This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: sSPlaKMP4vQCa0rCYABoSie06fht9UjwB4KQKbcGm+o= Subject key identifier: 31:A3:11:B0:D6:D5:A0:7F:68:54:85:84:1A:A2:7B:F9:11:7A:C9:75 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0BFDD7018D7DA60F5361FE864A3ACC00FA36638C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0421 Signing time: Sat 27 Dec 2025 11:08:42 +0000 Manifest this update: Sat 27 Dec 2025 11:03:42 +0000 Manifest next update: Sun 28 Dec 2025 12:13:42 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: lXYAgrEZzBPwBgGl6T1MOKFMh1EQtgL/o/6tuqPOpGQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fd:d7:01:8d:7d:a6:0f:53:61:fe:86:4a:3a:cc:00:fa:36:63:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 27 11:03:42 2025 GMT Not After : Dec 28 12:13:42 2025 GMT Subject: CN=31A311B0D6D5A07F685485841AA27BF9117AC975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:17:de:fe:0e:1f:bf:f2:cd:4a:87:9b:b6: ae:28:ce:56:a2:cf:86:53:cd:b8:6b:93:3a:e2:3f: 3b:ea:70:36:48:33:b1:98:c8:01:47:15:7c:89:b8: 73:49:df:6a:3d:c4:57:42:ff:74:e3:78:29:bf:c7: 19:93:3d:dd:73:9b:a4:9e:f9:9c:38:29:25:31:1d: c7:c2:f2:ed:39:7e:75:b0:62:c8:3a:97:2c:4d:8f: 0e:e7:0d:e6:a8:5e:fe:5f:82:d8:6b:0b:aa:be:21: 45:09:1c:52:00:2e:1a:c4:8f:7f:11:fa:27:0b:97: cc:4a:fc:40:3d:a2:f9:c3:9d:08:d1:01:28:6d:a9: ca:10:92:4a:e1:8a:0b:7f:ed:d7:72:c8:1f:7b:b2: 86:ee:ce:f4:53:0f:b0:03:3b:cf:6d:4a:a9:f5:bb: 6d:e9:02:66:51:b7:47:95:b7:9a:38:ad:d4:cb:b7: 15:d4:e6:fc:4f:04:78:49:08:73:35:a4:ad:f2:ec: ce:95:9d:8d:a8:44:9d:88:5e:f7:48:59:44:c4:3d: b4:0b:f9:63:83:4c:85:75:28:f2:22:91:46:61:84: 3d:2b:24:09:7b:54:8d:69:0b:9b:8b:eb:5c:aa:89: ed:1b:03:72:0c:7f:2a:9d:ab:4b:1b:14:7c:11:c7: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:11:B0:D6:D5:A0:7F:68:54:85:84:1A:A2:7B:F9:11:7A:C9:75 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:89:27:1c:60:e6:c2:08:11:2a:94:e6:cd:16:7e:55:d8:d2: ab:fa:9e:90:5e:32:24:fc:e1:4a:74:25:0f:83:a0:0f:6d:b1: 91:e5:52:ae:72:8c:3d:18:73:92:7b:70:16:8d:7d:83:03:aa: 5f:73:17:d5:25:18:ff:fe:c3:fb:f1:73:8d:bf:73:7c:2c:6e: 11:6b:5c:91:b7:e8:42:a6:ab:cd:9d:97:38:37:72:ed:54:52: 74:2e:48:5c:b0:83:57:ee:d5:7f:f7:a1:d7:5b:f2:d9:96:f4: 8e:9c:e2:99:20:4f:95:cd:58:0e:83:8a:6f:a5:76:74:43:92: ce:2e:be:74:19:26:fe:08:fa:e8:df:a4:2c:e2:76:ab:3e:ea: 13:f6:04:e3:ed:1d:da:1d:c8:d0:0f:f8:b0:93:d2:d4:1f:a4: c8:1f:94:fc:84:dc:e7:28:7e:25:b3:0e:3d:79:a4:50:c0:c6: 4c:be:f1:3a:fe:22:d1:5c:f9:93:81:9d:1f:6e:d2:04:8e:ac: 46:3c:0a:87:87:be:2b:e2:93:5d:be:3c:63:c4:c2:24:eb:ca: 96:6f:a5:4e:8a:ec:ea:22:d5:d7:bb:83:6b:3b:49:41:ec:0f: 95:8e:8c:8c:cc:26:f8:c9:71:36:26:6b:13:4c:29:65:54:c3: 76:a3:38:51 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC/3XAY19pg9TYf6GSjrMAPo2Y4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMjcxMTAzNDJaFw0yNTEyMjgxMjEzNDJaMDMxMTAvBgNV BAMTKDMxQTMxMUIwRDZENUEwN0Y2ODU0ODU4NDFBQTI3QkY5MTE3QUM5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDBfe/g4fv/LNSoebtq4ozlai z4ZTzbhrkzriPzvqcDZIM7GYyAFHFXyJuHNJ32o9xFdC/3TjeCm/xxmTPd1zm6Se +Zw4KSUxHcfC8u05fnWwYsg6lyxNjw7nDeaoXv5fgthrC6q+IUUJHFIALhrEj38R +icLl8xK/EA9ovnDnQjRAShtqcoQkkrhigt/7ddyyB97sobuzvRTD7ADO89tSqn1 u23pAmZRt0eVt5o4rdTLtxXU5vxPBHhJCHM1pK3y7M6VnY2oRJ2IXvdIWUTEPbQL +WODTIV1KPIikUZhhD0rJAl7VI1pC5uL61yqie0bA3IMfyqdq0sbFHwRxyQHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMaMRsNbVoH9oVIWEGqJ7+RF6yXUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4knHGDmwggRKpTmzRZ+ VdjSq/qekF4yJPzhSnQlD4OgD22xkeVSrnKMPRhzkntwFo19gwOqX3MX1SUY//7D +/Fzjb9zfCxuEWtckbfoQqarzZ2XODdy7VRSdC5IXLCDV+7Vf/eh11vy2Zb0jpzi mSBPlc1YDoOKb6V2dEOSzi6+dBkm/gj66N+kLOJ2qz7qE/YE4+0d2h3I0A/4sJPS 1B+kyB+U/ITc5yh+JbMOPXmkUMDGTL7xOv4i0Vz5k4GdH27SBI6sRjwKh4e+K+KT Xb48Y8TCJOvKlm+lTors6iLV17uDaztJQewPlY6MjMwm+MlxNiZrE0wpZVTDdqM4 UQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:19 2025 by rpki-client