This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Ycfo2DriCSuHCSOSuu4tD2IIanqABea2ovFi8hcEzWs= Subject key identifier: BA:37:11:DE:ED:C8:4A:9B:99:17:80:AF:FB:3A:93:BB:96:6F:01:43 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 61BA17FC0193EBB275B41F0B593611075C32F2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0413 Signing time: Tue 16 Dec 2025 19:52:45 +0000 Manifest this update: Tue 16 Dec 2025 19:47:45 +0000 Manifest next update: Wed 17 Dec 2025 21:41:45 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: pL9sqenqPkMTxiZ5MWQdmPBlsul2ILrptTmzNicqCDQ=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ba:17:fc:01:93:eb:b2:75:b4:1f:0b:59:36:11:07:5c:32:f2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 16 19:47:45 2025 GMT Not After : Dec 17 21:41:45 2025 GMT Subject: CN=BA3711DEEDC84A9B991780AFFB3A93BB966F0143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:7c:94:9e:dd:27:e8:20:aa:b8:e8:3a:5b: 78:9b:e2:6f:6c:13:9d:c1:6a:01:58:b3:78:e9:cd: 7f:a6:fc:23:b4:e5:37:26:b3:70:00:d1:84:eb:5c: 71:6f:0a:a6:76:ce:61:27:a1:da:ce:45:c1:81:f9: 79:cb:77:35:b3:36:8e:e5:9b:1a:bd:85:05:1a:b3: dd:73:ea:9a:27:51:50:52:95:7e:c2:4e:97:29:8e: c9:74:f3:ea:73:33:15:73:f4:0f:3e:a5:04:53:c3: 5d:db:1c:c6:fd:7c:56:f3:ba:94:8d:c1:a2:37:e8: 8d:f0:b8:4b:98:0e:83:0d:93:ce:45:fd:90:5c:7b: 21:ef:08:35:9a:6d:0e:bc:71:1a:7d:af:97:75:07: 35:a5:2e:2e:22:09:3c:7b:b0:00:34:f5:1f:ff:1c: ad:ba:b4:98:d9:9e:17:99:91:d3:ac:2f:17:8e:da: 97:7b:d9:fa:4b:be:be:67:99:22:23:b6:2f:5f:74: 98:ce:ba:14:5b:e5:8a:a6:a1:7d:bc:1e:c0:eb:1c: e9:ad:e8:a9:2f:25:dd:ef:f6:74:5f:11:80:26:18: d5:25:88:01:8f:04:ad:ec:35:c9:c5:23:16:38:10: f9:5c:dd:22:c9:32:c2:ae:3d:68:bb:73:49:9d:99: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:11:DE:ED:C8:4A:9B:99:17:80:AF:FB:3A:93:BB:96:6F:01:43 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e4:63:ec:50:a0:99:03:ea:5e:d0:98:29:83:f5:1b:6a:b9: 54:8f:a4:82:94:da:51:da:2b:36:59:0b:c4:e3:f7:cf:c5:cc: d2:1e:92:d7:ae:4b:f9:8e:d1:94:9f:28:f1:13:2a:9a:50:8a: 9a:d2:28:02:b6:96:ed:ec:db:0a:ed:5d:f2:12:58:8f:f4:a6: 5c:29:40:2b:5a:6a:9f:5e:6f:e5:41:3e:9b:c3:e5:f6:e1:ad: 30:43:4c:d7:0c:96:f0:36:59:1e:35:22:7b:ea:6f:55:ac:46: a5:5d:eb:4d:a9:fd:93:8e:19:d3:1d:ed:56:6b:40:9b:07:21: 42:40:b6:6c:fb:78:08:fa:cb:97:20:a7:65:0c:fa:d8:da:21: 0f:fc:f1:5a:49:e4:0e:8b:59:a6:c9:90:b1:c7:c7:06:be:03: 62:77:5a:f0:c0:b8:15:44:06:78:75:ee:ac:14:57:7f:dd:93: a2:22:b9:f0:d0:b5:f8:ff:1c:ab:1e:4a:c1:74:72:84:18:39: d3:d6:a5:17:af:f0:13:ab:ad:b5:22:26:73:e2:20:4b:75:65: 8d:d2:5f:c0:69:6c:e9:d6:0c:28:3c:af:2d:b4:fa:79:5c:f7: bc:aa:9d:5c:a4:c6:0f:77:29:8e:0c:b0:a9:e1:8e:ea:8c:0b: 93:16:fb:a5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYboX/AGT67J1tB8LWTYRB1wy8rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTYxOTQ3NDVaFw0yNTEyMTcyMTQxNDVaMDMxMTAvBgNV BAMTKEJBMzcxMURFRURDODRBOUI5OTE3ODBBRkZCM0E5M0JCOTY2RjAxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVHyUnt0n6CCquOg6W3ib4m9s E53BagFYs3jpzX+m/CO05Tcms3AA0YTrXHFvCqZ2zmEnodrORcGB+XnLdzWzNo7l mxq9hQUas91z6ponUVBSlX7CTpcpjsl08+pzMxVz9A8+pQRTw13bHMb9fFbzupSN waI36I3wuEuYDoMNk85F/ZBceyHvCDWabQ68cRp9r5d1BzWlLi4iCTx7sAA09R// HK26tJjZnheZkdOsLxeO2pd72fpLvr5nmSIjti9fdJjOuhRb5YqmoX28HsDrHOmt 6KkvJd3v9nRfEYAmGNUliAGPBK3sNcnFIxY4EPlc3SLJMsKuPWi7c0mdmbLJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUujcR3u3ISpuZF4Cv+zqTu5ZvAUMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkORj7FCgmQPqXtCYKYP1 G2q5VI+kgpTaUdorNlkLxOP3z8XM0h6S165L+Y7RlJ8o8RMqmlCKmtIoAraW7ezb Cu1d8hJYj/SmXClAK1pqn15v5UE+m8Pl9uGtMENM1wyW8DZZHjUie+pvVaxGpV3r Tan9k44Z0x3tVmtAmwchQkC2bPt4CPrLlyCnZQz62NohD/zxWknkDotZpsmQscfH Br4DYnda8MC4FUQGeHXurBRXf92ToiK58NC1+P8cqx5KwXRyhBg509alF6/wE6ut tSImc+IgS3VljdJfwGls6dYMKDyvLbT6eVz3vKqdXKTGD3cpjgywqeGO6owLkxb7 pQ== -----END CERTIFICATE-----Generated at Wed Dec 17 01:00:49 2025 by rpki-client