This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json) Hash identifier: WstNmPINebXD6o3KyW5ModMwh5ikxTXBkMDyIdQYKfQ= Subject key identifier: B8:B1:9F:B3:A6:16:43:C7:C2:26:84:78:42:5C:AD:16:BF:FD:6C:08 Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Certificate serial: 52D1583D4EDE287E3F922346DBD9F85F8625E495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft Manifest number: 0332 Signing time: Sun 21 Dec 2025 07:32:46 +0000 Manifest this update: Sun 21 Dec 2025 07:27:46 +0000 Manifest next update: Mon 22 Dec 2025 09:12:46 +0000 Files and hashes: 1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=) 2: AS212068.asa (hash: QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=) 3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=) 4: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: lDZhoqDm8wAOv60+4+gyfVI8KqGCMpzOnmM0DlFJVWM=) 5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d1:58:3d:4e:de:28:7e:3f:92:23:46:db:d9:f8:5f:86:25:e4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38 Validity Not Before: Dec 21 07:27:46 2025 GMT Not After : Dec 22 09:12:46 2025 GMT Subject: CN=B8B19FB3A61643C7C2268478425CAD16BFFD6C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:93:f1:2f:af:f6:40:0f:a9:a4:75:59:cc: ee:bf:ab:0b:2f:a4:c3:7a:c0:b4:11:11:2e:b4:9f: 00:34:51:65:25:5e:e3:4f:50:fc:d4:11:26:f8:45: a1:8b:74:bd:ff:2e:00:24:e9:c1:12:1f:d5:f1:a2: 9f:4e:32:99:c4:0d:1f:db:cb:b6:0a:09:7e:13:83: 8c:66:2c:af:0c:5e:92:74:8c:54:e2:63:81:0f:ee: 5b:e0:c8:64:f9:0f:10:8e:17:a3:29:cc:24:df:c9: ec:5f:db:00:4f:d1:52:a7:c3:ea:22:3f:79:8e:d3: d7:23:9c:c4:74:f2:47:98:ee:b5:e4:85:51:a9:34: 8d:59:a3:ac:b2:ce:77:cc:71:bc:18:24:b7:d3:da: c0:fc:de:7f:15:09:06:c4:27:7c:5c:d1:f4:34:57: 5e:21:4b:5f:ab:d9:38:45:c1:69:d4:e9:fc:eb:45: 42:aa:a0:2e:d2:ab:18:e4:75:3e:6c:0b:ec:f3:35: 45:04:d5:6d:22:b5:8f:8a:02:07:88:5b:b0:eb:a1: 6d:4d:3e:6d:c6:6e:a7:dd:3e:08:2e:a5:51:ac:c7: c3:cd:49:a6:5b:e6:16:4f:02:48:55:72:c5:7d:18: 09:c9:a7:a2:f8:8c:31:52:b4:d2:07:0d:f7:2e:e1: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:9F:B3:A6:16:43:C7:C2:26:84:78:42:5C:AD:16:BF:FD:6C:08 X509v3 Authority Key Identifier: keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:42:bc:69:a7:58:28:4d:c3:a9:2a:1d:94:2e:21:cd:ad:c9: 18:d5:c5:54:85:3d:ed:62:8a:d5:b7:47:6b:44:6d:f1:93:52: 43:d1:46:c9:af:aa:7f:5f:e0:7f:9a:79:1b:e9:05:d2:ce:b0: d8:31:d3:72:be:2a:0a:30:24:af:ad:e2:25:d1:a6:0b:7f:7c: 4a:b2:08:f3:8c:52:50:90:3a:86:c9:58:9a:e6:75:54:e6:cd: f3:45:79:e7:7a:e8:e6:8a:9a:66:49:46:dc:e9:fd:dc:7d:fa: e5:d1:19:97:1b:ba:4d:10:4e:50:2e:5b:a8:0e:e4:bd:06:fb: 35:ae:28:35:3b:46:92:ee:6f:1e:b5:8a:3b:ea:a1:6f:ce:a9: 72:68:15:e7:0b:9a:ae:fe:4c:8c:30:a2:52:4d:3e:59:d8:43: 57:be:c2:58:c0:b1:40:07:90:f3:87:9f:90:63:30:ed:0a:d5: 95:36:2b:d9:46:37:25:31:4f:af:ab:d6:d2:a9:4e:11:51:16: 03:d7:ae:a7:b9:68:4b:a3:e8:7c:21:87:97:5e:16:1a:c0:94: 5c:99:db:01:a7:1c:98:81:fb:65:da:e5:0f:36:2e:4d:70:e3: ab:a6:72:25:98:85:ca:51:43:d7:71:12:4f:18:e9:6c:ff:a0: 69:a5:88:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUtFYPU7eKH4/kiNG29n4X4Yl5JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl MmE1YmIzODAeFw0yNTEyMjEwNzI3NDZaFw0yNTEyMjIwOTEyNDZaMDMxMTAvBgNV BAMTKEI4QjE5RkIzQTYxNjQzQzdDMjI2ODQ3ODQyNUNBRDE2QkZGRDZDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVRZPxL6/2QA+ppHVZzO6/qwsv pMN6wLQRES60nwA0UWUlXuNPUPzUESb4RaGLdL3/LgAk6cESH9Xxop9OMpnEDR/b y7YKCX4Tg4xmLK8MXpJ0jFTiY4EP7lvgyGT5DxCOF6MpzCTfyexf2wBP0VKnw+oi P3mO09cjnMR08keY7rXkhVGpNI1Zo6yyznfMcbwYJLfT2sD83n8VCQbEJ3xc0fQ0 V14hS1+r2ThFwWnU6fzrRUKqoC7SqxjkdT5sC+zzNUUE1W0itY+KAgeIW7DroW1N Pm3GbqfdPggupVGsx8PNSaZb5hZPAkhVcsV9GAnJp6L4jDFStNIHDfcu4Q0bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuLGfs6YWQ8fCJoR4QlytFr/9bAgwHwYDVR0j BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0 OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL bHV6Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOTc5ZjAxNS0y ZDY5LTQ4ZjEtYmI1Mi0zNTgxYzRkZjQ4ZmEvMC82MDA1NzkwMjEyODdFQTY0OTVE N0Y5MzRBNkRFRDMwRUUyQTVCQjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkK8aadYKE3DqSodlC4h za3JGNXFVIU97WKK1bdHa0Rt8ZNSQ9FGya+qf1/gf5p5G+kF0s6w2DHTcr4qCjAk r63iJdGmC398SrII84xSUJA6hslYmuZ1VObN80V553ro5oqaZklG3On93H365dEZ lxu6TRBOUC5bqA7kvQb7Na4oNTtGku5vHrWKO+qhb86pcmgV5wuarv5MjDCiUk0+ WdhDV77CWMCxQAeQ84efkGMw7QrVlTYr2UY3JTFPr6vW0qlOEVEWA9eup7loS6Po fCGHl14WGsCUXJnbAaccmIH7ZdrlDzYuTXDjq6ZyJZiFylFD13ESTxjpbP+gaaWI ow== -----END CERTIFICATE-----Generated at Sun Dec 21 13:29:19 2025 by rpki-client