This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: wBLk1oBihon4XrfmOIMCGKpggg3xQ1MALqF9TeaTXAc= Subject key identifier: 38:A0:41:DF:F6:EE:4A:A0:98:D9:6E:41:03:D4:8C:CE:D9:B8:51:51 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 6E066D681FE24E11718E6481D40874EDA8336A4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0310 Signing time: Wed 26 Nov 2025 03:17:40 +0000 Manifest this update: Wed 26 Nov 2025 03:12:40 +0000 Manifest next update: Thu 27 Nov 2025 04:04:40 +0000 Files and hashes: 1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: a8sOrpyhAkZScSyTwLW8ZjOs2g9p+6u2S+nmGIPohRs=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 04:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:06:6d:68:1f:e2:4e:11:71:8e:64:81:d4:08:74:ed:a8:33:6a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 26 03:12:40 2025 GMT Not After : Nov 27 04:04:40 2025 GMT Subject: CN=38A041DFF6EE4AA098D96E4103D48CCED9B85151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:86:6e:c3:a4:8d:14:f0:64:43:d6:97:00: 7a:d6:cc:ba:90:15:53:10:70:1f:b2:e4:89:32:30: d7:55:ac:98:35:b8:12:96:a2:2f:b7:13:99:14:b1: 06:d3:f8:fe:53:34:d5:1d:35:e0:fe:5b:39:ee:60: ac:b6:ac:07:0b:e3:89:8b:f4:bf:4f:15:89:74:09: a2:41:5a:21:a0:0f:26:10:ab:3e:42:e1:9f:42:09: fe:b3:c3:a7:10:c0:0b:bf:b7:36:bd:8a:11:a4:4e: ae:45:22:56:15:9f:48:c4:57:21:91:19:1a:69:c5: 0b:f5:a2:24:3c:5c:5e:e4:8d:88:75:0c:b8:3f:ff: 80:bb:22:2a:66:76:09:76:c7:0e:a6:25:36:74:dd: 71:ad:31:04:0c:02:4f:3e:0c:b5:62:22:4b:ef:08: 0c:64:32:24:2f:13:e2:ef:0c:f3:8b:c0:4a:c1:9a: d6:28:2b:5c:d0:87:20:b2:58:0f:65:8f:77:22:a0: cd:65:2e:2c:e7:0b:7e:71:e4:a2:9d:c1:fc:ad:20: 76:bf:15:de:c2:c3:88:f6:a5:d0:01:35:3a:3c:35: 6f:83:9a:d1:27:e9:53:17:2d:66:15:08:90:74:08: 7e:a0:1c:83:c6:53:17:0d:b1:5c:ec:4d:d9:23:46: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:41:DF:F6:EE:4A:A0:98:D9:6E:41:03:D4:8C:CE:D9:B8:51:51 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f2:cd:56:d2:73:0b:30:8b:ce:bb:0e:80:0c:4d:6d:46:ee: 4d:0c:58:c1:77:d6:4b:4c:1e:c1:93:81:ca:e1:4c:d6:75:02: 54:f0:c8:c6:c4:1a:6a:0f:73:71:f1:4b:b1:b3:23:e1:24:6e: f2:7f:c6:60:13:af:52:b6:70:5d:78:b0:5d:b0:bb:74:1f:0a: 70:02:31:79:76:05:90:aa:44:d9:80:61:a8:fd:ac:ae:1e:1e: ae:f4:98:f5:10:00:18:9d:bc:db:0a:da:4c:8b:a9:2d:2e:dc: b9:d2:48:46:78:4d:8e:a0:7d:54:db:b1:3a:72:36:13:88:16: 26:08:2f:58:cf:29:cf:c0:2d:b0:ec:92:a1:8d:19:23:d7:eb: 58:f5:7d:78:48:f7:77:2d:44:08:cd:d9:0b:69:a6:1c:b6:de: c0:4f:45:3d:f2:5c:95:34:29:ce:0b:2d:e7:e3:ec:d7:27:3d: 4b:02:32:e1:6c:c5:08:b6:ee:12:03:53:73:21:af:e8:4a:8f: 5e:2e:b8:1f:7e:7a:eb:dd:4a:4b:43:da:41:26:62:83:c9:c6: 38:60:c8:47:1c:78:1b:0b:57:c7:31:d4:79:0f:5a:77:3b:f3: cf:a5:a8:bd:c0:c0:68:a5:33:24:68:f9:3c:98:82:d8:49:2e: 53:20:0a:2d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbgZtaB/iThFxjmSB1Ah07agzakwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjYwMzEyNDBaFw0yNTExMjcwNDA0NDBaMDMxMTAvBgNV BAMTKDM4QTA0MURGRjZFRTRBQTA5OEQ5NkU0MTAzRDQ4Q0NFRDlCODUxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3K4Zuw6SNFPBkQ9aXAHrWzLqQ FVMQcB+y5IkyMNdVrJg1uBKWoi+3E5kUsQbT+P5TNNUdNeD+WznuYKy2rAcL44mL 9L9PFYl0CaJBWiGgDyYQqz5C4Z9CCf6zw6cQwAu/tza9ihGkTq5FIlYVn0jEVyGR GRppxQv1oiQ8XF7kjYh1DLg//4C7Iipmdgl2xw6mJTZ03XGtMQQMAk8+DLViIkvv CAxkMiQvE+LvDPOLwErBmtYoK1zQhyCyWA9lj3cioM1lLiznC35x5KKdwfytIHa/ Fd7Cw4j2pdABNTo8NW+DmtEn6VMXLWYVCJB0CH6gHIPGUxcNsVzsTdkjRvLDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOKBB3/buSqCY2W5BA9SMztm4UVEwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPLNVtJzCzCLzrsOgAxN bUbuTQxYwXfWS0wewZOByuFM1nUCVPDIxsQaag9zcfFLsbMj4SRu8n/GYBOvUrZw XXiwXbC7dB8KcAIxeXYFkKpE2YBhqP2srh4ervSY9RAAGJ282wraTIupLS7cudJI RnhNjqB9VNuxOnI2E4gWJggvWM8pz8AtsOySoY0ZI9frWPV9eEj3dy1ECM3ZC2mm HLbewE9FPfJclTQpzgst5+Ps1yc9SwIy4WzFCLbuEgNTcyGv6EqPXi64H356691K S0PaQSZig8nGOGDIRxx4GwtXxzHUeQ9adzvzz6WovcDAaKUzJGj5PJiC2EkuUyAK LQ== -----END CERTIFICATE-----Generated at Wed Nov 26 15:31:08 2025 by rpki-client