This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: eGOXIND+3ovl3kzxKQy+0UKQeXCUPfSz+oxtGshSmE0= Subject key identifier: 41:14:44:F8:7F:CA:CC:B4:1B:BF:79:00:7D:E2:69:0D:AF:ED:0B:C5 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 2306E3B763F85800B420ADEDC8173E02B2D614EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0363 Signing time: Mon 26 Jan 2026 01:18:25 +0000 Manifest this update: Mon 26 Jan 2026 01:13:25 +0000 Manifest next update: Tue 27 Jan 2026 04:12:25 +0000 Files and hashes: 1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: /dV8tO80zOHCXdVkiwAWs7ZDoNq97Z0xwh9DRkhJh88=) 4: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:06:e3:b7:63:f8:58:00:b4:20:ad:ed:c8:17:3e:02:b2:d6:14:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 26 01:13:25 2026 GMT Not After : Jan 27 04:12:25 2026 GMT Subject: CN=411444F87FCACCB41BBF79007DE2690DAFED0BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:fb:5e:01:e4:01:3b:3a:21:43:cb:94:39: a9:17:48:43:60:6b:10:2a:36:7e:a0:ed:e2:22:52: 83:78:0d:b1:b4:91:6c:dd:7a:09:82:c5:7e:38:0a: a1:1a:a9:ba:0b:5d:e6:fc:db:6e:d9:14:07:4c:df: 1a:cc:12:ab:44:36:78:e2:70:61:65:ab:99:4c:ca: b5:51:96:cd:4c:8c:55:32:ee:7c:0f:c5:36:77:f3: ab:83:a7:31:63:b2:13:a6:1c:ff:41:0e:fc:e9:c9: f5:4f:ad:76:9d:50:52:f2:a9:9d:f8:16:60:b0:38: 1b:ab:c0:e6:72:44:cc:79:52:b3:0e:52:ad:6b:6f: b2:33:2a:de:4d:9c:78:67:8d:ee:a0:11:ec:59:e7: ec:3c:b1:7c:dd:38:30:00:4d:32:1c:91:ca:48:3b: 6d:2c:62:69:20:ec:fe:ba:24:74:43:2c:ab:d6:25: ac:3b:2f:8c:69:c2:85:e7:2e:41:1e:29:7f:68:26: 33:a2:ac:d3:75:31:8b:0f:a2:de:67:40:4f:d6:3d: 90:54:6c:5e:8e:65:52:12:94:4d:11:95:37:ea:79: 19:5c:a6:c8:05:fe:15:e0:56:2e:b7:26:69:13:0c: 34:74:89:79:ee:ba:63:0b:eb:5f:06:7a:f0:be:c4: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:44:F8:7F:CA:CC:B4:1B:BF:79:00:7D:E2:69:0D:AF:ED:0B:C5 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4d:90:65:6a:03:00:6e:32:ee:0b:4f:d2:6b:d1:d5:32:77: 1b:57:ec:e2:d4:c3:ea:91:f3:e7:de:76:82:18:f5:73:f1:0d: 40:62:c2:56:39:30:11:2f:06:e5:b1:cd:8a:03:0e:88:de:42: 21:59:c4:c3:6a:5b:9c:2b:cc:a5:d9:a7:57:e1:9d:99:c6:98: 2e:c0:11:cf:6b:c0:d7:45:f3:60:b4:bc:cf:50:5b:14:e9:3b: fb:4b:f8:e1:0b:6f:39:b1:00:fd:b2:2c:a8:c0:65:be:b5:cd: 69:c5:ac:a4:96:70:b0:28:2a:78:f0:05:bd:45:a1:fc:ee:4c: 9e:cc:8b:f7:75:7c:42:56:b8:7e:eb:13:1c:e9:90:b6:ec:5b: 85:dd:2d:c4:7b:fe:66:22:be:02:7a:f8:e6:e7:e4:78:c2:eb: a7:8f:ba:81:2e:b0:ec:66:17:ca:c4:2f:b1:53:06:2a:20:57: 80:04:7f:ae:16:e5:e5:3f:c3:cf:d7:83:af:20:ef:01:2c:e7: a7:cb:9a:89:26:c6:49:9d:24:ef:36:eb:a7:b6:e3:5f:10:cd: ab:88:ea:33:6a:e4:37:c5:03:8c:59:ea:4c:d6:5b:ec:b8:f2: fc:27:e5:d1:d3:4f:40:f1:db:ea:f2:d9:ff:6c:37:b9:cd:0f: a7:46:08:e7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIwbjt2P4WAC0IK3tyBc+ArLWFO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMjYwMTEzMjVaFw0yNjAxMjcwNDEyMjVaMDMxMTAvBgNV BAMTKDQxMTQ0NEY4N0ZDQUNDQjQxQkJGNzkwMDdERTI2OTBEQUZFRDBCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hvteAeQBOzohQ8uUOakXSENg axAqNn6g7eIiUoN4DbG0kWzdegmCxX44CqEaqboLXeb8227ZFAdM3xrMEqtENnji cGFlq5lMyrVRls1MjFUy7nwPxTZ386uDpzFjshOmHP9BDvzpyfVPrXadUFLyqZ34 FmCwOBurwOZyRMx5UrMOUq1rb7IzKt5NnHhnje6gEexZ5+w8sXzdODAATTIckcpI O20sYmkg7P66JHRDLKvWJaw7L4xpwoXnLkEeKX9oJjOirNN1MYsPot5nQE/WPZBU bF6OZVISlE0RlTfqeRlcpsgF/hXgVi63JmkTDDR0iXnuumML618GevC+xEeNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQRRE+H/KzLQbv3kAfeJpDa/tC8UwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU2QZWoDAG4y7gtP0mvR 1TJ3G1fs4tTD6pHz5952ghj1c/ENQGLCVjkwES8G5bHNigMOiN5CIVnEw2pbnCvM pdmnV+GdmcaYLsARz2vA10XzYLS8z1BbFOk7+0v44QtvObEA/bIsqMBlvrXNacWs pJZwsCgqePAFvUWh/O5MnsyL93V8Qla4fusTHOmQtuxbhd0txHv+ZiK+Anr45ufk eMLrp4+6gS6w7GYXysQvsVMGKiBXgAR/rhbl5T/Dz9eDryDvASznp8uaiSbGSZ0k 7zbrp7bjXxDNq4jqM2rkN8UDjFnqTNZb7Ljy/Cfl0dNPQPHb6vLZ/2w3uc0Pp0YI 5w== -----END CERTIFICATE-----Generated at Mon Jan 26 10:35:53 2026 by rpki-client