This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: mVr/kHBi4L/2S3pQeZeGjJA9NU5Gcf12bzVO4CXb0A0= Subject key identifier: CD:19:10:D7:6C:E3:9C:4E:D0:F4:00:BD:F5:AC:CB:66:65:31:63:04 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1B4102BB8C217A1617F5344B7A2F459561592417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F6 Signing time: Tue 25 Nov 2025 00:43:20 +0000 Manifest this update: Tue 25 Nov 2025 00:38:20 +0000 Manifest next update: Wed 26 Nov 2025 02:38:20 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: BP+vSkSgGgLk1+lwVwUI3O3iL62Tib7QoQX3wFzq3PY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 01:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:41:02:bb:8c:21:7a:16:17:f5:34:4b:7a:2f:45:95:61:59:24:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 25 00:38:20 2025 GMT Not After : Nov 26 02:38:20 2025 GMT Subject: CN=CD1910D76CE39C4ED0F400BDF5ACCB6665316304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:45:48:84:17:28:3a:5a:5a:89:82:13:57: 97:0a:1d:3e:7d:a2:2f:eb:8a:05:33:0e:2e:68:03: b8:76:f9:ed:0c:29:53:eb:06:39:06:29:4a:19:48: 6e:e8:44:a9:9c:f6:48:5e:23:04:ef:c6:1c:1e:90: 07:c4:3f:e0:95:de:08:0a:78:4d:44:32:c7:8d:ca: 4b:3a:4a:10:de:6f:63:2f:e8:13:a5:32:94:83:81: 36:00:3a:98:da:2e:f5:2d:af:0c:cd:b2:d7:89:11: 73:bc:57:5a:9e:97:ea:e1:38:d4:f8:6a:f2:86:20: 3e:ee:e4:3a:dc:06:ca:86:53:8a:7e:2a:d1:f3:6e: 46:b7:db:d1:8b:11:fb:fc:a1:80:6b:d2:e8:d8:79: 15:f8:4b:81:8c:24:08:2a:ed:50:dc:bb:18:57:65: 44:da:37:21:93:fd:cf:7e:48:53:9d:d1:71:33:8a: c4:22:bd:34:c2:82:f4:c7:e9:3b:28:e4:fb:4f:29: d0:3f:40:ac:77:c6:73:d5:88:95:58:d5:5c:09:5a: 88:5c:7e:83:fd:11:76:e5:60:79:eb:6f:f6:bf:43: e5:22:84:5a:5b:d8:70:7a:58:68:ab:62:6b:25:1a: 64:da:7a:04:16:11:85:73:a2:d8:09:95:bc:db:69: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:19:10:D7:6C:E3:9C:4E:D0:F4:00:BD:F5:AC:CB:66:65:31:63:04 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:4f:7a:87:8d:d1:e5:be:0f:68:86:2f:d1:ee:79:4e:07: d9:dc:ce:ae:8d:b4:fc:0a:63:5a:22:21:87:b2:b1:e3:3f:d7: 87:cd:7e:1f:b3:95:71:f8:9f:91:d8:25:79:4c:25:61:5d:88: a1:6a:80:c9:1d:d2:90:47:13:fb:6b:5a:9a:7f:56:88:60:08: 1b:33:60:00:a3:a3:ac:97:7d:20:69:bd:28:f9:a4:f9:ac:d4: 5d:d0:b7:00:1c:24:52:c8:5c:17:45:8f:c2:2d:7f:69:a9:e5: 95:16:07:f6:b5:ec:2d:89:b9:ff:45:98:ac:2d:42:32:13:e2: 81:c4:ef:7c:52:80:c4:08:4e:dc:fc:29:2c:ae:a2:33:fb:48: d0:d0:0a:1f:46:56:c6:ca:bf:c8:1a:db:3d:a2:80:86:61:43: 44:d9:3a:95:b7:29:86:b8:b1:f2:8e:c0:92:41:f5:e1:17:8d: ed:51:91:83:57:da:7f:33:d7:b6:56:e6:30:f9:e6:01:cf:c9: e5:c7:15:ad:e9:a5:6d:f4:ef:0b:a1:36:1c:d5:c9:a3:cb:e4: e1:ee:42:a0:78:55:bf:e2:4e:b6:df:be:83:f4:72:6c:be:5f: da:a3:62:78:46:50:f4:f9:35:9e:de:0e:9e:57:fa:cc:be:d2: 4d:26:91:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG0ECu4whehYX9TRLei9FlWFZJBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjUwMDM4MjBaFw0yNTExMjYwMjM4MjBaMDMxMTAvBgNV BAMTKENEMTkxMEQ3NkNFMzlDNEVEMEY0MDBCREY1QUNDQjY2NjUzMTYzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwEVIhBcoOlpaiYITV5cKHT59 oi/rigUzDi5oA7h2+e0MKVPrBjkGKUoZSG7oRKmc9kheIwTvxhwekAfEP+CV3ggK eE1EMseNyks6ShDeb2Mv6BOlMpSDgTYAOpjaLvUtrwzNsteJEXO8V1qel+rhONT4 avKGID7u5DrcBsqGU4p+KtHzbka329GLEfv8oYBr0ujYeRX4S4GMJAgq7VDcuxhX ZUTaNyGT/c9+SFOd0XEzisQivTTCgvTH6Tso5PtPKdA/QKx3xnPViJVY1VwJWohc foP9EXblYHnrb/a/Q+UihFpb2HB6WGirYmslGmTaegQWEYVzotgJlbzbaQfzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzRkQ12zjnE7Q9AC99azLZmUxYwQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3FPeoeN0eW+D2iGL9Hu eU4H2dzOro20/ApjWiIhh7Kx4z/Xh81+H7OVcfifkdgleUwlYV2IoWqAyR3SkEcT +2tamn9WiGAIGzNgAKOjrJd9IGm9KPmk+azUXdC3ABwkUshcF0WPwi1/aanllRYH 9rXsLYm5/0WYrC1CMhPigcTvfFKAxAhO3PwpLK6iM/tI0NAKH0ZWxsq/yBrbPaKA hmFDRNk6lbcphrix8o7AkkH14ReN7VGRg1fafzPXtlbmMPnmAc/J5ccVremlbfTv C6E2HNXJo8vk4e5CoHhVv+JOtt++g/RybL5f2qNieEZQ9Pk1nt4Onlf6zL7STSaR gQ== -----END CERTIFICATE-----Generated at Tue Nov 25 07:13:01 2025 by rpki-client