This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: FGIbNbBFncq8TGSXn0laFNVDpS/MpdEl72HrP5iPyoo= Subject key identifier: 29:E7:94:13:8A:8D:FE:15:D6:27:72:89:29:63:13:4C:C5:E3:79:41 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 2B6DE452CE152AAB3BEDD211697581728B3DB011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0353 Signing time: Fri 05 Dec 2025 23:51:17 +0000 Manifest this update: Fri 05 Dec 2025 23:46:17 +0000 Manifest next update: Sun 07 Dec 2025 02:25:17 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: RAtXiYXZER+97q8SH10i7JS04YXBYIQZJd8sg/dTsjI=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 5: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6d:e4:52:ce:15:2a:ab:3b:ed:d2:11:69:75:81:72:8b:3d:b0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Dec 5 23:46:17 2025 GMT Not After : Dec 7 02:25:17 2025 GMT Subject: CN=29E794138A8DFE15D62772892963134CC5E37941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:56:08:43:91:b1:08:e6:8d:e2:ab:aa:e6: 96:89:aa:dd:90:1d:a4:16:f0:03:b6:b7:8f:c5:0a: 52:70:d5:94:50:77:78:c0:12:8d:1f:52:63:82:1d: 73:ea:e6:e9:6f:ed:63:6d:f1:a7:69:3b:c3:34:33: 53:76:8d:52:86:65:98:22:4c:6b:54:80:60:6b:72: a8:53:3f:71:a9:76:2b:87:71:b0:b3:f3:ed:c1:89: 75:63:8c:8e:2a:f2:c3:75:81:a3:fc:28:3e:01:5f: 5b:5e:46:99:64:ad:db:34:c1:a5:29:22:7f:34:42: 33:0f:cc:80:f9:2a:50:82:ba:2e:2c:43:de:4e:7d: f8:ce:4b:54:fa:8d:69:58:a9:20:7a:45:41:37:26: 59:0c:98:97:f7:77:33:ac:22:46:7e:04:55:fe:18: 2e:5c:bb:0a:a0:7d:2c:2f:a8:74:5e:00:ee:fb:e8: 47:cf:59:e7:5c:2c:82:e3:c9:13:49:8b:44:fc:1e: 41:0c:0a:25:1f:7f:7f:fd:d1:1a:c5:92:bf:48:29: 3e:49:5f:e7:9a:61:0c:06:fa:b6:94:6b:d5:c9:7c: 8b:bf:43:26:12:70:78:ab:bc:2e:68:69:aa:9b:db: cf:c8:21:cb:33:ef:f0:92:46:8c:9d:ab:ad:d4:c8: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E7:94:13:8A:8D:FE:15:D6:27:72:89:29:63:13:4C:C5:E3:79:41 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f4:36:58:e5:bf:d0:7d:f0:58:48:73:53:6b:4c:a0:65:80: cb:63:e9:d8:48:8d:73:08:84:c8:8f:81:60:d0:e6:9b:f2:67: 36:3b:3c:5d:e1:a0:e0:14:6f:a5:4a:32:cd:13:93:09:8a:f9: bb:54:93:cd:5f:57:88:ff:7c:a9:ea:84:59:d5:6b:35:d6:e7: bf:8f:ed:a5:40:6e:68:ef:96:44:0b:6b:30:86:2e:a9:a1:c9: dc:55:a8:b9:d0:be:d3:2e:2b:ea:ff:98:fb:2c:ca:68:af:85: aa:83:0f:4a:39:9d:03:58:3d:64:ee:e5:40:ee:22:6f:5e:07: 26:3b:a0:ec:8f:c7:6d:c4:cd:80:96:39:b9:82:02:22:e9:32: 5a:12:a0:46:00:19:53:6b:21:ce:14:dd:49:92:a0:c8:fe:06: 11:c4:7f:c1:65:06:3a:57:30:9e:6e:d0:20:e3:4f:96:92:19: 72:ea:74:0b:99:31:ce:d3:e1:e0:66:95:3d:48:1e:a1:33:e8: 64:76:5c:22:32:93:40:dd:25:6a:7f:03:1e:e8:d4:7f:3e:5a: f7:8c:20:eb:37:6b:85:79:28:8c:b9:30:ab:ab:a2:4f:b6:b3: 6f:6c:6c:d3:f4:ad:5f:0e:71:7f:3d:25:f8:42:bd:e3:96:ec: 16:d1:c5:b0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK23kUs4VKqs77dIRaXWBcos9sBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTEyMDUyMzQ2MTdaFw0yNTEyMDcwMjI1MTdaMDMxMTAvBgNV BAMTKDI5RTc5NDEzOEE4REZFMTVENjI3NzI4OTI5NjMxMzRDQzVFMzc5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MlYIQ5GxCOaN4quq5paJqt2Q HaQW8AO2t4/FClJw1ZRQd3jAEo0fUmOCHXPq5ulv7WNt8adpO8M0M1N2jVKGZZgi TGtUgGBrcqhTP3GpdiuHcbCz8+3BiXVjjI4q8sN1gaP8KD4BX1teRplkrds0waUp In80QjMPzID5KlCCui4sQ95OffjOS1T6jWlYqSB6RUE3JlkMmJf3dzOsIkZ+BFX+ GC5cuwqgfSwvqHReAO776EfPWedcLILjyRNJi0T8HkEMCiUff3/90RrFkr9IKT5J X+eaYQwG+raUa9XJfIu/QyYScHirvC5oaaqb28/IIcsz7/CSRoydq63UyOMhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKeeUE4qN/hXWJ3KJKWMTTMXjeUEwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPQ2WOW/0H3wWEhzU2tM oGWAy2Pp2EiNcwiEyI+BYNDmm/JnNjs8XeGg4BRvpUoyzROTCYr5u1STzV9XiP98 qeqEWdVrNdbnv4/tpUBuaO+WRAtrMIYuqaHJ3FWoudC+0y4r6v+Y+yzKaK+FqoMP SjmdA1g9ZO7lQO4ib14HJjug7I/HbcTNgJY5uYICIukyWhKgRgAZU2shzhTdSZKg yP4GEcR/wWUGOlcwnm7QIONPlpIZcup0C5kxztPh4GaVPUgeoTPoZHZcIjKTQN0l an8DHujUfz5a94wg6zdrhXkojLkwq6uiT7azb2xs0/StXw5xfz0l+EK945bsFtHF sA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:37 2025 by rpki-client