This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          RjRYmF3USC2Hxp8ap5GxNJlHkvg/jBUBcnqJN7eoBQs=
Subject key identifier:   85:D9:70:60:41:C4:FA:E5:26:7F:A7:0F:65:5A:30:05:EE:15:BD:E7
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       20909FDB739D2EBCA07A29E94A0B056F3F59837C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          03AD
Signing time:             Sat 20 Dec 2025 14:59:18 +0000
Manifest this update:     Sat 20 Dec 2025 14:54:18 +0000
Manifest next update:     Sun 21 Dec 2025 15:00:18 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: tCGOJOYINaHwLvAJ8YAXyeiObiWYoyrj5M8iJb9Y/Mo=)
                          2: AS44817.asa (hash: TksAuZIALC6QJijLSEyaZHd5acOZblz7LjHZG52qDUI=)
                          3: AS216375.asa (hash: Is18bo2gvq7cfPyUjZtt2qFIiddFBmM/O7y3HvC32i0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:9f:db:73:9d:2e:bc:a0:7a:29:e9:4a:0b:05:6f:3f:59:83:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Dec 20 14:54:18 2025 GMT
            Not After : Dec 21 15:00:18 2025 GMT
        Subject: CN=85D9706041C4FAE5267FA70F655A3005EE15BDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:07:5f:a8:d6:37:13:da:82:86:33:02:8d:
                    7d:ba:53:38:15:c5:3b:4c:b9:30:34:92:1c:78:3b:
                    f7:68:a0:f0:71:47:3a:ad:c1:53:73:d8:80:92:b9:
                    98:52:49:1a:31:a5:a9:a8:aa:2e:69:97:19:01:49:
                    dd:f4:6f:03:87:ea:55:7a:c1:fa:af:4d:45:7e:2c:
                    aa:12:a7:76:c8:75:08:97:68:89:0e:28:75:ad:1e:
                    4e:14:f1:55:cb:38:74:42:4b:b4:e2:c3:a3:2d:fc:
                    34:98:c9:40:82:43:ef:ee:f2:5b:3b:1d:61:b3:33:
                    4f:28:a9:81:d3:7a:f5:5e:49:74:68:cd:1b:d1:9a:
                    bd:41:1f:b9:04:f4:0b:58:0a:48:41:8c:8d:f1:3d:
                    f4:d4:b2:48:77:58:91:71:c8:3b:b4:4f:0f:9a:b7:
                    ae:d4:03:ce:a3:96:3c:3f:ff:f5:2b:ca:72:d1:2d:
                    b4:f0:c1:3f:72:0d:64:29:63:c8:62:04:db:e5:13:
                    ee:de:e2:cc:16:fd:fd:67:06:d3:bb:1f:33:82:a0:
                    cf:b9:13:48:c3:df:c3:35:12:b5:46:a1:85:e1:76:
                    d2:0c:2e:4c:9e:36:43:06:01:28:06:18:32:2d:b7:
                    d9:51:eb:31:76:6c:fa:bf:01:49:0f:a3:43:1a:2f:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D9:70:60:41:C4:FA:E5:26:7F:A7:0F:65:5A:30:05:EE:15:BD:E7
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:be:c7:ec:ac:a6:dd:0c:1a:d8:af:b8:95:3e:50:db:f2:
         93:c2:6d:d6:f0:00:4f:7b:8a:b6:b4:63:a5:a8:17:91:17:06:
         bb:ad:2d:a3:99:40:db:48:41:51:66:5e:b3:f1:11:0c:31:a8:
         51:13:46:e1:8a:97:dc:6c:b1:e1:86:da:d3:ac:6e:92:01:3a:
         94:3e:93:1e:6c:70:62:9e:75:37:88:0e:25:47:a4:9d:23:21:
         f8:0c:01:2d:e6:5d:87:a8:5e:3a:f7:55:f1:e2:a4:f0:96:d8:
         20:af:43:f0:fe:a5:43:c5:a0:b7:03:57:15:33:56:a9:d2:1f:
         2e:aa:7f:64:c3:d7:3f:eb:09:29:2e:c4:f6:34:18:ad:cd:10:
         ce:a6:3b:6b:24:f6:22:f2:fd:ab:33:67:b8:b0:e5:7f:13:20:
         25:95:5d:4a:54:e9:a5:12:0e:71:6a:06:95:9e:f5:42:48:da:
         92:06:1a:30:80:46:d4:27:e6:31:9d:57:32:3a:3b:1a:69:a6:
         0c:57:1e:0f:0a:68:c0:ba:39:ec:f4:33:a5:ba:de:84:f7:dd:
         95:20:14:d6:c2:db:44:ff:a7:dc:34:38:e8:40:c1:9a:ed:21:
         c6:3a:ee:4a:44:f0:5c:38:89:66:ab:c6:ba:c2:e0:86:e0:15:
         54:c5:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:20:21 2025 by rpki-client