This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: Jkj1jKwpCKUR6N5uZV/yu7JqSUUXR4LWdhEET7AF72A= Subject key identifier: 5E:41:0C:DD:68:96:FB:B8:2B:DE:70:FC:4F:8A:2D:3B:43:72:A9:7F Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 4CE298F846F5FA327E04386CEED1EEB77A4A1939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 034B Signing time: Thu 08 Jan 2026 03:43:06 +0000 Manifest this update: Thu 08 Jan 2026 03:38:06 +0000 Manifest next update: Fri 09 Jan 2026 07:22:06 +0000 Files and hashes: 1: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: j8h2jLjRTrbO3cuB/93rj+bV6aoEXYA9k60wfZBMr7Q=) 4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e2:98:f8:46:f5:fa:32:7e:04:38:6c:ee:d1:ee:b7:7a:4a:19:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 8 03:38:06 2026 GMT Not After : Jan 9 07:22:06 2026 GMT Subject: CN=5E410CDD6896FBB82BDE70FC4F8A2D3B4372A97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:4c:bf:c4:cf:84:76:24:f2:af:ab:26:b6: e1:da:99:a2:51:d8:d7:cd:29:47:b4:19:56:38:d0: 83:e9:0c:03:4c:25:88:43:fa:d6:f6:c6:03:af:ab: b2:e0:cd:20:9c:d0:c1:de:65:51:13:09:cc:ba:a3: 22:2f:f0:8e:87:7a:66:a0:ed:ed:f2:9b:37:8a:f0: 8a:e3:83:b3:3a:b5:0b:e0:ea:bd:73:56:d5:87:bc: 50:a6:8e:18:34:84:dd:0f:c8:53:ed:49:f0:1f:81: 0d:e5:8a:e4:9b:34:db:2b:31:7a:83:07:f7:aa:ce: 04:62:5c:22:08:3d:09:70:97:6e:39:83:40:cb:04: 65:aa:c3:cd:83:1c:36:e6:89:30:49:30:b8:8a:3b: 25:58:36:09:ac:76:bc:cc:9c:b9:29:c0:77:c4:92: e9:61:8f:b7:0d:19:a4:47:1c:7e:97:2a:c2:c8:e6: d6:03:5f:1c:be:f9:8b:4b:f9:07:b4:69:cb:8b:5b: 1e:79:e3:7f:e2:db:f1:7f:37:fd:62:f5:80:35:18: 2f:b3:06:c3:47:f7:01:ae:a7:00:b3:15:49:4d:d9: 77:1a:9d:f0:6b:fd:06:20:f4:1b:05:56:96:2f:a0: 1b:19:4e:1a:a1:c1:fe:bb:fa:45:67:74:e5:a8:90: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:0C:DD:68:96:FB:B8:2B:DE:70:FC:4F:8A:2D:3B:43:72:A9:7F X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:77:78:e8:96:d6:4a:0e:33:63:2b:bd:93:81:a5:d7:a6:82: e9:68:bf:ec:25:2f:a0:e8:4c:09:b8:dd:02:c8:c0:c0:8e:78: 5a:6c:9b:48:b1:45:6a:30:ea:ae:82:8f:3c:51:5a:2e:a9:51: 19:10:7a:b7:14:04:1b:2b:e1:5b:d1:ce:7e:1e:1e:ed:39:0a: d6:fb:95:01:20:44:47:9d:b7:a6:65:ae:61:b5:52:56:9c:70: 44:d7:13:5c:5c:46:38:57:80:c9:83:19:95:e2:ef:93:60:7d: e0:5f:f4:fe:fe:93:a0:df:b5:f9:14:75:e9:83:2a:62:dd:9a: dc:40:4a:c4:72:42:56:b8:e9:03:a4:89:7c:ed:8c:62:54:74: 04:4b:48:6f:5c:54:db:40:e2:30:3d:e6:b0:9c:a2:bf:49:02: cd:5a:83:3b:4c:e1:b6:49:cd:35:6d:86:54:9f:2f:f3:fc:da: 2d:17:2e:b5:32:be:86:18:ac:95:1f:06:7a:4e:d1:da:e0:5c: 51:7e:91:df:37:56:ef:96:92:23:49:7d:24:41:ad:55:a4:07: 18:b4:cf:ab:ae:ec:ae:ea:f2:f6:f9:40:42:ac:74:b1:3d:28: c9:3b:e7:63:1c:38:d9:44:68:53:15:46:59:75:4e:26:4e:a6: f0:10:1e:f2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTOKY+Eb1+jJ+BDhs7tHut3pKGTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMDgwMzM4MDZaFw0yNjAxMDkwNzIyMDZaMDMxMTAvBgNV BAMTKDVFNDEwQ0RENjg5NkZCQjgyQkRFNzBGQzRGOEEyRDNCNDM3MkE5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1K0y/xM+EdiTyr6smtuHamaJR 2NfNKUe0GVY40IPpDANMJYhD+tb2xgOvq7LgzSCc0MHeZVETCcy6oyIv8I6Hemag 7e3ymzeK8Irjg7M6tQvg6r1zVtWHvFCmjhg0hN0PyFPtSfAfgQ3liuSbNNsrMXqD B/eqzgRiXCIIPQlwl245g0DLBGWqw82DHDbmiTBJMLiKOyVYNgmsdrzMnLkpwHfE kulhj7cNGaRHHH6XKsLI5tYDXxy++YtL+Qe0acuLWx5543/i2/F/N/1i9YA1GC+z BsNH9wGupwCzFUlN2XcanfBr/QYg9BsFVpYvoBsZThqhwf67+kVndOWokE4rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXkEM3WiW+7gr3nD8T4otO0NyqX8wHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnd46JbWSg4zYyu9k4Gl 16aC6Wi/7CUvoOhMCbjdAsjAwI54WmybSLFFajDqroKPPFFaLqlRGRB6txQEGyvh W9HOfh4e7TkK1vuVASBER523pmWuYbVSVpxwRNcTXFxGOFeAyYMZleLvk2B94F/0 /v6ToN+1+RR16YMqYt2a3EBKxHJCVrjpA6SJfO2MYlR0BEtIb1xU20DiMD3msJyi v0kCzVqDO0zhtknNNW2GVJ8v8/zaLRcutTK+hhislR8Gek7R2uBcUX6R3zdW75aS I0l9JEGtVaQHGLTPq67srury9vlAQqx0sT0oyTvnYxw42URoUxVGWXVOJk6m8BAe 8g== -----END CERTIFICATE-----Generated at Fri Jan 9 00:16:44 2026 by rpki-client