This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: SeUFPyXDW6h7TxI2saUbwVjnCj3sqA2xaihU0g9aXQE= Subject key identifier: B5:6A:E8:21:5F:F6:61:80:A6:F9:B7:08:A8:C1:FB:E1:60:D3:46:72 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 0406540F105640D1610261E1969BB2DEB79EA7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0355 Signing time: Thu 15 Jan 2026 18:48:09 +0000 Manifest this update: Thu 15 Jan 2026 18:43:09 +0000 Manifest next update: Fri 16 Jan 2026 18:53:09 +0000 Files and hashes: 1: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 2: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: Ll38XsFn7LqNtACnBh+y3o/kD5iam61jAlYU7Rnol5U=) 5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:06:54:0f:10:56:40:d1:61:02:61:e1:96:9b:b2:de:b7:9e:a7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 15 18:43:09 2026 GMT Not After : Jan 16 18:53:09 2026 GMT Subject: CN=B56AE8215FF66180A6F9B708A8C1FBE160D34672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:e0:fe:ef:6d:92:c1:ec:c9:e7:94:ad:af: 8c:0e:54:21:3f:3e:45:2b:ca:9d:6b:0c:81:2a:a5: 91:23:51:b7:70:3a:2f:91:86:96:15:2d:24:c1:9d: 33:dd:f0:12:68:67:52:cf:06:00:78:68:b8:19:f9: 96:30:04:16:95:e5:a6:55:81:5a:62:a7:94:33:63: d7:5d:8b:88:f1:10:cc:87:6f:06:d0:fa:24:14:01: 93:7b:d5:14:f4:99:dd:16:8d:56:a9:f0:52:34:fc: 23:d0:b2:95:91:1a:63:c5:dc:ad:96:d9:a2:0a:bb: 1e:36:c5:99:2f:7e:65:bf:a0:e0:2f:41:23:f8:be: a7:16:2c:e3:f3:18:c1:0a:d8:55:c0:42:ae:38:44: 43:bf:be:66:ac:b2:c8:56:02:22:eb:96:9d:f1:ec: 33:7c:cb:6d:42:4a:1e:cf:b0:f0:31:f3:12:00:79: 89:37:4a:9b:d4:45:a1:47:f0:16:0d:ef:77:15:aa: 96:d1:84:08:4b:3b:b5:3e:af:d4:7b:0c:ed:d2:e4: c4:19:d0:dc:a7:e7:38:65:02:09:bf:e3:a7:11:13: 9f:2a:0a:dd:be:42:42:e1:93:25:07:68:cb:dc:e4: db:f1:03:87:c4:ad:63:ab:df:08:eb:79:21:6e:04: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:E8:21:5F:F6:61:80:A6:F9:B7:08:A8:C1:FB:E1:60:D3:46:72 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:75:9a:0e:bd:7a:e9:88:65:56:00:75:d0:7d:9e:25:72:f4: 96:40:45:f0:e8:96:21:b8:ff:5b:66:a7:a3:c6:34:30:97:64: 1e:f2:ef:1e:e9:7a:dc:67:87:c1:d3:f2:76:d6:68:82:76:67: 13:e4:dc:08:48:29:6d:af:f6:4c:ea:e7:f9:3c:3f:52:ce:9e: 0d:1f:0b:e8:00:85:46:f7:b6:41:b4:7e:e9:dd:3b:19:fc:52: 22:cd:60:bf:f2:b7:31:3d:8e:60:d9:9b:84:f9:d3:65:78:46: f2:86:89:20:4c:44:fd:3f:8f:4b:a4:3c:c2:eb:67:32:06:a4: 02:8b:48:73:88:76:ec:9f:e7:06:98:56:bf:63:a4:8c:55:cb: 56:56:10:ce:9b:54:64:96:02:04:ad:d4:db:32:ba:b2:44:27: 23:97:6c:1b:dc:10:15:da:c9:1f:9c:b3:fa:98:86:bf:f4:fd: ed:80:34:03:0a:5c:19:6b:5b:23:5c:62:e1:e4:22:e7:c0:60: e6:fc:4a:a4:17:9b:91:e5:57:d7:8e:d6:3b:35:e7:39:69:82: bd:0c:a7:eb:ce:8d:68:de:9b:26:a7:01:c3:b0:15:2e:d5:a5: e2:2d:79:3d:75:2b:2e:7a:3f:3e:70:06:d3:86:8a:37:43:c7: 40:a7:5b:32 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBAZUDxBWQNFhAmHhlpuy3reep+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMTUxODQzMDlaFw0yNjAxMTYxODUzMDlaMDMxMTAvBgNV BAMTKEI1NkFFODIxNUZGNjYxODBBNkY5QjcwOEE4QzFGQkUxNjBEMzQ2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2+D+722SwezJ55Str4wOVCE/ PkUryp1rDIEqpZEjUbdwOi+RhpYVLSTBnTPd8BJoZ1LPBgB4aLgZ+ZYwBBaV5aZV gVpip5QzY9ddi4jxEMyHbwbQ+iQUAZN71RT0md0WjVap8FI0/CPQspWRGmPF3K2W 2aIKux42xZkvfmW/oOAvQSP4vqcWLOPzGMEK2FXAQq44REO/vmassshWAiLrlp3x 7DN8y21CSh7PsPAx8xIAeYk3SpvURaFH8BYN73cVqpbRhAhLO7U+r9R7DO3S5MQZ 0Nyn5zhlAgm/46cRE58qCt2+QkLhkyUHaMvc5NvxA4fErWOr3wjreSFuBEbTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtWroIV/2YYCm+bcIqMH74WDTRnIwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnWaDr166YhlVgB10H2e JXL0lkBF8OiWIbj/W2ano8Y0MJdkHvLvHul63GeHwdPydtZognZnE+TcCEgpba/2 TOrn+Tw/Us6eDR8L6ACFRve2QbR+6d07GfxSIs1gv/K3MT2OYNmbhPnTZXhG8oaJ IExE/T+PS6Q8wutnMgakAotIc4h27J/nBphWv2OkjFXLVlYQzptUZJYCBK3U2zK6 skQnI5dsG9wQFdrJH5yz+piGv/T97YA0AwpcGWtbI1xi4eQi58Bg5vxKpBebkeVX 147WOzXnOWmCvQyn686NaN6bJqcBw7AVLtWl4i15PXUrLno/PnAG04aKN0PHQKdb Mg== -----END CERTIFICATE-----Generated at Fri Jan 16 00:44:23 2026 by rpki-client