This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: ysWdm0hH6FJid+iDygtvcmOE7u0iDc/kWI526YpXSuU= Subject key identifier: 9C:A5:0E:42:8E:3D:45:A2:24:1D:A5:11:32:00:A7:E5:62:66:1E:53 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 3CDC03A1FD36CE53D4A39E55A93EF5F59D35AA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0308 Signing time: Thu 20 Nov 2025 05:12:37 +0000 Manifest this update: Thu 20 Nov 2025 05:07:37 +0000 Manifest next update: Fri 21 Nov 2025 05:44:37 +0000 Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 2: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: JVN8s6uEfjMlYl75xELhHSE9PQQm+jCwFrvZHdyvyDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 05:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:dc:03:a1:fd:36:ce:53:d4:a3:9e:55:a9:3e:f5:f5:9d:35:aa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Nov 20 05:07:37 2025 GMT Not After : Nov 21 05:44:37 2025 GMT Subject: CN=9CA50E428E3D45A2241DA5113200A7E562661E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:70:44:86:58:8c:39:ad:b1:02:b3:e7:01: f6:80:82:42:c6:43:b2:52:96:15:58:68:da:a6:01: 9b:39:49:61:88:06:5d:b3:ca:60:e9:ae:70:e2:91: 4a:31:6d:9c:f5:e6:66:08:89:b2:42:ec:23:cd:7a: 88:b9:e9:fc:e1:38:9d:bf:e1:be:23:49:54:44:dc: 3b:e9:28:d9:81:8f:49:20:a3:21:b1:05:fd:71:d9: e4:68:f7:fd:e8:1b:07:93:08:05:68:95:18:cb:45: 87:b9:7c:9b:82:e3:98:16:59:a1:8d:64:ac:06:24: 8e:47:c8:f2:6c:16:b2:58:6c:81:98:96:b6:a5:e3: 5e:28:06:97:b5:4c:dd:40:33:7b:59:ef:cd:ab:f1: fc:7d:c3:36:41:6a:aa:f9:50:e6:2c:cf:77:d9:40: f3:b4:c2:ca:72:33:22:4f:c9:78:72:79:aa:f6:32: de:75:46:71:de:09:68:47:47:7d:e8:7d:50:51:b9: 68:cc:7c:ac:5a:85:9b:91:a3:51:cd:1c:70:60:92: 23:e3:04:32:1e:7f:c4:c9:4d:8d:cc:30:ce:30:58: 93:8f:a2:09:5f:52:7a:92:9c:45:5b:34:fe:46:2e: 61:07:37:3a:b8:12:c6:12:7b:7d:92:2c:15:61:c4: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A5:0E:42:8E:3D:45:A2:24:1D:A5:11:32:00:A7:E5:62:66:1E:53 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d7:da:83:b2:d0:df:34:1f:3a:20:b7:43:c1:8b:cd:76:f0: b3:31:29:69:53:27:66:cb:bf:ea:a6:6e:71:58:71:fb:34:2b: f1:dd:70:06:16:e4:4d:ad:a8:df:89:23:5e:cb:d1:01:0b:5c: 19:88:c1:aa:eb:a5:84:ab:a1:c0:b8:18:d3:77:3b:67:59:db: 86:71:53:18:92:e3:60:7a:79:71:c9:3e:04:53:ee:77:7a:05: 98:03:99:b8:31:16:c8:8a:81:fe:91:d1:b8:a1:8c:db:6a:a4: 66:fc:c7:86:9f:e3:34:16:1b:a6:4e:85:7e:c4:d9:d0:63:6c: 5e:62:86:de:5d:0a:c0:7c:8f:10:fe:ee:73:90:63:ed:3b:5b: d9:32:66:2d:4b:ec:c8:a5:9f:db:f2:75:02:01:bb:fe:98:4a: 38:ba:68:82:d7:be:91:3e:04:39:b9:b1:cf:fa:e8:59:8b:9f: b1:66:f0:c2:f7:b6:6d:46:f5:3e:5c:97:51:1f:7a:23:f7:ec: f7:8b:62:fe:11:5d:61:ef:2e:c5:fe:92:6d:b0:bb:5d:7e:82: bf:73:8e:00:b2:07:33:70:96:dd:26:0d:35:5a:03:cf:df:9d: e6:1f:40:ec:98:83:f4:79:37:86:f1:9c:3e:c0:4f:09:b9:b8: 76:d0:d0:c6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPNwDof02zlPUo55VqT719Z01qhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTExMjAwNTA3MzdaFw0yNTExMjEwNTQ0MzdaMDMxMTAvBgNV BAMTKDlDQTUwRTQyOEUzRDQ1QTIyNDFEQTUxMTMyMDBBN0U1NjI2NjFFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37HBEhliMOa2xArPnAfaAgkLG Q7JSlhVYaNqmAZs5SWGIBl2zymDprnDikUoxbZz15mYIibJC7CPNeoi56fzhOJ2/ 4b4jSVRE3DvpKNmBj0kgoyGxBf1x2eRo9/3oGweTCAVolRjLRYe5fJuC45gWWaGN ZKwGJI5HyPJsFrJYbIGYlral414oBpe1TN1AM3tZ782r8fx9wzZBaqr5UOYsz3fZ QPO0wspyMyJPyXhyear2Mt51RnHeCWhHR33ofVBRuWjMfKxahZuRo1HNHHBgkiPj BDIef8TJTY3MMM4wWJOPoglfUnqSnEVbNP5GLmEHNzq4EsYSe32SLBVhxK4NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnKUOQo49RaIkHaURMgCn5WJmHlMwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtfag7LQ3zQfOiC3Q8GL zXbwszEpaVMnZsu/6qZucVhx+zQr8d1wBhbkTa2o34kjXsvRAQtcGYjBquulhKuh wLgY03c7Z1nbhnFTGJLjYHp5cck+BFPud3oFmAOZuDEWyIqB/pHRuKGM22qkZvzH hp/jNBYbpk6FfsTZ0GNsXmKG3l0KwHyPEP7uc5Bj7Ttb2TJmLUvsyKWf2/J1AgG7 /phKOLpogte+kT4EObmxz/roWYufsWbwwve2bUb1PlyXUR96I/fs94ti/hFdYe8u xf6SbbC7XX6Cv3OOALIHM3CW3SYNNVoDz9+d5h9A7JiD9Hk3hvGcPsBPCbm4dtDQ xg== -----END CERTIFICATE-----Generated at Thu Nov 20 21:10:31 2025 by rpki-client