This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: M5AypUZksXUTviPtVic7lJSyGwMTRIANlCBRW0A9Qys= Subject key identifier: 35:8E:48:F7:4B:E7:F8:34:B8:F9:31:B5:90:2F:D1:A1:90:0A:D6:D1 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 18A2FBA2C73F8589DA5014575C3E5EBD99DB84F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 031A Signing time: Wed 03 Dec 2025 12:32:40 +0000 Manifest this update: Wed 03 Dec 2025 12:27:40 +0000 Manifest next update: Thu 04 Dec 2025 14:52:40 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 7LVcppU0l6eap/AEYXbPV2hLp4RcKlwSjICeqc0rMMk=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 14:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a2:fb:a2:c7:3f:85:89:da:50:14:57:5c:3e:5e:bd:99:db:84:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 3 12:27:40 2025 GMT Not After : Dec 4 14:52:40 2025 GMT Subject: CN=358E48F74BE7F834B8F931B5902FD1A1900AD6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:41:40:2d:0d:a4:b1:db:a9:c0:20:7c:8c: 0b:65:55:85:72:26:0e:30:b2:ca:86:1d:3f:c8:5f: 9a:ec:bb:62:c7:39:cd:3b:7c:f8:51:2a:97:2a:fc: 9a:2d:8f:74:7d:cc:cd:32:41:84:5f:c6:49:14:88: ca:40:6b:6b:a4:b4:0e:56:93:b0:e8:f1:4a:92:60: bb:dd:ae:c2:da:2d:c2:a5:9d:77:17:98:3c:a8:69: 2f:2f:24:ff:31:51:c7:57:21:bc:98:06:e6:f3:fe: cf:c7:ab:67:18:09:7e:4c:e8:8d:7c:05:6e:c0:85: 91:32:5d:52:9f:25:0b:9d:c2:da:c5:e1:b4:84:b9: fa:f5:8a:5f:18:54:95:c7:32:b3:dc:56:31:ba:ab: 7a:16:37:84:29:3c:d9:19:9c:9f:76:07:2d:5b:c5: da:a1:24:e8:89:22:48:e3:14:cc:31:2d:ff:e4:db: e4:02:19:05:fa:74:fa:12:92:b7:ff:8e:ea:21:e5: f7:d6:5b:52:30:55:19:fa:35:26:2f:04:2a:10:05: 48:66:1d:9c:97:c8:84:f4:a5:4a:7e:77:24:f4:9c: 92:d8:2f:02:2a:bc:01:8a:93:1c:01:e7:44:d3:07: de:ba:81:94:d6:54:b4:8a:4d:09:d7:8a:b4:c5:72: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8E:48:F7:4B:E7:F8:34:B8:F9:31:B5:90:2F:D1:A1:90:0A:D6:D1 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c0:1f:31:b1:2c:80:61:44:76:d9:31:41:76:01:73:0f:59: 49:e3:dd:5a:a6:ac:33:58:0a:f8:6b:e5:d7:96:bd:f5:b8:31: 8d:c0:a2:ed:90:49:f9:8f:b8:45:2c:65:a0:63:28:f8:b8:de: c9:fb:ac:9d:be:81:fa:5f:cf:b7:28:91:51:6f:d0:68:7b:d8: c1:9d:d7:e5:a4:95:81:6c:29:db:82:02:13:d7:c9:72:ed:83: 0f:4a:54:e8:0e:00:ed:58:cc:84:d3:e1:b6:d4:5b:90:55:9f: 28:09:c6:e3:ea:47:29:29:26:1f:bc:b2:ca:c5:d2:fa:5b:4d: 12:d7:98:5f:50:12:fc:73:70:56:50:73:1c:cc:e5:b9:e0:c5: c1:4a:35:ad:64:d6:8c:41:bc:54:17:41:88:bb:ee:96:2a:fb: d2:fc:5f:62:29:c0:fd:a6:f2:e1:df:99:3f:44:c9:ab:5f:4f: a5:d4:3a:c3:c6:62:00:cd:41:09:fb:36:7d:97:2b:a1:dc:95: 87:b1:35:f3:90:81:2d:21:b6:a3:e8:52:ca:85:60:a4:df:9b: 00:22:b3:96:78:42:c1:de:7f:ff:7f:bc:e1:58:b2:bd:3a:22: 80:f2:e5:35:28:b6:67:7b:e3:09:72:e8:56:77:95:c6:85:b5: c0:d8:14:4c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGKL7osc/hYnaUBRXXD5evZnbhPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDMxMjI3NDBaFw0yNTEyMDQxNDUyNDBaMDMxMTAvBgNV BAMTKDM1OEU0OEY3NEJFN0Y4MzRCOEY5MzFCNTkwMkZEMUExOTAwQUQ2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+P0FALQ2ksdupwCB8jAtlVYVy Jg4wssqGHT/IX5rsu2LHOc07fPhRKpcq/Jotj3R9zM0yQYRfxkkUiMpAa2uktA5W k7Do8UqSYLvdrsLaLcKlnXcXmDyoaS8vJP8xUcdXIbyYBubz/s/Hq2cYCX5M6I18 BW7AhZEyXVKfJQudwtrF4bSEufr1il8YVJXHMrPcVjG6q3oWN4QpPNkZnJ92By1b xdqhJOiJIkjjFMwxLf/k2+QCGQX6dPoSkrf/juoh5ffWW1IwVRn6NSYvBCoQBUhm HZyXyIT0pUp+dyT0nJLYLwIqvAGKkxwB50TTB966gZTWVLSKTQnXirTFcmj7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNY5I90vn+DS4+TG1kC/RoZAK1tEwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsAfMbEsgGFEdtkxQXYB cw9ZSePdWqasM1gK+Gvl15a99bgxjcCi7ZBJ+Y+4RSxloGMo+Ljeyfusnb6B+l/P tyiRUW/QaHvYwZ3X5aSVgWwp24ICE9fJcu2DD0pU6A4A7VjMhNPhttRbkFWfKAnG 4+pHKSkmH7yyysXS+ltNEteYX1AS/HNwVlBzHMzlueDFwUo1rWTWjEG8VBdBiLvu lir70vxfYinA/aby4d+ZP0TJq19PpdQ6w8ZiAM1BCfs2fZcrodyVh7E185CBLSG2 o+hSyoVgpN+bACKzlnhCwd5//3+84ViyvToigPLlNSi2Z3vjCXLoVneVxoW1wNgU TA== -----END CERTIFICATE-----Generated at Wed Dec 3 23:43:44 2025 by rpki-client