This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: 6vsRg82zvoy+iHk0t+kHhvZkqEScy1nAbWFZ5a/DJzU= Subject key identifier: 5C:C8:AA:F8:78:5A:08:77:C2:F0:10:87:72:3D:36:6F:A1:57:14:95 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 488D83008529EE0FE3F6706C1B533A4948769935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0351 Signing time: Mon 12 Jan 2026 16:38:09 +0000 Manifest this update: Mon 12 Jan 2026 16:33:09 +0000 Manifest next update: Tue 13 Jan 2026 18:25:09 +0000 Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 2: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=) 3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: AV3/LuAeCnh2r/uj3+gw+4gB48EmWtmy9QNCsaXXwbE=) 4: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 18:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8d:83:00:85:29:ee:0f:e3:f6:70:6c:1b:53:3a:49:48:76:99:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Jan 12 16:33:09 2026 GMT Not After : Jan 13 18:25:09 2026 GMT Subject: CN=5CC8AAF8785A0877C2F01087723D366FA1571495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:83:23:34:63:e6:a1:d2:63:a8:0c:9d:c7: 2a:79:d2:79:d4:d9:c1:db:e7:6e:e7:b7:38:9e:ed: 7e:5f:ed:9e:bf:a7:5b:60:65:9e:57:23:e5:cc:4b: 01:b7:d2:7d:dd:7e:38:dc:98:76:cb:57:38:c9:e4: 9e:b3:0f:2e:b6:0a:17:6b:1e:b3:ad:77:5a:4f:f7: 89:c9:eb:c9:f4:62:06:40:b9:62:f9:7a:c5:ea:54: eb:e1:a4:37:48:35:45:2c:06:2e:6c:26:59:bc:4f: c1:5b:91:ec:b0:30:c3:60:81:1f:cb:3c:ca:fe:86: c9:eb:53:5b:44:51:37:c8:fe:16:0f:bd:4b:10:dd: 9f:6f:9f:79:ee:5c:51:18:12:a7:79:30:aa:24:53: 93:86:30:2f:ba:64:87:58:fd:57:d6:55:dd:42:ff: 2d:8b:e9:ff:2f:19:57:dd:fb:c6:7c:a2:28:56:d4: b0:fa:79:83:ab:3b:cc:e6:6b:a6:22:97:bd:f1:24: 2c:5e:fb:38:e8:4a:bd:89:51:78:24:8f:04:d7:71: 90:fe:62:e8:20:fa:3b:5f:a1:79:40:e2:6e:e7:7c: fb:d3:9f:94:66:49:81:11:4a:dd:4b:f3:82:d3:89: b4:6a:23:9c:74:df:28:2c:37:5e:de:8e:88:0d:63: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C8:AA:F8:78:5A:08:77:C2:F0:10:87:72:3D:36:6F:A1:57:14:95 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:8b:bc:38:56:f5:b7:78:0e:93:62:05:b1:be:ea:e2:b1:d9: 83:4a:9f:d1:94:a4:4a:25:8f:8a:d0:1e:9c:63:97:71:48:d4: fa:03:15:d3:61:8a:4d:16:87:b9:7f:ed:09:7a:d3:23:5b:92: 96:9a:ca:c6:76:61:a8:49:3c:a6:8d:21:58:70:71:b5:93:30: 14:64:23:b0:45:f2:b6:67:2a:de:c5:d0:bb:46:9b:de:63:ec: bd:8a:2f:5a:b6:16:fc:52:0d:0d:e0:f7:83:02:93:1c:02:16: 2c:99:4f:43:98:67:79:38:86:a2:db:43:2d:a6:9b:d8:8f:b4: c4:1b:0d:0c:d3:a8:1e:e7:57:a2:2b:e4:b5:6a:08:a6:10:c6: 87:de:3d:00:8f:0d:0d:7d:65:40:97:a6:82:95:3b:72:9f:2b: 07:69:e1:cd:55:d4:a5:0b:df:25:f5:31:cb:32:95:16:0d:ce: ba:d8:7a:53:1d:f2:63:18:07:a8:45:1a:8a:0a:95:99:d8:79: a4:73:bb:98:e0:11:bd:f7:f2:12:c2:a6:ea:bc:85:49:a0:d8: ed:40:00:93:79:54:cf:2e:10:75:bd:a9:63:12:67:58:8a:a2: d2:1c:74:a9:18:c4:45:41:91:89:d0:31:71:4e:5f:c4:54:47: 10:fa:45:0b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSI2DAIUp7g/j9nBsG1M6SUh2mTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNjAxMTIxNjMzMDlaFw0yNjAxMTMxODI1MDlaMDMxMTAvBgNV BAMTKDVDQzhBQUY4Nzg1QTA4NzdDMkYwMTA4NzcyM0QzNjZGQTE1NzE0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfoMjNGPmodJjqAydxyp50nnU 2cHb527ntzie7X5f7Z6/p1tgZZ5XI+XMSwG30n3dfjjcmHbLVzjJ5J6zDy62Chdr HrOtd1pP94nJ68n0YgZAuWL5esXqVOvhpDdINUUsBi5sJlm8T8FbkeywMMNggR/L PMr+hsnrU1tEUTfI/hYPvUsQ3Z9vn3nuXFEYEqd5MKokU5OGMC+6ZIdY/VfWVd1C /y2L6f8vGVfd+8Z8oihW1LD6eYOrO8zma6Yil73xJCxe+zjoSr2JUXgkjwTXcZD+ Yugg+jtfoXlA4m7nfPvTn5RmSYERSt1L84LTibRqI5x03ygsN17ejogNY2hfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXMiq+HhaCHfC8BCHcj02b6FXFJUwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArou8OFb1t3gOk2IFsb7q 4rHZg0qf0ZSkSiWPitAenGOXcUjU+gMV02GKTRaHuX/tCXrTI1uSlprKxnZhqEk8 po0hWHBxtZMwFGQjsEXytmcq3sXQu0ab3mPsvYovWrYW/FINDeD3gwKTHAIWLJlP Q5hneTiGottDLaab2I+0xBsNDNOoHudXoivktWoIphDGh949AI8NDX1lQJemgpU7 cp8rB2nhzVXUpQvfJfUxyzKVFg3Outh6Ux3yYxgHqEUaigqVmdh5pHO7mOARvffy EsKm6ryFSaDY7UAAk3lUzy4Qdb2pYxJnWIqi0hx0qRjERUGRidAxcU5fxFRHEPpF Cw== -----END CERTIFICATE-----Generated at Tue Jan 13 09:41:51 2026 by rpki-client