This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: H7XO8d9OXCOxiLI3F3hiaxMSqY9+ncQHf3lrdk+jAg8= Subject key identifier: 11:99:0C:C5:A3:0E:DB:EC:1E:46:A1:71:81:DB:AF:97:36:8A:0E:81 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 62B1964C65CE2DFAF7B8F3262346E37DDBC42A06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 031D Signing time: Fri 05 Dec 2025 15:32:40 +0000 Manifest this update: Fri 05 Dec 2025 15:27:40 +0000 Manifest next update: Sat 06 Dec 2025 17:58:40 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: pOUDntTTosM1tGcAoUzPQkDnad/k/LRUrGyKdjkA7yY=) 3: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) 4: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b1:96:4c:65:ce:2d:fa:f7:b8:f3:26:23:46:e3:7d:db:c4:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 5 15:27:40 2025 GMT Not After : Dec 6 17:58:40 2025 GMT Subject: CN=11990CC5A30EDBEC1E46A17181DBAF97368A0E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:2b:27:cd:e7:3a:5a:38:24:2e:9c:76:a5: f2:4b:66:e2:5a:c3:3c:27:1d:dc:98:52:46:37:11: 74:ec:d4:2e:2a:c5:59:fa:76:5a:dd:b8:42:0b:76: f1:88:ef:60:d7:ab:fd:9d:da:3c:ea:7b:14:be:d2: 92:37:3e:8f:e8:c2:e9:f2:c3:ee:4d:34:50:b5:6d: 36:bb:b9:62:8a:b5:1e:e8:80:27:80:9e:4b:15:32: 11:cb:dc:a2:93:d3:9b:b7:1b:62:b6:70:d3:92:fc: 62:41:db:85:c1:ee:34:c6:cf:a4:2a:66:5c:29:13: 9e:b1:9d:77:b3:eb:18:a2:4d:26:60:04:16:fb:ca: a0:57:7b:5c:d4:93:dd:10:82:da:54:23:be:f4:93: 43:86:3a:ac:c2:81:17:2b:b5:0c:ef:73:5c:c6:15: 91:b7:c4:c6:11:b5:c4:18:6d:46:4c:d7:d9:72:c5: b4:99:90:4d:6b:48:8f:cf:e5:17:c4:6c:e9:ae:d0: e4:c6:b1:47:7e:37:cc:fe:ca:74:4e:c7:6f:8e:b8: 4f:ae:07:37:e1:b1:e7:09:dc:fe:07:d9:1e:eb:d7: 9d:66:fb:cd:80:ab:54:c0:49:cb:58:5c:42:99:67: a0:2f:4b:95:03:38:1f:59:f2:f8:a5:ce:31:d0:7a: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:99:0C:C5:A3:0E:DB:EC:1E:46:A1:71:81:DB:AF:97:36:8A:0E:81 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:eb:24:70:9e:01:c5:8a:93:e7:03:9b:10:e6:c6:60:c9:7a: 7d:d0:64:0e:f9:7f:2c:8c:79:58:b8:d9:b6:78:5f:6b:d4:89: ba:dc:46:8a:e4:d6:9e:e0:e8:1b:11:88:28:cd:f7:b6:2d:d3: 35:4a:a9:31:3d:15:95:77:5f:a4:14:ee:fc:8e:1f:f2:e2:77: 0f:53:b5:5a:79:59:79:b8:e6:6f:99:59:84:e9:14:24:37:aa: 19:9a:39:c8:64:29:01:65:e2:74:48:87:4b:fd:d4:8e:57:82: e4:3d:8d:ff:5a:e0:03:a9:aa:ed:a6:47:ac:8f:c3:15:68:c4: 03:34:3e:15:eb:20:0a:e4:2b:74:5b:c1:2f:b5:9d:8e:a7:3b: 4c:86:cd:e8:37:94:56:7e:f6:18:58:1f:f6:82:5e:a1:96:10: 66:d8:7b:d2:f0:ed:03:f8:dd:78:26:c0:72:ac:f9:8e:00:6d: 1e:a7:ef:aa:96:57:d0:d8:0a:2b:ba:ef:c7:10:85:d5:c2:3d: a0:d6:8d:75:48:bd:5d:bc:b8:a8:e0:41:09:96:b3:98:e6:f9: 5c:5d:fb:65:96:92:f4:7f:7c:89:97:0f:e3:4e:03:2f:0c:08: d1:dd:24:33:7d:49:fb:c3:fc:9a:c8:47:4e:c8:43:95:b9:25: 15:e5:f2:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYrGWTGXOLfr3uPMmI0bjfdvEKgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMDUxNTI3NDBaFw0yNTEyMDYxNzU4NDBaMDMxMTAvBgNV BAMTKDExOTkwQ0M1QTMwRURCRUMxRTQ2QTE3MTgxREJBRjk3MzY4QTBFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oysnzec6WjgkLpx2pfJLZuJa wzwnHdyYUkY3EXTs1C4qxVn6dlrduEILdvGI72DXq/2d2jzqexS+0pI3Po/owuny w+5NNFC1bTa7uWKKtR7ogCeAnksVMhHL3KKT05u3G2K2cNOS/GJB24XB7jTGz6Qq ZlwpE56xnXez6xiiTSZgBBb7yqBXe1zUk90QgtpUI770k0OGOqzCgRcrtQzvc1zG FZG3xMYRtcQYbUZM19lyxbSZkE1rSI/P5RfEbOmu0OTGsUd+N8z+ynROx2+OuE+u BzfhsecJ3P4H2R7r151m+82Aq1TASctYXEKZZ6AvS5UDOB9Z8vilzjHQeqwPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUEZkMxaMO2+weRqFxgduvlzaKDoEwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+skcJ4BxYqT5wObEObG YMl6fdBkDvl/LIx5WLjZtnhfa9SJutxGiuTWnuDoGxGIKM33ti3TNUqpMT0VlXdf pBTu/I4f8uJ3D1O1WnlZebjmb5lZhOkUJDeqGZo5yGQpAWXidEiHS/3UjleC5D2N /1rgA6mq7aZHrI/DFWjEAzQ+FesgCuQrdFvBL7Wdjqc7TIbN6DeUVn72GFgf9oJe oZYQZth70vDtA/jdeCbAcqz5jgBtHqfvqpZX0NgKK7rvxxCF1cI9oNaNdUi9Xby4 qOBBCZazmOb5XF37ZZaS9H98iZcP404DLwwI0d0kM31J+8P8mshHTshDlbklFeXy kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:11:57 2025 by rpki-client