This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File: FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier: RjRYmF3USC2Hxp8ap5GxNJlHkvg/jBUBcnqJN7eoBQs=
Subject key identifier: 85:D9:70:60:41:C4:FA:E5:26:7F:A7:0F:65:5A:30:05:EE:15:BD:E7
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer: /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial: 20909FDB739D2EBCA07A29E94A0B056F3F59837C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number: 03AD
Signing time: Sat 20 Dec 2025 14:59:18 +0000
Manifest this update: Sat 20 Dec 2025 14:54:18 +0000
Manifest next update: Sun 21 Dec 2025 15:00:18 +0000
Files and hashes: 1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: tCGOJOYINaHwLvAJ8YAXyeiObiWYoyrj5M8iJb9Y/Mo=)
2: AS44817.asa (hash: TksAuZIALC6QJijLSEyaZHd5acOZblz7LjHZG52qDUI=)
3: AS216375.asa (hash: Is18bo2gvq7cfPyUjZtt2qFIiddFBmM/O7y3HvC32i0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:90:9f:db:73:9d:2e:bc:a0:7a:29:e9:4a:0b:05:6f:3f:59:83:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
Validity
Not Before: Dec 20 14:54:18 2025 GMT
Not After : Dec 21 15:00:18 2025 GMT
Subject: CN=85D9706041C4FAE5267FA70F655A3005EE15BDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:07:5f:a8:d6:37:13:da:82:86:33:02:8d:
7d:ba:53:38:15:c5:3b:4c:b9:30:34:92:1c:78:3b:
f7:68:a0:f0:71:47:3a:ad:c1:53:73:d8:80:92:b9:
98:52:49:1a:31:a5:a9:a8:aa:2e:69:97:19:01:49:
dd:f4:6f:03:87:ea:55:7a:c1:fa:af:4d:45:7e:2c:
aa:12:a7:76:c8:75:08:97:68:89:0e:28:75:ad:1e:
4e:14:f1:55:cb:38:74:42:4b:b4:e2:c3:a3:2d:fc:
34:98:c9:40:82:43:ef:ee:f2:5b:3b:1d:61:b3:33:
4f:28:a9:81:d3:7a:f5:5e:49:74:68:cd:1b:d1:9a:
bd:41:1f:b9:04:f4:0b:58:0a:48:41:8c:8d:f1:3d:
f4:d4:b2:48:77:58:91:71:c8:3b:b4:4f:0f:9a:b7:
ae:d4:03:ce:a3:96:3c:3f:ff:f5:2b:ca:72:d1:2d:
b4:f0:c1:3f:72:0d:64:29:63:c8:62:04:db:e5:13:
ee:de:e2:cc:16:fd:fd:67:06:d3:bb:1f:33:82:a0:
cf:b9:13:48:c3:df:c3:35:12:b5:46:a1:85:e1:76:
d2:0c:2e:4c:9e:36:43:06:01:28:06:18:32:2d:b7:
d9:51:eb:31:76:6c:fa:bf:01:49:0f:a3:43:1a:2f:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:70:60:41:C4:FA:E5:26:7F:A7:0F:65:5A:30:05:EE:15:BD:E7
X509v3 Authority Key Identifier:
keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:be:c7:ec:ac:a6:dd:0c:1a:d8:af:b8:95:3e:50:db:f2:
93:c2:6d:d6:f0:00:4f:7b:8a:b6:b4:63:a5:a8:17:91:17:06:
bb:ad:2d:a3:99:40:db:48:41:51:66:5e:b3:f1:11:0c:31:a8:
51:13:46:e1:8a:97:dc:6c:b1:e1:86:da:d3:ac:6e:92:01:3a:
94:3e:93:1e:6c:70:62:9e:75:37:88:0e:25:47:a4:9d:23:21:
f8:0c:01:2d:e6:5d:87:a8:5e:3a:f7:55:f1:e2:a4:f0:96:d8:
20:af:43:f0:fe:a5:43:c5:a0:b7:03:57:15:33:56:a9:d2:1f:
2e:aa:7f:64:c3:d7:3f:eb:09:29:2e:c4:f6:34:18:ad:cd:10:
ce:a6:3b:6b:24:f6:22:f2:fd:ab:33:67:b8:b0:e5:7f:13:20:
25:95:5d:4a:54:e9:a5:12:0e:71:6a:06:95:9e:f5:42:48:da:
92:06:1a:30:80:46:d4:27:e6:31:9d:57:32:3a:3b:1a:69:a6:
0c:57:1e:0f:0a:68:c0:ba:39:ec:f4:33:a5:ba:de:84:f7:dd:
95:20:14:d6:c2:db:44:ff:a7:dc:34:38:e8:40:c1:9a:ed:21:
c6:3a:ee:4a:44:f0:5c:38:89:66:ab:c6:ba:c2:e0:86:e0:15:
54:c5:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:20:21 2025 by rpki-client