This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: LICmTVhftDxUmNu5YiWzf6O4bSduMlwnSxGgRhLpZpA= Subject key identifier: 44:2A:ED:B2:EA:EB:83:4B:F1:EB:AA:F5:F9:B1:81:EC:0B:14:26:90 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 1580C51726F5CB496BD7D4D2E2E146DC873070B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0322 Signing time: Tue 09 Dec 2025 11:17:44 +0000 Manifest this update: Tue 09 Dec 2025 11:12:44 +0000 Manifest next update: Wed 10 Dec 2025 15:00:44 +0000 Files and hashes: 1: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: SsqC95/DAdstWY2gUjOk+0Ssn0TQUPRXBNogx/Ge32M=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:80:c5:17:26:f5:cb:49:6b:d7:d4:d2:e2:e1:46:dc:87:30:70:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 9 11:12:44 2025 GMT Not After : Dec 10 15:00:44 2025 GMT Subject: CN=442AEDB2EAEB834BF1EBAAF5F9B181EC0B142690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:83:6a:ba:94:d4:64:e0:37:91:bd:5a:2f: 70:cb:f1:d6:9d:16:7b:bd:0d:38:45:5f:b8:ad:ee: c7:27:f5:20:54:1a:b4:9d:55:95:3b:f1:e9:95:4c: 8a:bd:1c:31:32:0e:5b:c2:74:83:9f:89:b0:98:49: 85:92:57:62:b0:f1:fe:bd:de:f9:f4:69:8f:51:15: 3a:39:56:c8:71:a9:8d:c8:a4:3e:d7:73:b6:c1:18: 45:7a:79:5c:79:4f:7f:3a:75:b6:59:3e:69:1a:d5: c2:62:b8:bd:c8:78:d0:e0:35:b2:fb:58:b7:e6:25: 96:1a:de:09:ce:a0:31:6b:89:b8:27:b0:e4:8f:c4: a9:e0:c5:1e:54:bd:da:75:33:d1:e2:ba:89:be:a4: 3c:3c:6b:a9:59:ed:7b:e5:04:e7:41:10:de:fa:14: 60:ee:82:4b:8e:d0:ec:7a:9d:5f:51:37:67:42:a6: 3c:6b:29:1d:b8:a4:fd:ef:b4:4a:0e:93:53:50:97: bf:dd:58:c3:1d:08:62:0a:cc:3f:ee:73:6f:66:95: 3f:91:49:1c:75:3d:d2:7f:a0:fb:32:da:2c:2b:cc: de:07:8c:ff:d4:47:77:55:a4:79:26:b7:c8:75:a4: a0:12:0b:7a:9d:82:61:31:9e:0c:5b:76:3c:c5:68: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:ED:B2:EA:EB:83:4B:F1:EB:AA:F5:F9:B1:81:EC:0B:14:26:90 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:39:80:6e:29:f9:cc:73:5b:f2:c8:a1:ee:57:f7:8f:70: d8:4f:d3:b0:2d:c9:2f:8f:e2:b7:5c:e0:34:c4:75:c6:88:77: 90:cf:42:9c:66:32:35:98:d0:1d:c8:86:ba:b0:05:7f:54:33: 4f:8a:42:cf:77:53:c1:4f:46:fa:92:14:69:0e:99:fa:f4:f6: ae:ee:ce:56:12:6d:1b:53:bc:b3:33:ff:6e:f6:ce:c2:ed:9a: 4c:51:d9:1e:1d:f7:bf:12:20:ac:39:a6:af:a5:14:94:91:1f: 02:c9:1b:2f:aa:94:53:b7:d6:f3:72:f3:7c:49:4b:d3:02:39: a5:6c:d9:54:9d:70:40:40:4a:28:bb:05:a9:8d:76:ff:91:d1: dc:a3:65:ca:de:ed:d4:c0:35:1b:be:18:98:c7:18:f7:a1:e3: cc:90:2a:6e:5a:b4:8a:17:9a:e1:ab:dd:2c:2a:86:4c:8a:a9: 37:fc:f6:a7:73:00:f8:9f:a1:0e:42:aa:db:d3:6f:8a:ff:6d: bd:2d:f1:c5:5b:2d:66:d6:d0:a6:3c:81:7a:83:7a:50:5a:05: eb:61:7c:43:bd:e8:8b:ee:79:13:68:6a:b6:f5:d9:b1:89:1d: 81:cb:54:3a:64:b0:78:1c:01:91:2d:ab:2b:0d:34:c5:93:46: d4:64:28:62 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFYDFFyb1y0lr19TS4uFG3IcwcLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDkxMTEyNDRaFw0yNTEyMTAxNTAwNDRaMDMxMTAvBgNV BAMTKDQ0MkFFREIyRUFFQjgzNEJGMUVCQUFGNUY5QjE4MUVDMEIxNDI2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1M4NqupTUZOA3kb1aL3DL8dad Fnu9DThFX7it7scn9SBUGrSdVZU78emVTIq9HDEyDlvCdIOfibCYSYWSV2Kw8f69 3vn0aY9RFTo5VshxqY3IpD7Xc7bBGEV6eVx5T386dbZZPmka1cJiuL3IeNDgNbL7 WLfmJZYa3gnOoDFribgnsOSPxKngxR5Uvdp1M9Hiuom+pDw8a6lZ7XvlBOdBEN76 FGDugkuO0Ox6nV9RN2dCpjxrKR24pP3vtEoOk1NQl7/dWMMdCGIKzD/uc29mlT+R SRx1PdJ/oPsy2iwrzN4HjP/UR3dVpHkmt8h1pKASC3qdgmExngxbdjzFaA5JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURCrtsurrg0vx66r1+bGB7AsUJpAwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoE5gG4p+cxzW/LIoe5X 949w2E/TsC3JL4/it1zgNMR1xoh3kM9CnGYyNZjQHciGurAFf1QzT4pCz3dTwU9G +pIUaQ6Z+vT2ru7OVhJtG1O8szP/bvbOwu2aTFHZHh33vxIgrDmmr6UUlJEfAskb L6qUU7fW83LzfElL0wI5pWzZVJ1wQEBKKLsFqY12/5HR3KNlyt7t1MA1G74YmMcY 96HjzJAqblq0ihea4avdLCqGTIqpN/z2p3MA+J+hDkKq29Nviv9tvS3xxVstZtbQ pjyBeoN6UFoF62F8Q73oi+55E2hqtvXZsYkdgctUOmSweBwBkS2rKw00xZNG1GQo Yg== -----END CERTIFICATE-----Generated at Tue Dec 9 15:12:33 2025 by rpki-client