This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: L3CGqLE5nFHxExZo48bEjArL6y5Pg0A3TAVcWuSQr14= Subject key identifier: 06:72:46:DD:57:49:83:12:CA:0F:B0:F3:52:94:56:2D:28:B9:7F:AC Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 14596C82FDCF537D3161671024907BF22D093737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0366 Signing time: Sat 20 Dec 2025 10:02:34 +0000 Manifest this update: Sat 20 Dec 2025 09:57:34 +0000 Manifest next update: Sun 21 Dec 2025 13:29:34 +0000 Files and hashes: 1: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=) 2: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: 8zHGDKvaN4An8z4m+aD3P1W0X6J8BaoxWNiHsfr2WIw=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: og23dgtoYqERERjtAqH2h8sLSaLgr4DxdJzsOAsyNMg=) 5: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:59:6c:82:fd:cf:53:7d:31:61:67:10:24:90:7b:f2:2d:09:37:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Dec 20 09:57:34 2025 GMT Not After : Dec 21 13:29:34 2025 GMT Subject: CN=067246DD57498312CA0FB0F35294562D28B97FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:75:31:da:89:e2:b5:f0:ca:b7:51:b5:fd: 9d:11:27:7f:7b:c5:05:5c:90:3f:e1:1e:0e:9c:ec: eb:17:f0:d0:22:83:81:a1:23:3d:44:08:f3:a6:71: 6b:53:a0:68:81:e1:cb:79:96:53:48:42:87:5e:21: 0f:21:a5:f4:af:51:d0:3a:16:3e:00:16:9b:f8:3e: 14:0b:a5:ca:8c:8d:da:45:de:42:5a:3d:5a:b3:ea: 70:da:41:07:99:78:88:9b:25:a4:7b:d7:c9:76:06: b2:e3:55:f7:ee:8f:df:94:40:d5:ca:e3:35:70:ae: 0d:81:db:aa:10:3d:40:7d:98:b9:d1:95:d9:d8:a1: 44:80:3b:8d:0b:37:91:ad:e8:2e:b2:58:da:96:6c: be:b4:27:16:28:6c:c0:a7:af:28:fa:09:72:05:de: ec:39:7f:fc:96:78:03:74:4b:6d:4a:e7:7c:12:a5: 91:7f:e4:50:25:21:60:af:66:8e:1e:41:5c:48:77: 00:2a:ed:93:f1:d4:16:5f:9a:e7:93:aa:e4:13:10: f9:49:85:8d:0f:f8:2c:b1:04:f2:d1:67:4a:bc:c4: 8e:23:cc:83:aa:a3:b4:43:6f:d4:d6:89:6e:16:84: 26:88:39:67:72:fe:ed:d1:e2:8b:4e:62:98:9e:8c: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:46:DD:57:49:83:12:CA:0F:B0:F3:52:94:56:2D:28:B9:7F:AC X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:62:52:36:7a:eb:8a:3c:1b:32:b7:36:e6:88:15:75:4f: d8:14:b3:19:97:e3:83:58:66:4d:4e:ce:7c:64:51:45:e7:7a: fa:d3:e3:97:f5:83:01:cf:bd:e4:f8:48:cb:2a:ee:6c:77:d8: 12:a4:63:7d:d9:66:5f:6d:37:2d:ad:76:18:5b:ee:a5:bf:ef: 1b:a5:c5:9c:43:19:c1:96:8f:6b:57:a5:8f:2e:2b:a4:09:d7: f9:bb:7c:83:46:44:2c:87:29:99:14:c7:a3:08:21:7f:f4:97: 20:c4:13:ee:60:1f:a0:f4:e0:35:e3:1b:ef:21:40:b1:26:23: af:ef:32:49:89:91:b7:f1:a0:3b:74:76:9f:4b:fc:01:0c:c1: 09:39:16:a4:6f:f7:51:4c:82:49:c2:08:59:e9:d0:48:22:5b: a9:70:9d:f7:39:fc:9e:79:dd:23:04:48:cf:ed:15:5c:be:54: 3e:cc:00:fe:93:e3:03:7b:32:9e:a0:4f:24:02:2d:2d:aa:ee: 77:09:51:80:5b:fa:d4:bd:6f:a3:ae:eb:9f:7d:2b:5c:78:dd: 77:20:f2:53:d3:5a:63:c0:35:f9:ae:2b:9b:6d:cd:e1:9a:98: 12:f4:ef:c5:5a:9c:96:17:7f:1f:61:08:19:30:6b:e2:f6:99: 16:52:20:ca -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFFlsgv3PU30xYWcQJJB78i0JNzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNTEyMjAwOTU3MzRaFw0yNTEyMjExMzI5MzRaMDMxMTAvBgNV BAMTKDA2NzI0NkRENTc0OTgzMTJDQTBGQjBGMzUyOTQ1NjJEMjhCOTdGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmC3Ux2onitfDKt1G1/Z0RJ397 xQVckD/hHg6c7OsX8NAig4GhIz1ECPOmcWtToGiB4ct5llNIQodeIQ8hpfSvUdA6 Fj4AFpv4PhQLpcqMjdpF3kJaPVqz6nDaQQeZeIibJaR718l2BrLjVffuj9+UQNXK 4zVwrg2B26oQPUB9mLnRldnYoUSAO40LN5Gt6C6yWNqWbL60JxYobMCnryj6CXIF 3uw5f/yWeAN0S21K53wSpZF/5FAlIWCvZo4eQVxIdwAq7ZPx1BZfmueTquQTEPlJ hY0P+CyxBPLRZ0q8xI4jzIOqo7RDb9TWiW4WhCaIOWdy/u3R4otOYpiejCJVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBnJG3VdJgxLKD7DzUpRWLSi5f6wwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRNiUjZ664o8GzK3NuaI FXVP2BSzGZfjg1hmTU7OfGRRRed6+tPjl/WDAc+95PhIyyrubHfYEqRjfdlmX203 La12GFvupb/vG6XFnEMZwZaPa1eljy4rpAnX+bt8g0ZELIcpmRTHowghf/SXIMQT 7mAfoPTgNeMb7yFAsSYjr+8ySYmRt/GgO3R2n0v8AQzBCTkWpG/3UUyCScIIWenQ SCJbqXCd9zn8nnndIwRIz+0VXL5UPswA/pPjA3synqBPJAItLarudwlRgFv61L1v o67rn30rXHjddyDyU9NaY8A1+a4rm23N4ZqYEvTvxVqclhd/H2EIGTBr4vaZFlIg yg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:53:18 2025 by rpki-client