This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: P/i1lYi8Lp3USJhCf0NHDjdVxl5+L4jwAwhTq2TGXzI= Subject key identifier: 6E:A7:7F:BD:9E:6F:EA:5D:A7:F1:82:5C:32:6C:AC:E9:C8:84:4E:FD Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6E7B65BE115D475E2886AFA2F014B481CCCFA2DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0435 Signing time: Sun 11 Jan 2026 06:34:35 +0000 Manifest this update: Sun 11 Jan 2026 06:29:35 +0000 Manifest next update: Mon 12 Jan 2026 09:15:35 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: qJdJKCILNdnswKNGFdJwxCO/qEcwpvz350yz5Ccv1yM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7b:65:be:11:5d:47:5e:28:86:af:a2:f0:14:b4:81:cc:cf:a2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 11 06:29:35 2026 GMT Not After : Jan 12 09:15:35 2026 GMT Subject: CN=6EA77FBD9E6FEA5DA7F1825C326CACE9C8844EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:62:cb:bb:41:0f:99:bc:ac:a6:72:ef:47: 78:18:d4:7e:9f:36:5b:95:83:09:3c:ca:81:cb:69: 46:c4:67:95:07:c4:d2:a9:5e:a0:91:5f:1a:65:5e: 79:b4:4e:01:94:1f:01:ee:77:28:6c:5b:b1:8a:67: 9f:4b:1e:47:79:ee:3d:a2:12:68:94:a2:08:6f:f8: 35:5b:ef:b8:7a:5b:54:54:e9:83:2a:b8:6e:6b:32: b7:a3:50:cf:a0:66:0f:68:3a:7b:dd:e5:dd:f7:82: f4:a0:21:0c:d9:5f:77:48:c6:0e:ab:80:6c:86:23: ff:c6:f7:fd:34:ed:29:fa:53:95:a3:d0:d0:b4:ea: 2e:3a:ef:9d:e5:90:e3:03:04:a5:ec:5f:54:a6:d2: 1d:85:cb:b0:38:d9:08:4a:35:bb:0e:95:0c:34:d9: 9e:78:b5:96:44:62:62:1a:ca:68:cc:c4:f0:fc:e3: d4:d7:d4:08:f2:78:05:d0:be:6b:95:85:92:f0:86: 0b:62:35:ab:84:e4:15:55:42:82:52:75:b1:44:fb: 41:46:d3:bf:15:1f:e4:fd:52:99:2e:cc:1d:1a:f7: 8f:6e:80:3c:61:ff:36:7f:33:40:3c:20:ea:ff:17: af:cc:3e:d8:38:8a:11:98:59:83:cf:7f:7d:49:67: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A7:7F:BD:9E:6F:EA:5D:A7:F1:82:5C:32:6C:AC:E9:C8:84:4E:FD X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:47:b6:97:16:c2:cc:c8:41:de:e8:0c:16:4f:2e:18:27:69: a3:30:24:71:ef:2b:9f:b8:74:88:91:11:68:39:23:46:83:c6: 72:d5:b7:1f:9c:2f:81:b6:89:44:27:cf:74:46:02:ba:10:b0: 24:23:7c:31:04:90:c2:19:4d:bc:b9:95:b5:4d:34:d5:4d:ac: 0a:5f:41:3e:2a:92:e8:9d:a1:e0:1e:43:33:17:57:bb:7f:a7: 4b:97:96:5a:ab:1e:27:a9:17:ed:4e:df:ed:e7:74:01:67:5e: 2d:73:a5:18:76:9a:a7:ea:20:03:bc:a4:ed:ac:81:0a:33:85: 76:8b:c2:63:58:be:b6:3a:c7:43:04:c4:ae:bb:d7:f8:53:91: 8c:55:f3:4f:64:91:be:84:f2:0c:f9:16:66:fc:5e:1b:6c:a2: 89:c9:79:c4:b5:9b:96:74:05:3e:a7:10:7e:68:48:fe:75:18: 3a:2b:4b:8c:ee:08:44:6a:53:3a:c7:04:96:98:1f:20:d5:09: d9:10:a0:60:72:d2:8d:3a:ad:10:e9:59:7a:0e:ec:47:63:ae: d2:1f:2b:d9:8c:24:3a:60:3c:7b:a3:fa:06:5b:a4:31:14:29: 91:11:e0:95:f0:46:78:f1:10:34:f7:0b:92:32:22:25:39:22: a8:35:31:77 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbntlvhFdR14ohq+i8BS0gczPot0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMTEwNjI5MzVaFw0yNjAxMTIwOTE1MzVaMDMxMTAvBgNV BAMTKDZFQTc3RkJEOUU2RkVBNURBN0YxODI1QzMyNkNBQ0U5Qzg4NDRFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW0GLLu0EPmbyspnLvR3gY1H6f NluVgwk8yoHLaUbEZ5UHxNKpXqCRXxplXnm0TgGUHwHudyhsW7GKZ59LHkd57j2i EmiUoghv+DVb77h6W1RU6YMquG5rMrejUM+gZg9oOnvd5d33gvSgIQzZX3dIxg6r gGyGI//G9/007Sn6U5Wj0NC06i46753lkOMDBKXsX1Sm0h2Fy7A42QhKNbsOlQw0 2Z54tZZEYmIaymjMxPD849TX1AjyeAXQvmuVhZLwhgtiNauE5BVVQoJSdbFE+0FG 078VH+T9UpkuzB0a949ugDxh/zZ/M0A8IOr/F6/MPtg4ihGYWYPPf31JZ6KTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbqd/vZ5v6l2n8YJcMmys6ciETv0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUe2lxbCzMhB3ugMFk8u GCdpozAkce8rn7h0iJERaDkjRoPGctW3H5wvgbaJRCfPdEYCuhCwJCN8MQSQwhlN vLmVtU001U2sCl9BPiqS6J2h4B5DMxdXu3+nS5eWWqseJ6kX7U7f7ed0AWdeLXOl GHaap+ogA7yk7ayBCjOFdovCY1i+tjrHQwTErrvX+FORjFXzT2SRvoTyDPkWZvxe G2yiicl5xLWblnQFPqcQfmhI/nUYOitLjO4IRGpTOscElpgfINUJ2RCgYHLSjTqt EOlZeg7sR2Ou0h8r2YwkOmA8e6P6BlukMRQpkRHglfBGePEQNPcLkjIiJTkiqDUx dw== -----END CERTIFICATE-----Generated at Sun Jan 11 10:02:54 2026 by rpki-client