This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: eFP880Dv2AMbJxxItUpRbHsSUTEMk9+dk+QHuBuTEm8= Subject key identifier: DE:45:19:BD:10:41:D5:6C:3C:1F:90:B4:F0:48:BE:9E:62:7B:8B:93 Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 397DD486C2D0F3E41301909E73662B9ABAC666C0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 3F Signing time: Tue 09 Dec 2025 19:24:38 +0000 Manifest this update: Tue 09 Dec 2025 19:19:38 +0000 Manifest next update: Wed 10 Dec 2025 22:12:38 +0000 Files and hashes: 1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: 2nZacQWOz/Rx26sGmJhLe4nJcRYPgsTD9qkyd4IHS8Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 22:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7d:d4:86:c2:d0:f3:e4:13:01:90:9e:73:66:2b:9a:ba:c6:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Dec 9 19:19:38 2025 GMT Not After : Dec 10 22:12:38 2025 GMT Subject: CN=DE4519BD1041D56C3C1F90B4F048BE9E627B8B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:1c:fa:b2:3b:38:e4:8f:17:9f:fd:a3:0a: b3:2f:e1:5f:56:ec:de:e8:66:9a:5d:1b:59:ed:cc: 50:74:ad:ae:f9:9f:67:b1:78:ea:9e:4d:9c:ac:be: 0a:93:a7:a3:65:10:27:bd:30:21:75:64:93:7d:ae: 84:1e:76:c4:a4:19:23:e6:15:c1:a6:14:3b:f4:2d: 99:94:31:37:d2:af:d9:17:11:b2:a5:06:fd:c8:fb: 30:b9:d7:b4:3e:8b:1a:4a:b1:2f:ce:4e:d8:16:ce: 83:d4:35:9c:04:ea:c0:74:9c:82:75:61:a0:60:5a: 45:dc:68:26:1d:fa:a5:ab:22:cf:de:a4:8f:58:ee: 67:ce:a4:81:c0:08:95:76:69:fe:1c:5d:9a:40:d9: 0d:cc:db:83:ce:d2:db:30:9a:11:30:e1:7a:03:b8: 18:dc:57:5a:d6:a1:3a:04:ee:97:da:6c:13:41:87: b6:1f:ab:c3:79:a5:d0:0c:86:a0:63:48:16:37:5c: 22:27:84:8c:2a:09:eb:05:bf:2f:d8:84:ea:65:2c: 9b:14:19:ad:0f:95:df:9f:da:83:91:99:a3:f0:fc: 80:f7:4d:c3:27:ac:34:7d:36:f5:09:89:cf:1e:74: d8:a3:b2:33:52:d6:21:20:93:e3:f3:92:58:4c:85: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:45:19:BD:10:41:D5:6C:3C:1F:90:B4:F0:48:BE:9E:62:7B:8B:93 X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:eb:b7:d7:c2:d1:1a:83:94:88:e9:97:6a:20:52:7d:43:35: 87:42:e4:d7:5c:a1:44:88:40:11:5d:e5:68:39:63:bb:e0:17: d9:b5:5c:8c:bb:15:ca:22:9e:70:4d:17:b2:b8:a3:50:7b:dd: 72:b2:df:11:5b:22:e2:b6:42:78:8a:15:a7:2e:6c:79:43:d3: e8:6c:a9:ed:77:22:dc:e3:05:a2:5f:18:88:a9:53:e0:9e:dc: 92:45:5f:ab:b7:6d:a3:16:e9:b6:eb:a6:80:1a:1e:cc:4a:8e: d9:f6:7e:1d:0c:56:10:8b:f1:04:fe:2e:d1:6a:db:1b:34:03: 27:64:40:3d:48:70:37:65:a4:87:36:ed:31:6d:37:7c:ac:c9: 89:60:82:1a:9d:99:37:1b:10:67:ca:89:c7:10:50:15:19:49: 55:0a:a9:1c:f4:fe:de:46:c8:e6:7b:f0:38:a3:b2:19:c0:dd: fe:90:de:47:d8:80:4b:32:06:87:bf:60:e0:b2:64:e9:98:a9: 16:43:99:7b:f6:da:93:45:35:a5:bd:16:c8:1f:00:47:95:f9: 0b:3e:d5:e4:5d:37:fa:02:a0:1a:4a:3d:5d:bb:ab:36:19:2c: 4a:a6:c7:95:3e:53:f0:d7:35:95:ac:09:cf:0c:49:e8:a0:f0: 4b:87:7f:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOX3UhsLQ8+QTAZCec2YrmrrGZsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNTEyMDkxOTE5MzhaFw0yNTEyMTAyMjEyMzhaMDMxMTAvBgNV BAMTKERFNDUxOUJEMTA0MUQ1NkMzQzFGOTBCNEYwNDhCRTlFNjI3QjhCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdBz6sjs45I8Xn/2jCrMv4V9W 7N7oZppdG1ntzFB0ra75n2exeOqeTZysvgqTp6NlECe9MCF1ZJN9roQedsSkGSPm FcGmFDv0LZmUMTfSr9kXEbKlBv3I+zC517Q+ixpKsS/OTtgWzoPUNZwE6sB0nIJ1 YaBgWkXcaCYd+qWrIs/epI9Y7mfOpIHACJV2af4cXZpA2Q3M24PO0tswmhEw4XoD uBjcV1rWoToE7pfabBNBh7Yfq8N5pdAMhqBjSBY3XCInhIwqCesFvy/YhOplLJsU Ga0Pld+f2oORmaPw/ID3TcMnrDR9NvUJic8edNijsjNS1iEgk+PzklhMhVGlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3kUZvRBB1Ww8H5C08Ei+nmJ7i5MwHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA667fX wtEag5SI6ZdqIFJ9QzWHQuTXXKFEiEARXeVoOWO74BfZtVyMuxXKIp5wTReyuKNQ e91yst8RWyLitkJ4ihWnLmx5Q9PobKntdyLc4wWiXxiIqVPgntySRV+rt22jFum2 66aAGh7MSo7Z9n4dDFYQi/EE/i7RatsbNAMnZEA9SHA3ZaSHNu0xbTd8rMmJYIIa nZk3GxBnyonHEFAVGUlVCqkc9P7eRsjme/A4o7IZwN3+kN5H2IBLMgaHv2DgsmTp mKkWQ5l79tqTRTWlvRbIHwBHlfkLPtXkXTf6AqAaSj1du6s2GSxKpseVPlPw1zWV rAnPDEnooPBLh39q -----END CERTIFICATE-----Generated at Wed Dec 10 09:04:02 2025 by rpki-client