This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: VRMVidB99D4P1L5FwE7Qkx+VFku4lok0BHJLvXlRroU= Subject key identifier: 3D:50:BB:6B:E0:13:33:66:DE:05:B7:F1:6C:DB:AB:28:B9:56:0F:49 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 45B765F432EEAD6C31E19B1E201AE260879E490B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0360 Signing time: Fri 23 Jan 2026 21:53:25 +0000 Manifest this update: Fri 23 Jan 2026 21:48:25 +0000 Manifest next update: Sat 24 Jan 2026 22:49:25 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: aVQpdfosVJKTInvISJkPPnLQVAMz23HBCjwS34lwXho=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 22:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b7:65:f4:32:ee:ad:6c:31:e1:9b:1e:20:1a:e2:60:87:9e:49:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 23 21:48:25 2026 GMT Not After : Jan 24 22:49:25 2026 GMT Subject: CN=3D50BB6BE0133366DE05B7F16CDBAB28B9560F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:ef:52:d8:1c:5e:24:be:49:4d:66:26:4c: 43:42:8b:d4:78:81:eb:e2:d3:aa:2c:84:90:c4:98: 5c:ac:2b:bc:6b:62:c4:fa:a9:56:4e:c5:26:88:7b: 01:fa:89:1f:92:15:fa:47:3d:99:5e:d8:a2:77:9f: 18:ec:d4:86:5a:42:39:04:d6:4d:89:bc:7e:d7:1a: 10:b6:ee:49:db:54:6f:49:80:73:55:9d:84:b9:1f: 44:63:4d:cc:5d:38:01:37:2f:0f:82:f1:3a:11:99: 7f:5c:5d:22:82:b9:04:ab:ec:eb:3a:a6:78:f5:dc: 2c:77:7b:49:40:87:ee:ea:06:12:49:3e:7e:0c:2a: 98:af:6a:09:89:c8:0a:8a:55:0a:61:78:ab:91:f2: d0:24:bd:39:d1:57:43:fc:47:a5:89:aa:e1:6c:0e: 39:b9:1b:95:fc:42:3d:b3:7c:98:b0:34:fb:b2:20: 0f:34:78:46:de:f0:d6:16:de:62:97:2a:b3:56:2a: 99:43:7c:45:cd:ed:00:2a:6c:90:a0:b0:63:75:05: f2:28:0e:06:26:3d:7d:ad:2f:6b:3a:26:92:35:52: 1b:38:a9:e8:c7:09:12:38:8d:60:ba:b9:74:42:23: b0:68:d3:cd:1c:2f:ee:8f:84:9c:4a:d0:b4:92:4e: 58:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:BB:6B:E0:13:33:66:DE:05:B7:F1:6C:DB:AB:28:B9:56:0F:49 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:14:ba:18:68:fd:45:5e:1e:05:b2:8a:91:86:ab:49:dc:0f: b4:b3:2e:f5:10:24:2e:69:04:02:d5:96:1e:b1:2c:d4:0c:74: 5e:2b:98:b4:17:f8:0d:4b:ad:4f:7d:cc:c1:a9:63:ce:d4:24: c7:bc:7f:e2:ca:cd:7c:8c:e6:91:4e:22:78:4e:8d:13:6d:ac: 88:b5:8c:73:86:b9:62:35:63:9d:bf:29:2b:31:fd:c0:8c:67: d8:a1:61:93:b8:3f:42:14:c9:02:da:ba:24:2a:09:0e:2f:e1: b1:45:7d:5c:17:ee:aa:89:7a:0f:22:98:7e:2c:eb:d1:91:3c: df:56:83:1c:e3:04:4d:15:47:d6:93:e3:ef:bb:a5:5a:5c:56: b2:5d:95:e6:a9:74:8a:20:f0:2d:53:0a:26:18:03:13:4a:d3: ad:0a:e5:46:ed:62:9f:4e:81:78:78:9b:27:06:8d:52:66:2d: 07:0f:1e:ed:03:dd:7a:84:a3:9f:50:ee:c1:c5:0e:0d:c4:60: 77:15:2e:48:c4:3d:a9:cd:da:0e:68:34:3a:26:a9:99:20:a7: fa:e6:bb:97:41:68:10:fe:d0:f3:23:a5:ba:30:3f:b4:94:af: 3c:90:34:02:2c:d8:16:5e:9a:c2:1b:72:24:03:cf:b1:14:0d: 6d:a3:2c:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURbdl9DLurWwx4ZseIBriYIeeSQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMjMyMTQ4MjVaFw0yNjAxMjQyMjQ5MjVaMDMxMTAvBgNV BAMTKDNENTBCQjZCRTAxMzMzNjZERTA1QjdGMTZDREJBQjI4Qjk1NjBGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDb+9S2BxeJL5JTWYmTENCi9R4 gevi06oshJDEmFysK7xrYsT6qVZOxSaIewH6iR+SFfpHPZle2KJ3nxjs1IZaQjkE 1k2JvH7XGhC27knbVG9JgHNVnYS5H0RjTcxdOAE3Lw+C8ToRmX9cXSKCuQSr7Os6 pnj13Cx3e0lAh+7qBhJJPn4MKpivagmJyAqKVQpheKuR8tAkvTnRV0P8R6WJquFs Djm5G5X8Qj2zfJiwNPuyIA80eEbe8NYW3mKXKrNWKplDfEXN7QAqbJCgsGN1BfIo DgYmPX2tL2s6JpI1Uhs4qejHCRI4jWC6uXRCI7Bo080cL+6PhJxK0LSSTlhHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPVC7a+ATM2beBbfxbNurKLlWD0kwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBS6GGj9RV4eBbKKkYar SdwPtLMu9RAkLmkEAtWWHrEs1Ax0XiuYtBf4DUutT33MwaljztQkx7x/4srNfIzm kU4ieE6NE22siLWMc4a5YjVjnb8pKzH9wIxn2KFhk7g/QhTJAtq6JCoJDi/hsUV9 XBfuqol6DyKYfizr0ZE831aDHOMETRVH1pPj77ulWlxWsl2V5ql0iiDwLVMKJhgD E0rTrQrlRu1in06BeHibJwaNUmYtBw8e7QPdeoSjn1DuwcUODcRgdxUuSMQ9qc3a Dmg0OiapmSCn+ua7l0FoEP7Q8yOlujA/tJSvPJA0AizYFl6awhtyJAPPsRQNbaMs lg== -----END CERTIFICATE-----Generated at Sat Jan 24 07:26:00 2026 by rpki-client