This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: CxondVhC0bcdDZZUnjsxfSpLtMEC0rS7nShEMFkZkj0= Subject key identifier: 5A:74:4F:E4:EB:63:E0:B9:54:BD:7C:38:CF:14:E2:6F:4A:4A:BE:FC Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 3333CEAED3BCCF21971ACF3CF49B6240D223FA63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0316 Signing time: Sun 30 Nov 2025 12:42:40 +0000 Manifest this update: Sun 30 Nov 2025 12:37:40 +0000 Manifest next update: Mon 01 Dec 2025 13:56:40 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: F5P6qzSCnEtGJoCBvJy/W5IwlkMFuI7IES89vejTGWk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 13:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:33:ce:ae:d3:bc:cf:21:97:1a:cf:3c:f4:9b:62:40:d2:23:fa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 30 12:37:40 2025 GMT Not After : Dec 1 13:56:40 2025 GMT Subject: CN=5A744FE4EB63E0B954BD7C38CF14E26F4A4ABEFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:49:ee:3a:1d:bc:52:56:03:4f:86:fd:3f: f3:cb:95:2e:12:eb:f0:3e:20:36:c6:66:a0:0f:3e: 85:8e:88:a5:d2:b5:94:54:ac:db:c6:0f:34:04:6c: fe:56:3d:f8:75:a1:1b:85:0c:72:4d:24:84:9d:07: 77:77:1e:88:53:4c:8c:f0:6a:7d:31:83:97:e6:7f: 07:b2:79:68:73:ae:8a:8d:c2:0e:ae:0b:64:55:c9: ca:ed:62:57:05:9a:3e:1f:92:6f:3e:04:53:aa:83: ad:e3:63:56:78:af:af:5d:cb:ad:71:69:e4:f3:60: 4d:ad:bd:3d:d8:d3:31:2e:ed:ef:b4:ea:e9:74:e5: 5d:23:57:d4:5a:43:1b:0c:e2:30:f1:85:ce:4b:39: 25:0e:82:e5:31:a8:04:84:dc:17:c3:fb:7e:74:89: 36:a3:d7:48:4b:e4:7f:ef:1b:b6:92:90:8b:8a:e5: 9e:ef:d5:17:0c:48:df:6a:a7:89:b2:f5:c2:4b:77: d4:83:b2:e2:82:3b:33:b9:28:47:16:ae:32:ed:c4: 72:4f:6f:a3:55:b9:20:cf:bd:4f:d9:4a:27:86:6b: d9:56:f0:20:06:f7:65:75:31:68:76:42:9f:3c:16: c8:79:e0:0d:69:fd:ef:cb:ba:56:47:6a:bd:7a:b6: b7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:4F:E4:EB:63:E0:B9:54:BD:7C:38:CF:14:E2:6F:4A:4A:BE:FC X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:73:a3:65:07:e0:8e:42:29:43:88:9f:04:bc:09:40:c3:68: 3a:88:02:67:79:75:45:2b:e9:d9:eb:e4:cb:d4:80:d6:21:64: 52:f1:11:db:3c:59:7a:e5:d0:9e:fa:75:47:7b:1d:34:f7:40: c6:90:97:0b:18:88:5f:28:93:aa:78:6c:22:77:09:6c:37:ab: 29:5c:f8:10:89:f2:50:48:e2:4e:37:c7:30:60:7e:bb:63:9d: 36:62:09:a8:13:9a:9d:30:8c:78:4d:6c:56:b7:c6:55:dd:18: 08:41:c5:22:2f:1b:da:43:a0:c1:92:d0:9a:ad:8b:62:14:f7: f8:df:36:e9:84:0b:80:ae:8b:36:f1:b4:82:e5:c2:ea:3b:fc: 7b:aa:a7:3c:b4:c9:cb:d0:b2:f3:c5:66:b7:03:2d:f8:fe:12: f3:df:b9:23:d9:dd:30:69:1e:a5:e2:af:57:19:47:d5:d4:79: 4d:d8:b9:8c:2a:37:35:35:62:12:37:a8:86:f8:dd:37:78:3c: 04:89:7d:6b:31:a6:a8:89:13:63:a7:4e:76:dc:84:9b:93:96: e2:7a:7f:27:f8:6c:5e:b7:8c:b3:ab:c2:21:b7:90:11:fd:76: 2c:eb:bf:56:15:ac:6c:a3:f6:06:db:12:e1:5f:c3:50:39:fa: dd:5c:eb:40 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMzPOrtO8zyGXGs889JtiQNIj+mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMzAxMjM3NDBaFw0yNTEyMDExMzU2NDBaMDMxMTAvBgNV BAMTKDVBNzQ0RkU0RUI2M0UwQjk1NEJEN0MzOENGMTRFMjZGNEE0QUJFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW8EnuOh28UlYDT4b9P/PLlS4S 6/A+IDbGZqAPPoWOiKXStZRUrNvGDzQEbP5WPfh1oRuFDHJNJISdB3d3HohTTIzw an0xg5fmfweyeWhzroqNwg6uC2RVycrtYlcFmj4fkm8+BFOqg63jY1Z4r69dy61x aeTzYE2tvT3Y0zEu7e+06ul05V0jV9RaQxsM4jDxhc5LOSUOguUxqASE3BfD+350 iTaj10hL5H/vG7aSkIuK5Z7v1RcMSN9qp4my9cJLd9SDsuKCOzO5KEcWrjLtxHJP b6NVuSDPvU/ZSieGa9lW8CAG92V1MWh2Qp88Fsh54A1p/e/LulZHar16treLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWnRP5Otj4LlUvXw4zxTib0pKvvwwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXOjZQfgjkIpQ4ifBLwJ QMNoOogCZ3l1RSvp2evky9SA1iFkUvER2zxZeuXQnvp1R3sdNPdAxpCXCxiIXyiT qnhsIncJbDerKVz4EInyUEjiTjfHMGB+u2OdNmIJqBOanTCMeE1sVrfGVd0YCEHF Ii8b2kOgwZLQmq2LYhT3+N826YQLgK6LNvG0guXC6jv8e6qnPLTJy9Cy88VmtwMt +P4S89+5I9ndMGkepeKvVxlH1dR5Tdi5jCo3NTViEjeohvjdN3g8BIl9azGmqIkT Y6dOdtyEm5OW4np/J/hsXreMs6vCIbeQEf12LOu/VhWsbKP2BtsS4V/DUDn63Vzr QA== -----END CERTIFICATE-----Generated at Mon Dec 1 05:59:50 2025 by rpki-client