This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: edcVDda7y2cuzYQ012ZaR0MElG3lR3tF2d1JKFSJmWY= Subject key identifier: F2:70:B5:4E:4F:9D:88:10:9A:45:EE:85:5B:FA:F6:8E:0E:E7:8E:55 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 7A9698DDF892B9734C7D5A73FEC8B8462A14C4FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 030D Signing time: Sun 23 Nov 2025 20:22:37 +0000 Manifest this update: Sun 23 Nov 2025 20:17:37 +0000 Manifest next update: Tue 25 Nov 2025 00:01:37 +0000 Files and hashes: 1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 2: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: YgwWf+JfYcQRKI7Vw4xgu2kJU1tifZahPcBY7ZBGjYI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:96:98:dd:f8:92:b9:73:4c:7d:5a:73:fe:c8:b8:46:2a:14:c4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 23 20:17:37 2025 GMT Not After : Nov 25 00:01:37 2025 GMT Subject: CN=F270B54E4F9D88109A45EE855BFAF68E0EE78E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:f7:f2:c4:9d:47:c7:3d:45:ee:d2:07:60: a6:eb:9c:1b:17:36:3f:4c:e7:00:5d:35:3e:6d:91: 78:ab:b0:05:0f:f7:32:ec:b7:38:5c:d6:f2:18:e0: 2e:41:06:a0:aa:8b:e4:51:48:bd:3c:36:55:31:f3: e7:b3:3f:c8:30:5b:d1:6b:d4:76:01:e6:d3:ec:34: 69:d6:7d:4e:dd:32:7a:47:9d:c2:f1:85:e8:94:8b: 01:26:69:8c:30:b1:b5:62:3b:47:9a:14:1b:23:4b: 6f:d9:c8:8b:d4:90:55:e3:4a:2b:d5:6b:ee:b2:7f: f8:85:56:e7:e0:74:d7:be:68:b1:c0:6d:07:e8:f0: e2:5b:26:f7:86:60:41:d8:d6:54:80:04:7f:43:7f: 7a:f1:d0:ae:fa:d2:bf:7d:12:07:62:0e:a9:03:b9: 6c:fc:b8:48:b2:21:8a:08:83:0a:bf:2d:67:55:c7: 68:58:3c:de:dd:43:c5:8c:49:08:ad:ff:8d:a7:14: c7:9e:d7:b0:9b:98:da:f6:06:f3:14:74:c1:95:b6: be:5d:b2:8c:95:aa:d1:90:6e:7c:fb:1f:68:dd:18: 6a:44:9a:32:6a:98:b7:8f:3a:da:9e:a6:48:16:0e: 87:7f:66:aa:a2:51:b8:fe:78:ff:4b:f9:04:31:90: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:70:B5:4E:4F:9D:88:10:9A:45:EE:85:5B:FA:F6:8E:0E:E7:8E:55 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:75:6e:34:23:e3:27:6f:aa:5d:9f:96:15:95:1c:3c:44:d3: 71:c1:fa:24:86:a3:6b:b5:73:b3:a0:9e:41:02:90:dd:b1:e3: ea:8e:5e:81:af:cb:c1:04:bb:1b:15:84:54:5e:3a:26:a9:72: ed:0e:7f:d2:52:72:c9:78:e4:66:ea:81:b9:f4:f4:77:72:5e: 9f:61:5c:be:6f:51:83:1a:8d:1d:a3:5e:83:d7:b1:84:8a:4d: 58:0e:98:b7:82:db:4a:8c:ae:35:4f:7a:71:29:1d:2e:04:20: f8:70:bf:85:67:b9:f7:ab:14:8c:53:86:ef:93:b1:06:ac:75: 78:ce:07:32:56:c0:a7:fb:9a:d9:98:7c:1c:19:1f:ec:00:78: 90:c1:69:eb:ea:e6:b9:b3:bf:e1:d1:10:5c:74:12:15:30:8d: f0:96:f1:01:34:9b:2d:e7:1f:af:99:e0:0e:52:e6:d4:36:3e: ed:57:ce:32:0c:84:0d:63:21:4a:bb:53:88:8c:61:27:65:8f: cd:61:4b:6c:b4:3b:3d:ac:88:e7:d2:d4:5c:6c:84:db:a0:11: bd:93:b9:c7:c6:1a:56:c1:ce:20:f6:02:e0:2b:2a:64:ef:5f: 95:81:68:52:ea:77:57:aa:8d:40:e5:67:5a:cf:a2:77:0d:17: e0:07:81:1f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUepaY3fiSuXNMfVpz/si4RioUxP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjMyMDE3MzdaFw0yNTExMjUwMDAxMzdaMDMxMTAvBgNV BAMTKEYyNzBCNTRFNEY5RDg4MTA5QTQ1RUU4NTVCRkFGNjhFMEVFNzhFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqA/fyxJ1Hxz1F7tIHYKbrnBsX Nj9M5wBdNT5tkXirsAUP9zLstzhc1vIY4C5BBqCqi+RRSL08NlUx8+ezP8gwW9Fr 1HYB5tPsNGnWfU7dMnpHncLxheiUiwEmaYwwsbViO0eaFBsjS2/ZyIvUkFXjSivV a+6yf/iFVufgdNe+aLHAbQfo8OJbJveGYEHY1lSABH9Df3rx0K760r99EgdiDqkD uWz8uEiyIYoIgwq/LWdVx2hYPN7dQ8WMSQit/42nFMee17CbmNr2BvMUdMGVtr5d soyVqtGQbnz7H2jdGGpEmjJqmLePOtqepkgWDod/ZqqiUbj+eP9L+QQxkLq7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8nC1Tk+diBCaRe6FW/r2jg7njlUwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHVuNCPjJ2+qXZ+WFZUc PETTccH6JIaja7Vzs6CeQQKQ3bHj6o5ega/LwQS7GxWEVF46Jqly7Q5/0lJyyXjk ZuqBufT0d3Jen2Fcvm9RgxqNHaNeg9exhIpNWA6Yt4LbSoyuNU96cSkdLgQg+HC/ hWe596sUjFOG75OxBqx1eM4HMlbAp/ua2Zh8HBkf7AB4kMFp6+rmubO/4dEQXHQS FTCN8JbxATSbLecfr5ngDlLm1DY+7VfOMgyEDWMhSrtTiIxhJ2WPzWFLbLQ7PayI 59LUXGyE26ARvZO5x8YaVsHOIPYC4CsqZO9flYFoUup3V6qNQOVnWs+idw0X4AeB Hw== -----END CERTIFICATE-----Generated at Sun Nov 23 23:11:31 2025 by rpki-client