This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft File: FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json) Hash identifier: WVklpb+0+ya4a/uBmnh59tcnDWIodztzHQeWx0y+XQw= Subject key identifier: 02:B6:86:AC:12:5B:A4:34:EF:22:53:5D:96:B4:2C:90:CA:11:C1:80 Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D Certificate issuer: /CN=fb64d48d941f2f324279cf863188d26d2056d11d Certificate serial: 084FCAB782060605BAF26EE29C872ABB00280E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft Manifest number: 038B Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:55:38 +0000 Manifest next update: Sun 07 Dec 2025 10:14:38 +0000 Files and hashes: 1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: j2+TrxrJHDgun6T1B8ZucHFkSDEcdzHEGNGTk7UDWPk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4f:ca:b7:82:06:06:05:ba:f2:6e:e2:9c:87:2a:bb:00:28:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d Validity Not Before: Dec 6 06:55:38 2025 GMT Not After : Dec 7 10:14:38 2025 GMT Subject: CN=02B686AC125BA434EF22535D96B42C90CA11C180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:15:c5:b2:5a:d9:2c:41:87:d1:cd:29:5f: 9f:7e:7a:14:30:d6:8a:9c:9a:83:2d:6d:73:e7:fc: 33:f8:a6:d7:02:da:2c:7f:7c:0b:d5:92:05:44:1a: 5f:cc:c2:97:f6:1e:7d:21:06:fd:e7:d6:53:dd:7f: ba:b1:57:46:14:19:86:ff:6c:f9:fc:d9:3b:be:08: d6:ae:a4:98:4c:bb:97:c8:8c:36:e5:3a:e1:6c:48: 86:88:b5:25:4c:f4:70:06:4e:42:bf:35:7c:4e:a2: d5:e8:1e:d5:6c:a2:55:ec:3f:71:ff:fb:1b:ea:86: 52:d0:b4:b4:d8:ac:47:4b:3d:fe:d9:65:76:67:2f: 55:2d:e1:09:84:28:27:d3:65:54:ab:27:cb:9f:fa: 15:9f:b1:07:24:27:cf:60:3a:7e:fe:f5:bc:60:13: 8a:1d:f5:ca:3e:cf:55:be:ea:2a:be:55:1e:93:8a: 04:3f:75:b6:41:7a:75:b2:ce:63:96:95:ec:14:e1: e7:75:31:72:70:65:0e:12:68:90:07:78:4f:ec:8e: a1:a2:96:56:a8:40:b9:f8:0a:09:a6:44:57:41:b0: 37:64:b9:04:4b:fe:29:2f:31:7d:cc:50:1e:74:5e: 9f:7f:bc:37:20:7d:f6:b2:96:c9:65:5e:97:68:0c: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:86:AC:12:5B:A4:34:EF:22:53:5D:96:B4:2C:90:CA:11:C1:80 X509v3 Authority Key Identifier: keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b2:55:5a:1c:b3:ae:83:3f:6c:35:1d:e1:75:f9:c0:06:93: 37:14:08:bb:70:50:52:2d:ff:18:33:c6:39:8a:6a:b1:f6:ca: 9e:54:3b:25:cf:ce:67:0f:53:9b:d4:47:b5:47:9f:cd:bb:f3: 37:95:7a:90:45:57:4b:9b:e5:10:b4:21:a9:44:d1:82:47:b6: cd:0c:5e:d7:03:56:88:f2:b8:86:f1:a1:ee:f2:8c:41:dc:ec: 79:1d:01:e9:41:69:5c:76:54:ef:04:fe:b2:d6:81:25:cd:ba: b8:ba:73:cc:c6:cb:c3:18:4c:8a:2e:25:8e:66:c8:db:45:16: 75:98:0d:40:ef:c8:57:45:a4:94:86:74:eb:f0:26:18:00:bf: 8d:85:27:ac:83:ec:6a:26:30:f7:2e:15:3f:48:bc:6f:16:e2: f7:fe:78:1c:3b:af:8b:4b:33:d5:25:29:a1:88:40:c0:01:e3: 8e:15:46:54:cc:1c:76:ee:aa:a0:4c:22:66:16:7b:42:b1:ea: cc:3e:fa:97:d2:2d:f7:6a:70:7c:49:ba:33:71:08:f2:1d:20: 5c:79:7c:a6:d9:10:36:c5:77:3a:ac:64:25:e7:5a:f7:89:c2: 71:db:c8:e1:85:b5:88:cd:93:01:74:12:54:4e:c7:32:38:c6: 4b:85:10:82 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUCE/Kt4IGBgW68m7inIcquwAoDlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmI2NGQ0OGQ5NDFmMmYzMjQyNzljZjg2MzE4OGQyNmQy MDU2ZDExZDAeFw0yNTEyMDYwNjU1MzhaFw0yNTEyMDcxMDE0MzhaMDMxMTAvBgNV BAMTKDAyQjY4NkFDMTI1QkE0MzRFRjIyNTM1RDk2QjQyQzkwQ0ExMUMxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjRXFslrZLEGH0c0pX59+ehQw 1oqcmoMtbXPn/DP4ptcC2ix/fAvVkgVEGl/Mwpf2Hn0hBv3n1lPdf7qxV0YUGYb/ bPn82Tu+CNaupJhMu5fIjDblOuFsSIaItSVM9HAGTkK/NXxOotXoHtVsolXsP3H/ +xvqhlLQtLTYrEdLPf7ZZXZnL1Ut4QmEKCfTZVSrJ8uf+hWfsQckJ89gOn7+9bxg E4od9co+z1W+6iq+VR6TigQ/dbZBenWyzmOWlewU4ed1MXJwZQ4SaJAHeE/sjqGi llaoQLn4CgmmRFdBsDdkuQRL/ikvMX3MUB50Xp9/vDcgffaylsllXpdoDDnfAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUAraGrBJbpDTvIlNdlrQskMoRwYAwHwYDVR0j BBgwFoAU+2TUjZQfLzJCec+GMYjSbSBW0R0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQyNzlDRjg2MzE4OEQyNkQyMDU2RDExRC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtMlRValpRZkx6SkNlYy1HTVlqU2JT QlcwUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQt MDJmMC00NjU3LTkwMjItZDJiODNjZmY4NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQy NzlDRjg2MzE4OEQyNkQyMDU2RDExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAECyVVocs66DP2w1HeF1 +cAGkzcUCLtwUFIt/xgzxjmKarH2yp5UOyXPzmcPU5vUR7VHn8278zeVepBFV0ub 5RC0IalE0YJHts0MXtcDVojyuIbxoe7yjEHc7HkdAelBaVx2VO8E/rLWgSXNuri6 c8zGy8MYTIouJY5myNtFFnWYDUDvyFdFpJSGdOvwJhgAv42FJ6yD7GomMPcuFT9I vG8W4vf+eBw7r4tLM9UlKaGIQMAB444VRlTMHHbuqqBMImYWe0Kx6sw++pfSLfdq cHxJujNxCPIdIFx5fKbZEDbFdzqsZCXnWveJwnHbyOGFtYjNkwF0ElROxzI4xkuF EII= -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:58 2025 by rpki-client