This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier: hxu9i4tCwc8GcjhmZR4G9W9Pul2UpE4j2HVs7FVgLi8=
Subject key identifier: 50:19:02:71:78:6B:A0:DC:3D:75:A4:23:78:6D:65:25:28:FF:96:03
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial: 539420E19259348BD1AB3BA0B222ACB89FAB3973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number: 0319
Signing time: Tue 02 Dec 2025 18:12:40 +0000
Manifest this update: Tue 02 Dec 2025 18:07:40 +0000
Manifest next update: Wed 03 Dec 2025 20:28:40 +0000
Files and hashes: 1: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: IAQh3svgCxLF33A49Ddn5JY9Xj3Nc5VMRFjM55eMxI8=)
2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Dec 2025 12:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:94:20:e1:92:59:34:8b:d1:ab:3b:a0:b2:22:ac:b8:9f:ab:39:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Validity
Not Before: Dec 2 18:07:40 2025 GMT
Not After : Dec 3 20:28:40 2025 GMT
Subject: CN=50190271786BA0DC3D75A423786D652528FF9603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:24:94:63:bf:38:c4:6a:82:f0:ec:94:5c:
97:96:47:c5:b5:9c:52:0a:3b:d4:f0:b3:8d:35:ff:
36:0a:3e:e9:db:f8:6a:a1:86:34:92:7d:27:58:a6:
30:2b:c9:99:2e:1e:70:b4:0c:45:02:c4:7d:7e:71:
aa:b9:99:d3:81:c0:8e:9f:15:62:ad:ae:2e:53:e1:
b6:fe:17:59:cb:f5:63:67:e0:26:a9:a3:dd:a0:8e:
2a:e8:21:83:7a:b1:62:d1:76:a6:8a:b9:7b:11:75:
40:86:24:32:09:9e:45:51:cb:07:8b:0e:7b:be:af:
2b:fd:fe:a1:e0:cb:1e:c4:7a:0c:5b:e8:a9:74:35:
8b:18:ee:af:2e:3b:00:ab:4a:d3:8f:39:0a:7b:6e:
96:f8:9f:e3:af:b9:d9:88:3a:ac:bf:9e:06:bf:27:
6c:ff:37:ae:94:d2:9a:1a:cd:21:84:55:c8:07:54:
54:c3:58:80:94:f4:e0:e1:84:de:77:77:7e:a3:20:
81:03:54:08:47:f2:ee:32:0c:00:d5:a0:25:63:85:
4b:ae:7c:28:f5:fc:90:00:6e:c0:17:68:60:84:73:
ac:03:76:48:d1:f8:0b:6d:dd:98:0a:a1:fb:d9:e7:
04:9b:c2:fa:b4:8d:3d:c0:01:17:58:6c:1c:d8:8a:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:02:71:78:6B:A0:DC:3D:75:A4:23:78:6D:65:25:28:FF:96:03
X509v3 Authority Key Identifier:
keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:8e:87:f6:bd:8f:d5:17:30:89:00:6a:ba:2e:9e:b0:2a:
c9:7f:e2:d8:da:22:db:ba:6b:f5:84:c8:34:a8:62:60:ef:31:
23:ac:22:ca:d9:32:cc:4c:50:ce:85:8d:42:10:76:29:fa:23:
57:0e:47:6f:93:24:ce:93:10:42:d4:33:5c:79:48:c4:eb:1b:
96:71:42:e6:1a:e0:31:78:0a:be:f1:ff:bd:94:44:3a:c2:ec:
3d:85:92:0f:49:38:65:b5:3d:de:9b:08:08:91:ae:8d:0c:fe:
fb:b3:30:bb:fe:ac:18:6e:bc:62:29:d3:ff:b7:fa:79:fe:4c:
ef:b9:29:e3:d3:ab:7e:0f:70:e7:52:4e:34:d6:af:5c:01:5b:
8c:3d:08:fa:4a:ec:93:11:52:f3:98:c8:76:fe:73:d0:88:48:
b2:28:fc:a5:c9:0a:f6:ef:e1:aa:cd:5e:3f:28:0e:5e:49:1a:
52:93:be:72:87:74:1f:75:94:5f:56:57:14:34:7d:d4:22:e1:
9e:54:fc:07:89:d3:5f:55:42:1e:71:e9:63:e3:5e:58:2b:8c:
ae:2c:9f:33:64:a4:f0:59:01:01:62:49:44:08:1c:0f:68:7c:
29:81:d4:8c:18:54:0e:35:09:7d:aa:11:54:70:17:4f:21:9e:
92:e5:43:ae
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUU5Qg4ZJZNIvRqzugsiKsuJ+rOXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNTEyMDIxODA3NDBaFw0yNTEyMDMyMDI4NDBaMDMxMTAvBgNV
BAMTKDUwMTkwMjcxNzg2QkEwREMzRDc1QTQyMzc4NkQ2NTI1MjhGRjk2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXySUY784xGqC8OyUXJeWR8W1
nFIKO9Tws401/zYKPunb+GqhhjSSfSdYpjAryZkuHnC0DEUCxH1+caq5mdOBwI6f
FWKtri5T4bb+F1nL9WNn4Capo92gjiroIYN6sWLRdqaKuXsRdUCGJDIJnkVRyweL
Dnu+ryv9/qHgyx7Eegxb6Kl0NYsY7q8uOwCrStOPOQp7bpb4n+OvudmIOqy/nga/
J2z/N66U0poazSGEVcgHVFTDWICU9ODhhN53d36jIIEDVAhH8u4yDADVoCVjhUuu
fCj1/JAAbsAXaGCEc6wDdkjR+Att3ZgKofvZ5wSbwvq0jT3AARdYbBzYilLjAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUBkCcXhroNw9daQjeG1lJSj/lgMwHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y
ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE
N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDmOh/a9j9UXMIkAarou
nrAqyX/i2Noi27pr9YTINKhiYO8xI6wiytkyzExQzoWNQhB2KfojVw5Hb5MkzpMQ
QtQzXHlIxOsblnFC5hrgMXgKvvH/vZREOsLsPYWSD0k4ZbU93psICJGujQz++7Mw
u/6sGG68YinT/7f6ef5M77kp49Orfg9w51JONNavXAFbjD0I+krskxFS85jIdv5z
0IhIsij8pckK9u/hqs1ePygOXkkaUpO+cod0H3WUX1ZXFDR91CLhnlT8B4nTX1VC
HnHpY+NeWCuMriyfM2Sk8FkBAWJJRAgcD2h8KYHUjBhUDjUJfaoRVHAXTyGekuVD
rg==
-----END CERTIFICATE-----
Generated at Tue Dec 2 20:52:44 2025 by rpki-client