This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: TGsG6c92Xua1zOBbOfyv0xyPnjsGVunKWIc0iJEUZC0= Subject key identifier: 33:6A:E2:3F:B0:ED:FA:35:45:04:B7:90:A1:AB:78:AB:AB:49:F3:8A Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 3412748681ECC3DA337D7EB3B3FA14797A6D6CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0364 Signing time: Thu 18 Dec 2025 22:02:33 +0000 Manifest this update: Thu 18 Dec 2025 21:57:33 +0000 Manifest next update: Fri 19 Dec 2025 23:28:33 +0000 Files and hashes: 1: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: 9rxoCYx0GH/KQOnk29LWvCZeX3n5yau+9Chok9KRBG8=) 4: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:74:86:81:ec:c3:da:33:7d:7e:b3:b3:fa:14:79:7a:6d:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Dec 18 21:57:33 2025 GMT Not After : Dec 19 23:28:33 2025 GMT Subject: CN=336AE23FB0EDFA354504B790A1AB78ABAB49F38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:65:36:bf:be:87:b9:d3:6a:07:d4:0b:19: 3e:06:a3:79:02:f2:66:42:94:11:cf:92:02:30:4a: a0:a2:df:22:b5:f8:22:7b:44:00:3a:60:15:22:84: a2:d3:38:91:b8:27:ca:08:1d:80:c9:e7:7b:57:3f: 85:9f:e6:e0:e9:59:04:ec:b7:75:c1:16:d4:9d:05: fa:f3:a0:82:f2:01:97:5d:ec:3c:b4:4b:58:e0:fe: c5:eb:b1:fb:56:fb:98:8e:7f:a8:48:4f:bf:4f:c8: 3d:0d:2c:60:62:0a:b1:4c:2d:b3:54:f4:6e:9f:2c: 40:3b:c1:c0:3c:bb:0f:43:cb:8c:5b:6f:79:87:d2: 47:05:4f:f8:e8:b8:df:2d:25:f9:16:63:c8:61:3b: 1a:ad:4b:69:85:53:d6:87:3e:26:f0:fe:56:8f:cc: ac:27:90:ba:a9:10:16:2e:26:18:c1:91:12:5e:ca: f8:ad:91:80:8c:88:1a:17:1c:6e:19:27:39:ac:31: 98:2b:22:3f:eb:b1:37:90:6a:53:80:aa:3d:97:41: 91:61:7e:fb:42:4c:c6:fa:eb:b5:aa:cf:17:84:92: ce:f9:6a:cb:69:6c:0e:c0:7f:40:a9:0b:5b:16:32: 15:49:b0:2b:5b:04:ba:76:ef:c9:64:11:87:92:15: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6A:E2:3F:B0:ED:FA:35:45:04:B7:90:A1:AB:78:AB:AB:49:F3:8A X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9a:7a:50:be:b2:3c:8e:c6:69:3f:66:4e:5b:4b:2e:77:d7: 53:37:98:a0:79:49:ba:58:00:49:f4:35:3b:6e:ff:fa:df:fe: de:f4:20:52:6a:87:21:ec:cf:89:c3:1d:7c:37:e3:25:ba:5f: 51:da:26:a6:cc:ff:33:38:8d:30:67:c0:1b:84:a2:c8:bd:64: 5e:a6:dc:e7:0e:d7:cb:0e:4c:55:df:33:44:fc:d1:f6:fc:bf: 6a:5e:f1:0d:31:fd:36:93:01:10:3b:67:c9:55:15:6f:ae:17: 17:b3:95:1d:b8:ff:3e:15:9a:23:ba:90:61:70:e4:46:64:f5: a0:80:36:88:41:72:44:2a:85:e6:34:e0:22:b2:22:b6:dc:30: 7b:9f:5b:0e:a0:fa:f5:cf:ab:cf:49:1e:87:28:6a:fe:01:af: c2:d8:6a:d0:88:ca:16:63:f8:50:75:28:73:6b:15:b0:58:33: 2a:d8:fb:41:24:40:1c:f5:c5:68:79:8b:2d:64:17:dc:bf:8f: 63:8d:2d:4a:bb:1b:1b:15:14:9e:98:14:09:de:69:c8:8f:51: 7d:98:f8:c7:64:1c:1b:f5:67:7a:4e:25:40:fe:10:ea:2f:39: 7d:b8:0f:58:2f:02:50:0e:20:3e:f1:50:27:21:f4:11:01:e7: 62:d1:f2:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNBJ0hoHsw9ozfX6zs/oUeXptbMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTEyMTgyMTU3MzNaFw0yNTEyMTkyMzI4MzNaMDMxMTAvBgNV BAMTKDMzNkFFMjNGQjBFREZBMzU0NTA0Qjc5MEExQUI3OEFCQUI0OUYzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZWU2v76HudNqB9QLGT4Go3kC 8mZClBHPkgIwSqCi3yK1+CJ7RAA6YBUihKLTOJG4J8oIHYDJ53tXP4Wf5uDpWQTs t3XBFtSdBfrzoILyAZdd7Dy0S1jg/sXrsftW+5iOf6hIT79PyD0NLGBiCrFMLbNU 9G6fLEA7wcA8uw9Dy4xbb3mH0kcFT/jouN8tJfkWY8hhOxqtS2mFU9aHPibw/laP zKwnkLqpEBYuJhjBkRJeyvitkYCMiBoXHG4ZJzmsMZgrIj/rsTeQalOAqj2XQZFh fvtCTMb667WqzxeEks75astpbA7Af0CpC1sWMhVJsCtbBLp278lkEYeSFddZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUM2riP7Dt+jVFBLeQoat4q6tJ84owHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5p6UL6yPI7GaT9mTltL LnfXUzeYoHlJulgASfQ1O27/+t/+3vQgUmqHIezPicMdfDfjJbpfUdompsz/MziN MGfAG4SiyL1kXqbc5w7Xyw5MVd8zRPzR9vy/al7xDTH9NpMBEDtnyVUVb64XF7OV Hbj/PhWaI7qQYXDkRmT1oIA2iEFyRCqF5jTgIrIittwwe59bDqD69c+rz0kehyhq /gGvwthq0IjKFmP4UHUoc2sVsFgzKtj7QSRAHPXFaHmLLWQX3L+PY40tSrsbGxUU npgUCd5pyI9RfZj4x2QcG/Vnek4lQP4Q6i85fbgPWC8CUA4gPvFQJyH0EQHnYtHy 6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:59 2025 by rpki-client