This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: U8TtsY+ch0Cu8hjE+rCNo32a7Vqwt4NgwuohW0ck4k4= Subject key identifier: AB:7D:D6:CA:B0:48:27:9C:0F:2A:CC:23:4D:90:E3:5F:8B:DB:7E:08 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6C11246AB442750697BD04112058C4D509FD004D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F1 Signing time: Fri 21 Nov 2025 04:04:52 +0000 Manifest this update: Fri 21 Nov 2025 03:59:52 +0000 Manifest next update: Sat 22 Nov 2025 06:42:52 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: OLpVqBkBq4Ugi2pl/CM2NDYzxlfQeN0vP0vPQFzQhFg=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 06:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:11:24:6a:b4:42:75:06:97:bd:04:11:20:58:c4:d5:09:fd:00:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 21 03:59:52 2025 GMT Not After : Nov 22 06:42:52 2025 GMT Subject: CN=AB7DD6CAB048279C0F2ACC234D90E35F8BDB7E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:f8:b0:16:80:37:ca:61:30:84:99:79:96: 9f:3a:af:46:31:5a:d8:06:64:13:03:1c:0a:d8:2b: 96:1b:73:6a:27:8a:de:7c:80:7d:a8:4c:ee:a4:44: fc:3a:bd:30:72:29:f0:cd:a9:98:aa:19:2c:3d:4a: e7:b0:5c:a1:8b:a6:ef:98:c3:8f:b8:ca:82:84:b8: aa:ef:cd:f5:39:1b:8e:f3:5e:09:1d:bc:fa:48:30: 65:96:d6:b9:9d:09:f5:6b:80:11:77:62:40:28:df: c9:a6:9e:10:77:2d:9e:fa:67:dd:c5:ed:09:9c:26: 3a:df:1f:9c:15:a4:aa:a7:86:c7:7e:9a:ad:78:b3: 53:ae:70:11:59:d9:33:e9:c6:d9:c2:f7:b0:59:4c: 6f:5f:5c:d9:18:51:23:15:b3:73:15:80:b7:00:11: 1f:43:20:79:3a:9e:90:5c:c0:fd:f3:4e:41:1e:41: 29:99:f8:fa:53:f5:b6:ec:32:c7:ea:3f:99:15:37: 5b:e8:bc:c7:74:11:1e:03:39:b0:37:af:52:5e:9e: ff:0c:f9:c5:7a:fa:0b:ee:e1:45:9c:97:2b:d7:ea: 80:62:e6:a4:b7:11:a6:63:67:29:13:14:60:89:6f: 22:98:a4:15:fb:39:8f:b4:9f:be:d7:58:9a:3e:53: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:D6:CA:B0:48:27:9C:0F:2A:CC:23:4D:90:E3:5F:8B:DB:7E:08 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:9f:00:3b:2d:ef:27:81:0b:63:91:47:1f:e2:58:60:05:27: 1f:86:87:8d:e9:3f:09:e2:5f:14:d1:a6:1a:e7:98:8a:44:eb: 68:d5:84:db:1f:11:6e:56:22:77:5f:e5:e9:8b:93:33:68:22: ca:b5:dc:e8:b9:f1:f9:c3:de:9a:8c:66:29:f8:1a:13:bd:42: a8:10:a3:38:f1:76:a5:14:53:f4:43:f9:55:ac:e2:5e:42:ae: e0:f6:51:18:ed:db:a9:fd:fe:71:25:44:ee:d0:cf:2a:c9:86: 7c:22:05:f9:a4:7b:7d:3f:16:07:27:93:f7:b4:85:50:9d:5f: 90:44:c6:ac:26:37:3c:09:62:49:69:52:66:65:17:c5:3e:12: 92:71:1d:5e:8c:16:07:60:74:9a:4c:7d:90:70:aa:e2:f8:cd: 34:b6:86:5e:6a:75:75:75:49:15:f3:fd:3f:28:e6:c5:82:98: 7c:d5:9b:19:da:ee:be:41:b8:85:43:f5:07:f0:8d:78:cd:3d: fa:ab:d5:71:00:ef:60:83:a4:1d:3a:64:d8:cd:9c:f5:35:46: bb:ea:f3:d9:54:d0:e7:9f:01:be:6f:0e:7b:80:e0:29:ad:a6: 9d:0a:3e:d0:e0:f9:63:5f:cd:68:95:7a:74:47:14:de:1d:3a: ce:fd:58:cb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbBEkarRCdQaXvQQRIFjE1Qn9AE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjEwMzU5NTJaFw0yNTExMjIwNjQyNTJaMDMxMTAvBgNV BAMTKEFCN0RENkNBQjA0ODI3OUMwRjJBQ0MyMzREOTBFMzVGOEJEQjdFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSviwFoA3ymEwhJl5lp86r0Yx WtgGZBMDHArYK5Ybc2onit58gH2oTO6kRPw6vTByKfDNqZiqGSw9SuewXKGLpu+Y w4+4yoKEuKrvzfU5G47zXgkdvPpIMGWW1rmdCfVrgBF3YkAo38mmnhB3LZ76Z93F 7QmcJjrfH5wVpKqnhsd+mq14s1OucBFZ2TPpxtnC97BZTG9fXNkYUSMVs3MVgLcA ER9DIHk6npBcwP3zTkEeQSmZ+PpT9bbsMsfqP5kVN1vovMd0ER4DObA3r1Jenv8M +cV6+gvu4UWclyvX6oBi5qS3EaZjZykTFGCJbyKYpBX7OY+0n77XWJo+UyafAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUq33WyrBIJ5wPKswjTZDjX4vbfggwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ8AOy3vJ4ELY5FHH+JY YAUnH4aHjek/CeJfFNGmGueYikTraNWE2x8RblYid1/l6YuTM2giyrXc6Lnx+cPe moxmKfgaE71CqBCjOPF2pRRT9EP5VaziXkKu4PZRGO3bqf3+cSVE7tDPKsmGfCIF +aR7fT8WByeT97SFUJ1fkETGrCY3PAliSWlSZmUXxT4SknEdXowWB2B0mkx9kHCq 4vjNNLaGXmp1dXVJFfP9PyjmxYKYfNWbGdruvkG4hUP1B/CNeM09+qvVcQDvYIOk HTpk2M2c9TVGu+rz2VTQ558Bvm8Oe4DgKa2mnQo+0OD5Y1/NaJV6dEcU3h06zv1Y yw== -----END CERTIFICATE-----Generated at Fri Nov 21 12:28:19 2025 by rpki-client