This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: 3cKxQOHRfZ6kuckO7xoehnkJYv/eSkuxoWIGrH/tPik= Subject key identifier: A3:1A:6B:60:4C:2C:13:28:D2:3C:C3:77:3E:C5:40:EC:B6:B5:0B:9A Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 774FEE9BCDFEFCEB7A529C1BF168DEA8292C5B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0360 Signing time: Mon 15 Dec 2025 22:12:16 +0000 Manifest this update: Mon 15 Dec 2025 22:07:16 +0000 Manifest next update: Wed 17 Dec 2025 01:53:16 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: 64TDYVXuxCwMxTB1YinwMIUX1blsccIjsCExD2F3OgQ=) 2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4f:ee:9b:cd:fe:fc:eb:7a:52:9c:1b:f1:68:de:a8:29:2c:5b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Dec 15 22:07:16 2025 GMT Not After : Dec 17 01:53:16 2025 GMT Subject: CN=A31A6B604C2C1328D23CC3773EC540ECB6B50B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2c:f7:8c:f3:ee:92:05:66:d6:29:f3:f7:a8: d7:d5:e4:44:cc:ca:08:59:45:40:41:33:9d:72:a6: cc:e3:95:d2:f0:ff:70:b7:33:fd:fd:c0:02:cb:51: af:58:51:bc:ba:93:b2:01:c6:15:47:9a:75:bd:13: b1:d0:79:37:bc:96:4c:9b:89:52:0d:da:26:50:e4: 14:a3:c9:68:f9:51:87:cc:59:c8:e7:3f:21:f4:fe: 43:74:74:d1:e6:00:2a:93:87:55:05:b2:f4:81:d1: 96:42:6c:99:f9:c8:05:b2:32:48:dd:b4:21:61:1a: 57:e2:fe:ea:c0:f5:c8:a8:86:e5:e5:91:28:54:3f: 0f:ed:b6:43:28:4d:3b:83:6f:9a:69:c3:2c:ae:99: 44:a6:de:04:03:85:eb:c1:fe:5a:e4:2d:5a:32:ae: ba:4d:a0:a8:89:83:8c:0e:93:3f:44:a9:ed:10:50: 1f:69:09:5d:eb:c7:75:64:7e:fa:fa:b7:f8:86:09: 30:ed:0b:88:de:35:b9:4c:de:04:82:a2:3d:31:d1: db:fd:40:b7:a8:57:71:f4:f3:a0:e0:44:2e:0e:ca: d6:76:96:68:d8:15:6c:01:9c:02:20:6e:50:f7:f1: 30:9b:27:81:44:d2:3c:86:24:ec:ce:03:85:c7:2e: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:6B:60:4C:2C:13:28:D2:3C:C3:77:3E:C5:40:EC:B6:B5:0B:9A X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3c:48:b9:48:16:12:a6:b2:d9:d1:5e:93:d7:95:16:27:05: 99:b7:a7:bb:f7:8d:70:fd:ae:de:71:fc:c8:bb:e3:8d:1c:e1: 9b:ee:fc:3f:c9:e8:f7:1c:0a:c3:94:fd:91:bd:f6:d8:82:8e: 31:ba:cd:c8:8d:1f:29:d8:8a:5b:b4:95:10:11:de:97:37:29: 90:24:4f:cf:b5:6d:4a:45:15:ab:03:2e:72:d6:30:d9:af:66: 8b:f1:59:a7:25:45:25:ea:b4:ad:2d:17:51:b1:dc:9d:f7:b2: 51:c7:2f:c5:6c:95:70:ad:fb:a3:97:18:ad:fb:2c:33:bd:3e: 07:17:35:6b:d2:1a:13:05:d0:25:62:12:74:f2:51:d8:90:7f: fe:b9:31:08:86:c8:ad:a9:8d:d9:90:b1:d2:93:9c:ef:66:63: 7f:6c:30:81:4c:c9:87:3c:18:a3:82:47:52:49:cf:f4:c3:be: c8:f8:be:d5:08:f6:32:16:0d:ea:ba:eb:c8:dc:d6:d6:6b:ad: b8:f6:fe:cb:08:69:c1:41:e3:78:b6:4b:72:da:96:35:01:e5: 82:be:69:6f:9d:79:6f:d7:0c:22:40:f7:b8:3d:3d:20:1b:cf: de:74:87:70:a6:24:24:58:da:63:11:bc:73:a1:07:26:60:71: 1c:c0:87:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUd0/um83+/Ot6Upwb8WjeqCksWwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTEyMTUyMjA3MTZaFw0yNTEyMTcwMTUzMTZaMDMxMTAvBgNV BAMTKEEzMUE2QjYwNEMyQzEzMjhEMjNDQzM3NzNFQzU0MEVDQjZCNTBCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyLPeM8+6SBWbWKfP3qNfV5ETM yghZRUBBM51ypszjldLw/3C3M/39wALLUa9YUby6k7IBxhVHmnW9E7HQeTe8lkyb iVIN2iZQ5BSjyWj5UYfMWcjnPyH0/kN0dNHmACqTh1UFsvSB0ZZCbJn5yAWyMkjd tCFhGlfi/urA9ciohuXlkShUPw/ttkMoTTuDb5ppwyyumUSm3gQDhevB/lrkLVoy rrpNoKiJg4wOkz9Eqe0QUB9pCV3rx3Vkfvr6t/iGCTDtC4jeNblM3gSCoj0x0dv9 QLeoV3H086DgRC4OytZ2lmjYFWwBnAIgblD38TCbJ4FE0jyGJOzOA4XHLqWlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoxprYEwsEyjSPMN3PsVA7La1C5owHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzxIuUgWEqay2dFek9eV FicFmbenu/eNcP2u3nH8yLvjjRzhm+78P8no9xwKw5T9kb322IKOMbrNyI0fKdiK W7SVEBHelzcpkCRPz7VtSkUVqwMuctYw2a9mi/FZpyVFJeq0rS0XUbHcnfeyUccv xWyVcK37o5cYrfssM70+Bxc1a9IaEwXQJWISdPJR2JB//rkxCIbIramN2ZCx0pOc 72Zjf2wwgUzJhzwYo4JHUknP9MO+yPi+1Qj2MhYN6rrryNzW1mutuPb+ywhpwUHj eLZLctqWNQHlgr5pb515b9cMIkD3uD09IBvP3nSHcKYkJFjaYxG8c6EHJmBxHMCH gQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:45:12 2025 by rpki-client