6dht+7/0G2YW1iaPJsvFQsBWN2iZX4kSfGAN8BWFE6+XFxHOViE0P9 AqQy1gr972jWjrBV531uX9qWts5fYcJtifjdX9iGFIFsCF6vZGMBC96+ZxszGn0/ iMnxnqArnhqx1YCCAgAZLz6K+2srHWd10lnZZo6W7ux3uMoiHMmAqyn20x7kLH20 dKKptiUPIvNsRdiSqwclBoEpxU1etKrEQSJM4H09EAgIq5aClSUuXNPfjG430yub oQ== -----END CERTIFICATE-----Generated at Fri Dec 5 13:10:28 2025 by rpki-client