This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: GeXPfppm5yBskWlpNByJRmBX8UUJUztUQpZZh5wDQjw= Subject key identifier: 18:B6:EF:4C:02:6F:7B:DD:1C:55:34:3D:E8:47:79:99:8D:C7:45:31 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 0D3CA3F7BC5925502AF0B3047A2931989176CFF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0197 Signing time: Thu 18 Dec 2025 19:22:33 +0000 Manifest this update: Thu 18 Dec 2025 19:17:33 +0000 Manifest next update: Fri 19 Dec 2025 21:40:33 +0000 Files and hashes: 1: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: OAue9O5REGZYsIQpOcNV2rpMtqcmwquEihLBcSd/Krc=) 2: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 3: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 4: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=) 5: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 6: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 7: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 8: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 9: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 10: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 11: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=) 12: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 13: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=) 14: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 15: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 16: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) 17: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=) 18: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 19: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 20: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=) 21: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 22: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 23: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 24: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 25: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 26: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 27: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=) 28: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3c:a3:f7:bc:59:25:50:2a:f0:b3:04:7a:29:31:98:91:76:cf:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Dec 18 19:17:33 2025 GMT Not After : Dec 19 21:40:33 2025 GMT Subject: CN=18B6EF4C026F7BDD1C55343DE84779998DC74531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:a9:64:a0:fe:00:f2:6d:b7:8f:c1:3c:ac: ab:c1:c1:f5:03:cd:09:5e:ba:22:82:2b:a4:a9:07: 40:50:fb:97:2c:fa:fb:e5:38:07:55:08:6b:83:3c: 51:47:5e:8c:5f:0d:17:62:ba:ab:a1:76:ba:e9:50: cc:52:68:02:c2:71:e3:ce:4a:d8:2f:42:d5:3f:28: 29:92:37:2c:e6:6f:2f:24:31:53:d5:2e:04:13:b9: 24:02:89:56:20:88:38:62:06:bc:07:7a:9e:be:39: f9:09:c7:4c:08:9d:fd:11:b3:2b:f8:e8:ec:cb:a0: 2c:12:0d:80:f8:57:99:de:2e:25:2b:13:90:b9:56: fd:fe:bc:aa:24:75:38:29:2c:98:77:4a:98:5d:e4: 0a:72:e6:02:b4:ab:49:a0:6d:ea:bc:bb:4a:96:d9: 83:ed:3f:93:1d:c1:3a:6a:f1:f9:21:d8:42:3e:1a: ea:c3:99:ce:55:38:b0:72:bc:6c:51:53:3e:cd:dd: ce:b7:cd:0d:5d:c9:1a:c9:16:31:aa:58:d1:4b:79: c7:db:99:87:18:49:17:ab:c9:57:8b:d5:21:c5:09: 62:22:32:e5:33:e7:98:12:04:c7:4a:4c:db:73:d3: 86:9d:61:47:4f:71:3c:7f:a3:ba:3d:d6:b0:16:d3: 9d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B6:EF:4C:02:6F:7B:DD:1C:55:34:3D:E8:47:79:99:8D:C7:45:31 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:99:f8:d3:ca:66:11:04:92:78:60:50:d5:fa:68:9a:7c:44: a2:a9:97:c4:72:40:47:21:f1:98:35:c1:59:4b:00:6b:34:32: 20:ed:05:42:67:77:e1:11:4a:d0:0b:fa:3a:aa:1f:cf:5e:53: b5:bc:42:72:15:17:f3:52:24:03:7e:ad:ca:bb:37:81:ad:0b: 2b:ab:38:d8:fb:7a:65:85:de:fd:23:c0:1c:03:4c:af:b2:fc: d3:60:a4:f1:b9:43:d8:fd:c9:d7:3e:1c:b6:14:5b:4e:d7:09: 8c:32:72:1d:2a:43:75:36:52:10:74:a6:23:f2:cd:3f:76:9e: 34:4e:e6:74:38:6b:91:99:16:ab:45:fd:2e:bf:89:37:63:ef: 4a:2c:6e:f9:f0:45:ef:8a:b4:4d:76:0a:24:66:2f:17:4d:65: ae:8d:ab:4b:0b:a1:51:37:52:fb:9f:26:40:22:fe:e8:cb:e4: 98:3e:fa:46:fc:9c:60:fa:c2:63:39:0c:ac:e6:a7:3c:b8:47: cd:07:68:db:ef:7e:c1:66:a7:9e:f8:86:12:88:37:48:90:28: 79:c5:08:bd:99:f3:f0:c4:66:d8:a7:34:88:0b:aa:cf:9f:38: 40:20:60:31:24:5b:64:82:bf:75:46:19:b5:63:29:a3:3f:bc: 8e:84:85:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDTyj97xZJVAq8LMEeikxmJF2z/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTEyMTgxOTE3MzNaFw0yNTEyMTkyMTQwMzNaMDMxMTAvBgNV BAMTKDE4QjZFRjRDMDI2RjdCREQxQzU1MzQzREU4NDc3OTk5OERDNzQ1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvc6lkoP4A8m23j8E8rKvBwfUD zQleuiKCK6SpB0BQ+5cs+vvlOAdVCGuDPFFHXoxfDRdiuquhdrrpUMxSaALCcePO StgvQtU/KCmSNyzmby8kMVPVLgQTuSQCiVYgiDhiBrwHep6+OfkJx0wInf0Rsyv4 6OzLoCwSDYD4V5neLiUrE5C5Vv3+vKokdTgpLJh3Sphd5Apy5gK0q0mgbeq8u0qW 2YPtP5MdwTpq8fkh2EI+GurDmc5VOLByvGxRUz7N3c63zQ1dyRrJFjGqWNFLecfb mYcYSReryVeL1SHFCWIiMuUz55gSBMdKTNtz04adYUdPcTx/o7o91rAW051tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGLbvTAJve90cVTQ96Ed5mY3HRTEwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpn408pmEQSSeGBQ1fpo mnxEoqmXxHJARyHxmDXBWUsAazQyIO0FQmd34RFK0Av6Oqofz15TtbxCchUX81Ik A36tyrs3ga0LK6s42Pt6ZYXe/SPAHANMr7L802Ck8blD2P3J1z4cthRbTtcJjDJy HSpDdTZSEHSmI/LNP3aeNE7mdDhrkZkWq0X9Lr+JN2PvSixu+fBF74q0TXYKJGYv F01lro2rSwuhUTdS+58mQCL+6MvkmD76RvycYPrCYzkMrOanPLhHzQdo2+9+wWan nviGEog3SJAoecUIvZnz8MRm2Kc0iAuqz584QCBgMSRbZIK/dUYZtWMpoz+8joSF 1g== -----END CERTIFICATE-----Generated at Fri Dec 19 09:32:35 2025 by rpki-client