This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: IIQ0dyJVqBjR4caqkL9FeOJW97p2khSDtoM6yhmXvj0= Subject key identifier: 9D:2F:1C:7F:8B:F4:C9:40:D3:83:E2:D5:66:6C:18:49:61:EA:DF:A6 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 230AE0989BC38F1A72FD08258D9B303967F55BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 032D Signing time: Wed 17 Dec 2025 15:02:46 +0000 Manifest this update: Wed 17 Dec 2025 14:57:46 +0000 Manifest next update: Thu 18 Dec 2025 16:21:46 +0000 Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: Dc3SBI5+LsQeiffv5iHPfeB5LYBz9yW+B97W4qnAS+Q=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0a:e0:98:9b:c3:8f:1a:72:fd:08:25:8d:9b:30:39:67:f5:5b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 17 14:57:46 2025 GMT Not After : Dec 18 16:21:46 2025 GMT Subject: CN=9D2F1C7F8BF4C940D383E2D5666C184961EADFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:76:7c:e5:13:48:93:e7:bc:67:7b:91:9d: 14:7a:bf:58:01:1a:95:0e:4e:69:39:06:d4:bb:d0: 3b:8b:06:f3:fa:ac:0d:05:67:4f:42:e1:f7:7a:09: 51:b6:cb:66:54:7a:1b:5e:5d:c5:df:a9:02:d7:ac: 26:f9:97:0b:c4:67:6f:08:14:bf:09:13:8b:79:61: 5b:18:ac:8b:da:d8:2e:67:1d:ec:e6:ba:8c:7e:07: ab:1b:1b:a7:b1:b3:cf:9e:e5:a1:23:66:8b:c3:0a: 31:24:19:18:1d:58:cc:56:33:d8:c1:3c:81:2b:13: a1:e4:a3:2c:1b:f0:62:c3:57:d9:ae:f5:e0:2f:51: ee:f6:0c:70:20:58:2b:c0:d0:40:46:86:b5:3c:e3: af:9f:34:a3:54:46:68:c6:bd:58:43:04:77:bb:f1: e0:77:28:45:dd:1a:e5:4b:89:5f:f6:fa:b0:ce:b7: 35:ab:da:0b:a1:bf:76:93:1a:75:25:4b:48:d8:99: 63:08:e0:fc:8d:bf:9c:0d:22:e0:38:a5:dd:c1:ab: 0f:56:54:1f:16:36:c4:79:33:90:db:a8:df:ee:bd: 65:77:c2:91:12:09:e7:ce:7e:34:09:00:17:6c:ee: cf:d9:6b:d0:9c:a6:28:0b:56:d4:8b:b7:47:bd:14: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:1C:7F:8B:F4:C9:40:D3:83:E2:D5:66:6C:18:49:61:EA:DF:A6 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:af:8b:bb:b8:ef:d5:23:f8:94:21:d5:82:4c:72:3c:2a: e6:d8:72:51:2f:3c:2d:59:54:b7:b4:41:8f:0a:3f:12:39:55: 8e:57:02:0a:12:c8:f2:99:8a:e7:22:9e:6f:b0:7b:94:39:97: 12:a8:da:75:3b:02:b0:fd:39:25:3c:0e:21:6e:6b:50:0d:10: 35:59:11:57:07:79:86:c2:6d:d4:d8:c1:b8:6d:ef:19:08:cd: 5d:4d:85:ca:97:76:b5:3a:2b:c3:35:59:5d:93:da:41:63:26: 7d:6e:17:2c:c1:c9:c0:b7:7f:12:e9:d2:ce:ab:3e:44:cd:d4: 7b:32:3a:7d:8f:15:0b:06:3e:54:c2:fa:5f:80:18:8e:14:6e: 0b:9c:de:22:f5:95:3c:6a:2b:a3:ea:5c:0b:17:1a:65:12:46: 2a:30:9e:83:f0:10:87:70:b6:48:07:cb:70:0e:08:e6:8a:57: 7e:8c:0f:d5:7a:e2:ba:88:4e:48:e8:e2:d8:fe:a6:61:c3:4e: 50:05:c7:20:34:64:cf:fa:30:9f:13:26:11:40:ef:fb:1a:22: a6:18:16:fe:df:5e:04:98:f9:2a:89:f6:0a:cb:09:be:a9:9c: 60:30:9d:6a:c3:ed:e1:09:22:2a:97:dd:a1:26:1a:d0:28:11: a8:06:34:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIwrgmJvDjxpy/QgljZswOWf1W7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMTcxNDU3NDZaFw0yNTEyMTgxNjIxNDZaMDMxMTAvBgNV BAMTKDlEMkYxQzdGOEJGNEM5NDBEMzgzRTJENTY2NkMxODQ5NjFFQURGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+o3Z85RNIk+e8Z3uRnRR6v1gB GpUOTmk5BtS70DuLBvP6rA0FZ09C4fd6CVG2y2ZUehteXcXfqQLXrCb5lwvEZ28I FL8JE4t5YVsYrIva2C5nHezmuox+B6sbG6exs8+e5aEjZovDCjEkGRgdWMxWM9jB PIErE6Hkoywb8GLDV9mu9eAvUe72DHAgWCvA0EBGhrU846+fNKNURmjGvVhDBHe7 8eB3KEXdGuVLiV/2+rDOtzWr2guhv3aTGnUlS0jYmWMI4PyNv5wNIuA4pd3Bqw9W VB8WNsR5M5DbqN/uvWV3wpESCefOfjQJABds7s/Za9CcpigLVtSLt0e9FPvjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnS8cf4v0yUDTg+LVZmwYSWHq36YwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7Wvi7u479Uj+JQh1YJM cjwq5thyUS88LVlUt7RBjwo/EjlVjlcCChLI8pmK5yKeb7B7lDmXEqjadTsCsP05 JTwOIW5rUA0QNVkRVwd5hsJt1NjBuG3vGQjNXU2Fypd2tTorwzVZXZPaQWMmfW4X LMHJwLd/EunSzqs+RM3UezI6fY8VCwY+VML6X4AYjhRuC5zeIvWVPGoro+pcCxca ZRJGKjCeg/AQh3C2SAfLcA4I5opXfowP1XriuohOSOji2P6mYcNOUAXHIDRkz/ow nxMmEUDv+xoiphgW/t9eBJj5Kon2CssJvqmcYDCdasPt4QkiKpfdoSYa0CgRqAY0 BQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:06:33 2025 by rpki-client