This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft File: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json) Hash identifier: fdtBvTRoes20c2gIKu5P+WT5s+H2GY8a5gyoIrwXhzE= Subject key identifier: 70:BA:24:41:81:50:C1:63:B7:2E:B4:D8:09:A9:6C:D0:3F:57:6E:8D Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 Certificate issuer: /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Certificate serial: 4941C464986990254EE2713167BDEEA3EF3D0A97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft Manifest number: 4D Signing time: Sat 20 Dec 2025 00:40:17 +0000 Manifest this update: Sat 20 Dec 2025 00:35:17 +0000 Manifest next update: Sun 21 Dec 2025 00:44:17 +0000 Files and hashes: 1: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (hash: nGLAdkRiCVIQwTrXrRH2GZTJEYm4l5K5Qg4h/njNDzU=) 2: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: Qkh0VHzipA2I95HmoIvZn7VeTPWY6nKq4TCHIdcxGco=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:41:c4:64:98:69:90:25:4e:e2:71:31:67:bd:ee:a3:ef:3d:0a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05 Validity Not Before: Dec 20 00:35:17 2025 GMT Not After : Dec 21 00:44:17 2025 GMT Subject: CN=70BA24418150C163B72EB4D809A96CD03F576E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:b5:46:84:36:59:86:82:15:29:85:8f:b4: 3b:71:a8:2e:6a:fa:d5:58:30:9a:e2:3e:9d:40:c9: f4:f7:2d:1e:57:15:67:3b:b8:ae:91:05:7a:99:d0: f1:bf:70:41:7b:8a:98:4c:bc:dd:7d:c1:e9:1e:d6: c6:5d:8a:30:1b:0a:ba:28:17:19:ef:67:58:d3:11: 41:b1:b0:dc:b2:08:23:1a:b9:2a:4f:3b:d2:69:25: 02:15:8b:52:1b:b3:b6:80:28:d7:c8:89:24:21:22: f5:76:f8:51:4e:11:4a:32:b1:4e:ba:3b:c4:02:c8: 13:1c:6d:b0:fb:35:b3:a2:65:30:00:70:b0:77:67: 19:cf:d6:5a:40:cb:c7:46:72:51:1b:2e:b3:c6:87: 4d:66:19:e5:6b:60:40:48:f1:dc:f9:a9:22:61:d6: 8a:4f:48:a8:93:51:ae:e1:76:a7:c8:a3:90:79:45: 30:fd:46:5c:4e:87:d0:6f:d6:fa:8f:bb:29:7b:4e: 91:8b:3b:59:56:f9:15:4a:51:d6:59:3c:31:76:1a: eb:43:2f:79:ad:83:dd:ca:8c:da:d1:bd:c8:e9:4a: 5c:4e:3f:b8:48:13:5c:29:d6:c6:ef:e0:fb:87:c7: e2:6e:fb:b1:a8:3b:71:95:57:be:9c:32:91:48:00: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:24:41:81:50:C1:63:B7:2E:B4:D8:09:A9:6C:D0:3F:57:6E:8D X509v3 Authority Key Identifier: keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:2f:64:ca:71:92:28:cb:e1:7e:ec:f3:28:6a:de:2d:8f:f3: 94:59:2e:18:95:c9:55:ef:9e:b3:8b:f6:a0:3c:24:9d:40:d0: ad:12:61:7f:84:6c:03:33:51:ce:3a:6c:16:30:1e:f3:2b:04: 5e:48:7b:91:7a:95:58:74:48:80:ce:04:bc:ef:98:4d:95:8c: c1:9c:db:80:2b:4a:1a:1e:0d:2c:d4:e7:eb:23:c0:b2:08:01: b1:56:1d:fc:f8:4e:5e:64:1d:d1:9c:17:85:67:be:e1:6e:71: 43:81:61:d1:0d:de:ec:b1:d2:29:7b:a9:94:81:ba:aa:fc:3a: a4:34:06:0f:6e:93:22:eb:5b:28:6f:2e:c8:30:7c:04:50:d0: 6d:61:26:35:ac:3a:0e:7f:58:19:1f:4e:30:95:80:44:f0:79: e7:2b:8e:a8:20:02:5b:68:35:05:79:4a:26:c1:57:0c:3a:e5: e6:39:c3:49:68:5e:53:e5:3a:59:16:5c:55:87:d3:ec:b0:40: 6e:db:cb:c9:61:3d:af:6f:d3:05:bb:e5:8d:76:59:35:9a:0d: c8:cc:b7:dc:8f:c2:c5:05:f7:77:5b:94:56:0f:29:5c:79:ca: 72:a8:73:19:87:75:f6:dd:ff:e2:82:e3:4d:bf:32:da:52:9b: dc:9c:df:d1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSUHEZJhpkCVO4nExZ73uo+89CpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQw QjhDREUwNTAeFw0yNTEyMjAwMDM1MTdaFw0yNTEyMjEwMDQ0MTdaMDMxMTAvBgNV BAMTKDcwQkEyNDQxODE1MEMxNjNCNzJFQjREODA5QTk2Q0QwM0Y1NzZFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4bVGhDZZhoIVKYWPtDtxqC5q +tVYMJriPp1AyfT3LR5XFWc7uK6RBXqZ0PG/cEF7iphMvN19weke1sZdijAbCroo FxnvZ1jTEUGxsNyyCCMauSpPO9JpJQIVi1Ibs7aAKNfIiSQhIvV2+FFOEUoysU66 O8QCyBMcbbD7NbOiZTAAcLB3ZxnP1lpAy8dGclEbLrPGh01mGeVrYEBI8dz5qSJh 1opPSKiTUa7hdqfIo5B5RTD9RlxOh9Bv1vqPuyl7TpGLO1lW+RVKUdZZPDF2GutD L3mtg93KjNrRvcjpSlxOP7hIE1wp1sbv4PuHx+Ju+7GoO3GVV76cMpFIAG7zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcLokQYFQwWO3LrTYCals0D9Xbo0wHwYDVR0j BBgwFoAUZNYpqjzzj593Ctu7IMbevQuM3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzIvNjRENjI5QUEzQ0YzOEY5Rjc3MEFEQkJCMjBDNkRFQkQwQjhDREUwNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS82NEQ2MjlBQTNDRjM4RjlGNzcwQURCQkIy MEM2REVCRDBCOENERTA1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y1MzJiOWViLTJmYWUtNDhhOC05NzkzLTMzZWVjMDY3Y2UzOS8yLzY0RDYyOUFB M0NGMzhGOUY3NzBBREJCQjIwQzZERUJEMEI4Q0RFMDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDAL2TK cZIoy+F+7PMoat4tj/OUWS4YlclV756zi/agPCSdQNCtEmF/hGwDM1HOOmwWMB7z KwReSHuRepVYdEiAzgS875hNlYzBnNuAK0oaHg0s1OfrI8CyCAGxVh38+E5eZB3R nBeFZ77hbnFDgWHRDd7ssdIpe6mUgbqq/DqkNAYPbpMi61soby7IMHwEUNBtYSY1 rDoOf1gZH04wlYBE8HnnK46oIAJbaDUFeUomwVcMOuXmOcNJaF5T5TpZFlxVh9Ps sEBu28vJYT2vb9MFu+WNdlk1mg3IzLfcj8LFBfd3W5RWDylcecpyqHMZh3X23f/i guNNvzLaUpvcnN/R -----END CERTIFICATE-----Generated at Sat Dec 20 11:01:48 2025 by rpki-client