This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: GeXiBbomZRt9azeLVKpVaAQMJj0y2JCLFeG0UsPBqus= Subject key identifier: 01:08:3E:60:90:7C:54:FE:5E:00:07:DE:A0:AE:F9:54:99:A5:64:1C Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6239C1DC8F54BD9F6705ECF479B3CAD4DFF60753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0453 Signing time: Mon 02 Feb 2026 18:27:14 +0000 Manifest this update: Mon 02 Feb 2026 18:22:14 +0000 Manifest next update: Tue 03 Feb 2026 18:53:14 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: UH+ZIVSrgUKX+pC06Coux7sndNdsBPe4ToVTJTt7woM=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:39:c1:dc:8f:54:bd:9f:67:05:ec:f4:79:b3:ca:d4:df:f6:07:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Feb 2 18:22:14 2026 GMT Not After : Feb 3 18:53:14 2026 GMT Subject: CN=01083E60907C54FE5E0007DEA0AEF95499A5641C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:b9:e3:cc:18:c8:20:78:77:95:b4:42:54: 6e:bb:02:74:ea:27:b9:08:06:5c:29:a6:50:0d:ce: 79:93:8f:1d:92:a0:79:9a:8b:96:1b:28:7a:52:0b: 09:31:56:ca:05:96:41:73:11:72:b5:ac:91:37:79: 7d:1a:be:7d:48:c2:d8:21:60:20:46:78:5d:2d:e0: 74:ec:9c:6a:96:5a:16:19:f3:58:d8:3f:dc:44:21: d4:48:48:4d:31:83:42:49:c4:63:23:e4:82:51:99: 45:67:4b:92:92:e9:df:a6:7e:c0:1f:55:fc:8c:03: ab:d7:ae:2f:b6:d6:56:6f:99:98:62:59:79:27:11: 78:20:c4:f9:99:ad:85:87:c0:4b:7a:14:3a:5a:58: 81:b9:49:8c:1d:04:66:d9:75:30:81:96:92:f8:31: f3:df:a6:ca:44:21:07:ac:b2:a7:10:04:ca:75:1d: ca:b7:43:78:89:54:0c:7b:63:c5:9b:3b:85:2f:ef: 3e:30:dc:6c:49:fd:78:37:de:0f:0d:81:74:2b:2e: 8b:e6:b9:8b:91:4b:0b:5f:07:79:a8:1b:de:83:94: ac:c4:16:b9:bc:23:b0:33:8a:f4:4b:96:c3:0c:dc: 7a:88:bb:fc:b2:fd:36:5b:34:d9:72:bb:56:77:d7: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:08:3E:60:90:7C:54:FE:5E:00:07:DE:A0:AE:F9:54:99:A5:64:1C X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:50:35:69:a8:c5:dc:2f:49:22:68:6b:12:44:05:c3:28:2b: 97:13:46:6f:60:03:44:96:51:08:8c:56:0a:5c:2f:ea:69:97: 28:90:06:a1:98:b9:49:e4:bf:41:ba:61:9e:09:22:49:f3:be: 7e:2b:8d:76:7c:4b:1b:94:58:0e:8e:53:5a:f2:97:44:a1:5f: 14:3d:f2:94:99:ed:aa:f1:29:f0:16:2a:30:12:2d:51:43:31: 27:18:36:a8:fb:c7:d8:39:79:8f:5f:9b:ed:11:12:84:fd:f1: e0:4d:6c:da:60:29:6a:73:f3:68:fe:5e:f2:68:2a:25:3c:9a: a3:b6:51:a0:65:85:c6:b1:ac:60:c8:8b:5b:a0:9d:0d:ca:c0: d4:49:e1:e9:13:e0:bf:f6:b1:a9:5b:60:31:e4:55:4c:66:e3: b1:2e:22:42:ac:d6:68:2a:51:28:e3:01:2d:01:41:7b:08:4c: 02:02:4d:83:ef:19:90:07:bd:7a:99:8f:c9:6a:31:f5:32:53: 0e:4a:5b:6a:56:87:e9:55:18:c7:9e:cf:e2:f8:b1:1b:25:b2: 0e:89:1b:26:64:7a:8b:c8:40:1d:d1:ac:33:21:ec:00:e6:11: dc:81:1f:92:2f:32:6b:ef:57:a3:e0:18:75:75:21:35:fb:9d: a8:01:e2:7f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYjnB3I9UvZ9nBez0ebPK1N/2B1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAyMDIxODIyMTRaFw0yNjAyMDMxODUzMTRaMDMxMTAvBgNV BAMTKDAxMDgzRTYwOTA3QzU0RkU1RTAwMDdERUEwQUVGOTU0OTlBNTY0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCag7njzBjIIHh3lbRCVG67AnTq J7kIBlwpplANznmTjx2SoHmai5YbKHpSCwkxVsoFlkFzEXK1rJE3eX0avn1Iwtgh YCBGeF0t4HTsnGqWWhYZ81jYP9xEIdRISE0xg0JJxGMj5IJRmUVnS5KS6d+mfsAf VfyMA6vXri+21lZvmZhiWXknEXggxPmZrYWHwEt6FDpaWIG5SYwdBGbZdTCBlpL4 MfPfpspEIQessqcQBMp1Hcq3Q3iJVAx7Y8WbO4Uv7z4w3GxJ/Xg33g8NgXQrLovm uYuRSwtfB3moG96DlKzEFrm8I7AzivRLlsMM3HqIu/yy/TZbNNlyu1Z31/HVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAQg+YJB8VP5eAAfeoK75VJmlZBwwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFA1aajF3C9JImhrEkQF wygrlxNGb2ADRJZRCIxWClwv6mmXKJAGoZi5SeS/QbphngkiSfO+fiuNdnxLG5RY Do5TWvKXRKFfFD3ylJntqvEp8BYqMBItUUMxJxg2qPvH2Dl5j1+b7REShP3x4E1s 2mApanPzaP5e8mgqJTyao7ZRoGWFxrGsYMiLW6CdDcrA1Enh6RPgv/axqVtgMeRV TGbjsS4iQqzWaCpRKOMBLQFBewhMAgJNg+8ZkAe9epmPyWox9TJTDkpbalaH6VUY x57P4vixGyWyDokbJmR6i8hAHdGsMyHsAOYR3IEfki8ya+9Xo+AYdXUhNfudqAHi fw== -----END CERTIFICATE-----Generated at Tue Feb 3 00:33:11 2026 by rpki-client