This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: rrvGVa2O/ilPBaxZcmHqu4A12muPU5pyj/C9sU42d6g= Subject key identifier: 77:FC:CB:1A:8F:79:CE:38:BF:6B:09:5D:AD:6E:83:95:42:D2:D5:E9 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 258E741470F0EDFB35F476DEA72B410280085EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0318 Signing time: Mon 01 Dec 2025 23:12:40 +0000 Manifest this update: Mon 01 Dec 2025 23:07:40 +0000 Manifest next update: Wed 03 Dec 2025 02:09:40 +0000 Files and hashes: 1: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: GthPI+yRkMjnxvXCEOi2ot8hFdZV47ZdZV/HoU37y8w=) 5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8e:74:14:70:f0:ed:fb:35:f4:76:de:a7:2b:41:02:80:08:5e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 1 23:07:40 2025 GMT Not After : Dec 3 02:09:40 2025 GMT Subject: CN=77FCCB1A8F79CE38BF6B095DAD6E839542D2D5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:b3:d3:f2:cc:39:68:03:4e:84:01:78:a3: 8f:71:4c:41:f3:52:e5:b3:e4:6d:34:e8:a1:6f:6a: 43:58:d2:0f:2e:79:dc:fb:0c:e5:ba:91:59:c6:52: c9:9b:99:90:00:53:58:66:df:cf:f2:92:9f:9c:2c: 75:5e:49:6b:1e:a9:63:41:89:3a:30:7c:73:21:2e: f4:a7:ca:ff:99:c0:23:d9:86:d2:33:35:cf:22:70: 86:e3:18:ef:b4:cc:10:2b:14:a7:f8:61:76:9c:10: 2a:99:d7:65:92:c9:e6:ea:79:8f:62:6d:cc:14:ef: 8a:60:23:63:49:08:b3:5e:b5:9b:80:60:4d:3a:6c: 69:4f:76:dd:8d:b9:ce:62:4b:19:a7:32:8c:a2:ca: 21:7e:4f:c7:99:e5:33:fc:f3:ab:dd:db:fe:cf:c2: 50:27:0e:3a:2a:84:6e:16:65:c8:47:92:8a:f9:db: 44:f0:0b:2f:9b:7b:ba:d9:8c:85:62:49:04:25:ed: 8a:cd:24:6e:b7:f4:8c:8a:a3:78:4f:76:c4:0b:41: a9:50:56:00:a6:65:7b:20:e9:98:c4:a9:85:e9:fa: 9d:ba:23:40:fd:65:32:07:cc:ee:53:73:13:97:2d: ad:ce:16:56:76:df:b3:a0:ac:12:f2:2d:54:aa:29: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FC:CB:1A:8F:79:CE:38:BF:6B:09:5D:AD:6E:83:95:42:D2:D5:E9 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:79:c1:7d:59:46:5c:d7:5e:5d:f8:7f:a4:f0:28:9a:1a:45: 00:bd:d7:3d:82:de:33:31:93:7b:ff:3c:90:0a:15:57:12:82: 55:e2:03:21:12:49:de:fb:63:6e:95:e0:e2:19:0e:87:c1:0b: 8d:6d:3d:23:48:c6:e6:a6:d5:9a:ba:a4:ae:61:5b:77:34:13: 51:a2:58:32:0c:10:6e:be:65:87:6d:4b:38:e8:8e:0e:40:fe: d0:7c:cd:6a:1d:68:c4:0c:d2:8f:a1:6e:11:cb:5a:e3:1d:65: e4:6b:9f:74:68:2a:d5:f2:ee:b1:14:3f:52:6d:fe:e0:cf:a4: 7f:2a:8e:85:39:5d:2c:62:65:60:29:18:85:62:41:d5:c1:e7: ce:c4:9a:01:77:94:46:2e:57:b1:55:e1:92:42:4c:ad:29:90: a4:f4:ce:8b:61:d3:81:f9:91:f6:c4:21:b4:54:d5:b3:46:40: 2e:0d:5e:b9:2d:78:5f:06:d9:62:a2:90:a7:db:7c:7c:41:7f: 82:fc:56:8f:64:6d:d9:49:50:be:0e:89:15:a8:0a:6b:70:c9: 5d:d4:d0:66:92:bb:a5:ce:8b:d5:bf:7f:2a:ff:4b:34:0e:0e: 27:fb:41:06:a5:b9:d7:d6:7c:b5:bd:d2:dd:b0:00:01:71:a8: c3:1e:f6:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJY50FHDw7fs19HbepytBAoAIXsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDEyMzA3NDBaFw0yNTEyMDMwMjA5NDBaMDMxMTAvBgNV BAMTKDc3RkNDQjFBOEY3OUNFMzhCRjZCMDk1REFENkU4Mzk1NDJEMkQ1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLobPT8sw5aANOhAF4o49xTEHz UuWz5G006KFvakNY0g8uedz7DOW6kVnGUsmbmZAAU1hm38/ykp+cLHVeSWseqWNB iTowfHMhLvSnyv+ZwCPZhtIzNc8icIbjGO+0zBArFKf4YXacECqZ12WSyebqeY9i bcwU74pgI2NJCLNetZuAYE06bGlPdt2Nuc5iSxmnMoyiyiF+T8eZ5TP886vd2/7P wlAnDjoqhG4WZchHkor520TwCy+be7rZjIViSQQl7YrNJG639IyKo3hPdsQLQalQ VgCmZXsg6ZjEqYXp+p26I0D9ZTIHzO5TcxOXLa3OFlZ237OgrBLyLVSqKbwrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUd/zLGo95zji/awldrW6DlULS1ekwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnnBfVlGXNdeXfh/pPAo mhpFAL3XPYLeMzGTe/88kAoVVxKCVeIDIRJJ3vtjbpXg4hkOh8ELjW09I0jG5qbV mrqkrmFbdzQTUaJYMgwQbr5lh21LOOiODkD+0HzNah1oxAzSj6FuEcta4x1l5Guf dGgq1fLusRQ/Um3+4M+kfyqOhTldLGJlYCkYhWJB1cHnzsSaAXeURi5XsVXhkkJM rSmQpPTOi2HTgfmR9sQhtFTVs0ZALg1euS14XwbZYqKQp9t8fEF/gvxWj2Rt2UlQ vg6JFagKa3DJXdTQZpK7pc6L1b9/Kv9LNA4OJ/tBBqW519Z8tb3S3bAAAXGowx72 9w== -----END CERTIFICATE-----Generated at Tue Dec 2 05:59:46 2025 by rpki-client