This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier: Y55WyncvMdoPyLalKPsuujVZK9XxRlpeowJGx3wxESM=
Subject key identifier: D4:D1:72:B2:90:7D:FA:01:5C:9C:92:87:10:29:69:D7:3D:E5:75:34
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial: 063A009A12D0F02A7B735D30430550EA3950EB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number: 036E
Signing time: Tue 03 Feb 2026 07:48:32 +0000
Manifest this update: Tue 03 Feb 2026 07:43:32 +0000
Manifest next update: Wed 04 Feb 2026 08:20:32 +0000
Files and hashes: 1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: cL36XCpQtT1GubUKavLhi6WWzGjp8Cuh0590iwjF39g=)
4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 08:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3a:00:9a:12:d0:f0:2a:7b:73:5d:30:43:05:50:ea:39:50:eb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Validity
Not Before: Feb 3 07:43:32 2026 GMT
Not After : Feb 4 08:20:32 2026 GMT
Subject: CN=D4D172B2907DFA015C9C9287102969D73DE57534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:06:08:d3:94:a6:33:25:2d:9b:0e:ea:7b:
b3:ad:e8:c2:33:d8:54:be:9c:7b:bd:86:8f:89:ce:
59:f3:0e:ee:8b:fc:71:dc:9f:4c:8c:fd:47:68:b7:
ff:52:29:1c:82:a1:20:ae:a0:73:2d:76:09:92:db:
bb:da:35:9e:ce:bd:84:7b:e7:c2:16:a1:1f:49:e0:
f3:11:fa:a6:a7:a6:3f:33:cf:3f:bb:b5:9c:86:9f:
d3:bd:22:70:f3:b0:e2:ea:f4:4a:d5:99:c2:7d:95:
f3:39:37:10:6c:95:d6:cb:11:53:d3:d5:fa:7d:66:
00:2c:68:46:a5:63:04:b3:b7:17:a7:96:92:46:0c:
bb:5d:6c:57:50:56:a6:e5:9c:78:63:3b:18:72:4f:
26:64:f3:ab:f8:26:f8:76:64:af:bb:61:12:dc:a1:
bd:45:12:bc:6d:a1:70:92:00:85:8c:06:8f:f0:49:
1b:0f:3a:46:ab:ad:88:a9:67:2b:c1:ac:e5:86:51:
ba:a0:20:a3:76:d4:b4:6d:72:00:75:a3:57:ab:fa:
b3:d0:2a:17:e4:43:4a:01:21:4e:fc:05:a0:61:8a:
b9:e4:22:af:b1:d3:ae:a6:07:d1:01:62:ed:8a:69:
35:e1:e5:91:35:f7:71:5d:87:3a:64:0d:a0:ee:66:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:72:B2:90:7D:FA:01:5C:9C:92:87:10:29:69:D7:3D:E5:75:34
X509v3 Authority Key Identifier:
keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:1f:6d:67:ce:79:7a:a8:a2:33:1b:ce:77:a6:b8:c2:8c:4a:
ad:d2:9f:9b:8e:2e:cf:94:f7:5f:c4:99:78:0d:8a:20:67:99:
dc:48:1a:be:5e:2c:e1:c3:1a:b4:30:88:0f:9e:38:13:89:2b:
0c:47:9d:7e:6d:1b:33:a3:01:56:2a:5f:ab:2e:85:ee:f7:49:
9a:5d:69:a2:b5:08:f7:2c:25:ae:56:ff:3a:54:f2:44:eb:c2:
9e:36:fe:00:ea:9a:7a:58:fa:f5:3f:98:67:97:6a:61:61:80:
b2:b8:68:3d:02:ed:32:72:86:b7:1f:f2:97:7d:79:ed:cd:48:
5e:18:7d:55:31:f5:76:45:13:ac:ba:92:26:96:c0:55:7c:81:
71:c1:56:a8:0c:a9:ad:50:d2:69:56:af:24:31:18:ef:c4:ef:
93:1a:62:c6:8d:eb:82:50:ae:44:0c:5b:fc:44:f6:9d:22:01:
a5:ea:09:a3:c5:68:76:98:07:57:51:fc:5d:5b:7d:11:64:1b:
8c:ba:6b:2f:00:e0:32:b9:9b:ea:8a:a3:92:9c:1a:ba:86:4e:
89:f6:7d:07:ef:c7:59:1e:0f:8e:30:6f:7a:62:fd:0b:19:b7:
3b:44:e7:5f:ba:2f:6b:bb:d6:96:68:4c:f9:73:8f:79:b1:d9:
ac:0d:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 13:05:36 2026 by rpki-client