This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: 1390Dd1yt3STRPaUzST25DUoCxXqYVQjys7/XhzOzG0= Subject key identifier: 01:AF:2D:2C:C8:21:50:A9:32:53:C7:47:30:CD:42:A9:4F:F5:DE:F6 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 372D37A657ECD4E5B33C22607265A5C3876615F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0368 Signing time: Thu 29 Jan 2026 19:58:51 +0000 Manifest this update: Thu 29 Jan 2026 19:53:51 +0000 Manifest next update: Fri 30 Jan 2026 20:04:51 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 9fsBOnqAE2iEw1Pt/Yamf02cNUoymY22tW+vWvJvu/U=) 5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2d:37:a6:57:ec:d4:e5:b3:3c:22:60:72:65:a5:c3:87:66:15:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 29 19:53:51 2026 GMT Not After : Jan 30 20:04:51 2026 GMT Subject: CN=01AF2D2CC82150A93253C74730CD42A94FF5DEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:66:4e:db:29:27:bc:43:53:63:fe:47:e5: 82:93:5f:50:f6:33:a8:c7:da:a6:b3:81:39:89:c2: 42:cb:eb:8e:cf:87:cb:7e:3d:5e:dd:54:27:10:1f: 71:da:d8:5a:7f:15:e3:2c:56:e1:f2:5f:38:37:d9: b7:ab:c4:a5:bf:ef:6a:d8:99:c1:a7:ce:6a:d5:f6: 88:99:55:0d:d0:58:a5:65:c7:d4:0b:6b:fd:46:0f: 0f:97:c7:fd:18:41:79:bb:b0:b9:63:5a:75:92:b0: 1c:93:a4:d4:ef:4c:19:69:51:94:41:8c:64:98:20: 74:ae:bc:e1:bd:fe:b2:f4:f1:13:ce:53:47:21:14: e1:1b:6b:a8:87:1e:42:19:d8:b5:02:2e:6a:67:ea: 4b:69:62:09:a9:fb:ef:d7:28:1f:d7:2e:6f:41:62: eb:09:43:c8:90:20:5f:54:e1:63:49:87:f3:ed:85: 6e:62:f8:e0:b9:48:0c:33:91:64:f0:14:96:b0:03: 54:4f:43:e5:d9:94:86:25:fb:f2:b3:fb:99:66:03: 8a:bc:c1:fa:4c:c9:1e:da:af:fb:a6:a0:0c:9d:d9: 6e:ee:25:f2:bd:66:61:9e:24:5d:c0:17:c0:1b:18: 25:fc:75:3b:7d:9e:c2:b4:c8:17:38:12:03:75:3a: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AF:2D:2C:C8:21:50:A9:32:53:C7:47:30:CD:42:A9:4F:F5:DE:F6 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:30:3d:3e:36:11:98:58:a5:41:3b:29:92:3b:7c:60:16:c0: 60:b4:77:df:75:16:83:89:55:36:ce:52:69:85:85:ca:22:51: 7c:b4:37:87:9a:e7:29:ca:96:f2:e5:75:9f:64:2b:5a:39:c8: 80:b2:74:34:53:02:b1:a8:c1:3c:8d:7b:36:fc:b5:19:cc:5e: 64:f3:18:9b:f0:96:68:4b:17:33:7f:a2:48:66:41:fc:ea:b1: f4:6e:d9:3f:26:66:34:10:aa:8e:c1:04:05:95:39:61:c6:e5: a3:b1:65:64:07:53:1c:68:83:e7:a6:78:22:62:2d:30:9a:99: 54:c2:a7:e2:17:5f:25:de:a5:3a:3c:61:47:f8:c1:9a:40:e6: 44:3b:2d:73:5a:3f:bc:94:3a:5f:9b:44:fc:a6:16:05:79:83: f1:1b:84:2a:eb:50:f1:88:68:a9:47:2d:b4:7c:72:a5:67:34: e2:b2:24:97:78:01:d8:ad:e7:e2:98:c7:a3:78:30:3c:47:41: 16:d1:90:ff:c0:01:91:1a:8d:10:97:4e:80:18:14:fa:a0:af: 95:a4:6e:29:4b:84:25:27:29:0e:c7:2a:ec:80:63:54:ae:fd: 2e:72:a2:f9:52:30:2a:08:bf:05:13:76:60:80:fc:c7:63:b4: a3:6f:1d:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNy03plfs1OWzPCJgcmWlw4dmFfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMjkxOTUzNTFaFw0yNjAxMzAyMDA0NTFaMDMxMTAvBgNV BAMTKDAxQUYyRDJDQzgyMTUwQTkzMjUzQzc0NzMwQ0Q0MkE5NEZGNURFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cmZO2yknvENTY/5H5YKTX1D2 M6jH2qazgTmJwkLL647Ph8t+PV7dVCcQH3Ha2Fp/FeMsVuHyXzg32berxKW/72rY mcGnzmrV9oiZVQ3QWKVlx9QLa/1GDw+Xx/0YQXm7sLljWnWSsByTpNTvTBlpUZRB jGSYIHSuvOG9/rL08RPOU0chFOEba6iHHkIZ2LUCLmpn6ktpYgmp++/XKB/XLm9B YusJQ8iQIF9U4WNJh/PthW5i+OC5SAwzkWTwFJawA1RPQ+XZlIYl+/Kz+5lmA4q8 wfpMyR7ar/umoAyd2W7uJfK9ZmGeJF3AF8AbGCX8dTt9nsK0yBc4EgN1OjPPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAa8tLMghUKkyU8dHMM1CqU/13vYwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDA9PjYRmFilQTspkjt8 YBbAYLR333UWg4lVNs5SaYWFyiJRfLQ3h5rnKcqW8uV1n2QrWjnIgLJ0NFMCsajB PI17Nvy1GcxeZPMYm/CWaEsXM3+iSGZB/Oqx9G7ZPyZmNBCqjsEEBZU5Ycblo7Fl ZAdTHGiD56Z4ImItMJqZVMKn4hdfJd6lOjxhR/jBmkDmRDstc1o/vJQ6X5tE/KYW BXmD8RuEKutQ8YhoqUcttHxypWc04rIkl3gB2K3n4pjHo3gwPEdBFtGQ/8ABkRqN EJdOgBgU+qCvlaRuKUuEJScpDscq7IBjVK79LnKi+VIwKgi/BRN2YID8x2O0o28d wA== -----END CERTIFICATE-----Generated at Fri Jan 30 11:21:21 2026 by rpki-client