This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier: dBHggonHsTbQS4Z8hl063bKxo8taS5yZztQECcr/BBU=
Subject key identifier: 96:F0:FD:F4:62:4D:20:ED:49:C9:05:6B:EB:6C:05:D7:29:74:19:69
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial: 55830EBFABEC83640EECE59ECE265ECC5B6D1438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number: 030E
Signing time: Mon 24 Nov 2025 16:02:37 +0000
Manifest this update: Mon 24 Nov 2025 15:57:37 +0000
Manifest next update: Tue 25 Nov 2025 16:11:37 +0000
Files and hashes: 1: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=)
2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: HSnlXCEehQ57CL3mAvTX1uULSZeE/gdD7PWlAwZkdBw=)
4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Nov 2025 16:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:83:0e:bf:ab:ec:83:64:0e:ec:e5:9e:ce:26:5e:cc:5b:6d:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Validity
Not Before: Nov 24 15:57:37 2025 GMT
Not After : Nov 25 16:11:37 2025 GMT
Subject: CN=96F0FDF4624D20ED49C9056BEB6C05D729741969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:47:92:20:4f:4a:d3:1c:fa:ad:05:95:ce:
9f:64:1d:25:de:ce:41:b2:ee:90:42:63:a3:38:3f:
ae:72:50:38:32:5b:14:a5:85:74:a7:7e:7b:73:33:
e8:ca:f1:87:20:b9:2b:47:dd:dc:39:e7:85:30:73:
fa:68:e6:bf:a3:be:16:d5:e1:e7:53:6c:9d:b2:6d:
9d:53:9d:94:4b:5b:cc:1f:d7:35:66:53:a7:92:2a:
bb:bd:e2:3f:e0:ac:48:8e:5d:5d:e2:30:5b:01:51:
ce:c1:9e:0f:41:b4:7e:c0:92:17:d8:c1:42:38:95:
a8:4b:44:e8:1c:57:e7:d0:27:cc:9c:f2:89:e6:06:
63:3e:52:ed:5d:f3:c5:e3:cd:67:49:71:24:45:0d:
e9:17:30:bc:ff:c6:10:de:a1:75:cb:70:7e:13:78:
66:59:ba:93:35:df:62:75:75:c3:12:f2:39:15:16:
4c:46:46:48:54:3b:ae:1c:2a:03:cb:9a:89:a8:ad:
23:5d:e8:29:32:16:c1:ac:0c:ef:f7:b5:32:59:0f:
97:30:87:85:b9:25:eb:1e:9b:41:1a:a8:09:08:9e:
c2:27:f9:42:b2:f6:94:5b:bd:5a:2c:0e:6e:21:f3:
8b:ad:6b:d5:45:c6:4a:40:81:25:52:33:00:af:04:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:FD:F4:62:4D:20:ED:49:C9:05:6B:EB:6C:05:D7:29:74:19:69
X509v3 Authority Key Identifier:
keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:93:53:d1:7f:3f:d9:41:3a:24:46:09:bf:0b:d2:ac:b9:
ee:85:a2:ae:0d:a1:24:db:0f:e6:93:70:34:61:2c:22:b0:06:
65:d6:11:d1:c1:d9:bc:d3:37:5b:1f:52:2b:ec:fd:3d:10:a8:
78:ee:1f:c1:30:3b:a6:ee:96:a9:f6:05:0a:7e:2c:5b:3d:33:
6b:a0:07:1b:27:23:0c:1d:ff:c9:aa:93:00:41:ed:10:ab:9c:
8f:f2:f8:81:84:2c:c8:2d:a3:4c:1f:33:87:3c:12:46:23:92:
6e:b1:b1:e5:16:14:b1:72:47:82:84:40:34:ae:d5:b6:a6:53:
1b:0a:b4:ee:f6:41:f0:11:4c:b7:f8:54:43:92:c1:ec:17:15:
b7:fc:f5:7a:57:c5:81:d1:79:60:18:88:dd:76:a6:ad:b3:03:
ca:eb:8f:12:ea:8b:c6:4a:34:3a:50:ef:48:e0:0c:dd:55:29:
78:14:a9:84:71:87:4d:ea:a2:b5:6c:2c:75:00:48:2c:22:c2:
a1:08:49:c5:fa:d2:ed:99:b9:a4:ad:da:eb:78:ba:8a:d7:31:
59:00:dc:10:72:96:54:18:73:b9:9d:04:b8:42:15:b8:a6:51:
77:92:50:0f:9b:fd:f7:19:93:2f:09:47:f1:9f:79:10:8d:97:
79:4b:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 00:33:59 2025 by rpki-client