This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: pxAJRFC+3+BzieInGzBYPKN6+fnFIor09QJjM9CnFNE= Subject key identifier: 90:46:A3:25:6C:31:9F:06:82:F4:70:8E:21:A1:4F:C9:94:D3:D1:41 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2BBF15B4694967C590E93298E80B1DE9FD39BAE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0432 Signing time: Fri 09 Jan 2026 00:28:47 +0000 Manifest this update: Fri 09 Jan 2026 00:23:47 +0000 Manifest next update: Sat 10 Jan 2026 02:18:47 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: A31KxBd0Nt8NXWPQ85VkdmW0ScO5jVZS9UW51w92zAs=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 02:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bf:15:b4:69:49:67:c5:90:e9:32:98:e8:0b:1d:e9:fd:39:ba:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 9 00:23:47 2026 GMT Not After : Jan 10 02:18:47 2026 GMT Subject: CN=9046A3256C319F0682F4708E21A14FC994D3D141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:1d:dd:b4:64:02:cd:b4:83:54:0d:4e:61: 51:c5:72:44:9d:b4:ae:c2:c6:94:6d:b1:51:9a:25: 84:65:6c:ec:5d:31:b3:e3:e1:af:07:fa:fd:ce:a9: 01:4f:ee:c2:a3:b9:ae:a7:fb:13:71:48:b6:a7:cb: c2:73:ff:4b:73:77:05:1d:0c:89:13:b5:ae:30:7f: be:92:0a:60:53:02:0d:70:a6:c2:a7:0a:1d:cf:75: 3e:82:09:13:c8:99:30:a9:73:cf:4c:c3:a7:81:e9: b8:2a:9f:71:fe:08:0f:1c:df:17:73:32:b3:d7:db: 3e:53:29:98:7f:6f:51:9f:1b:43:30:f0:f1:59:3b: 0d:55:12:3e:63:8a:ff:a4:f0:9b:83:c0:1e:18:bf: fb:6c:cd:e2:34:e5:5c:f0:e5:ef:56:04:7c:9f:da: 1f:76:69:75:a6:2a:44:8e:21:f6:37:48:60:e2:f1: dc:4a:75:36:ee:f9:de:8d:01:ec:37:7f:ca:ae:08: 68:03:44:50:48:3d:d7:de:49:3f:04:c2:07:3a:89: 75:32:3e:be:95:56:3a:ae:52:d7:f2:56:0e:b4:de: d3:a7:36:7f:54:26:77:f9:a1:3c:af:c7:28:d5:05: da:b5:0e:ce:fe:16:4f:d7:40:9f:c0:dc:64:ac:b9: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:46:A3:25:6C:31:9F:06:82:F4:70:8E:21:A1:4F:C9:94:D3:D1:41 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f4:1d:ce:31:7c:a3:db:74:ee:06:be:3a:7c:07:2f:ae:a4: 10:8d:79:33:fb:48:ba:e4:0d:30:cd:30:68:e0:0b:a5:be:00: ad:2d:50:87:32:7d:f8:88:98:fd:93:07:b9:e4:e6:56:c0:21: b7:4b:81:83:88:ef:cb:fa:01:4f:7a:1b:a0:d2:67:99:89:ee: 1f:8b:d6:7b:e0:d5:7f:fb:a9:0c:12:81:b7:11:3a:5a:00:e3: f7:4b:8a:2b:0e:07:98:0f:96:12:16:d3:8c:c7:32:93:09:22: 1c:d9:e5:d8:9e:45:87:5b:25:09:d6:69:29:3b:57:88:04:44: 25:a8:fc:10:95:00:d2:b1:33:10:b5:58:bd:21:bc:37:0e:37: ed:89:8d:92:c3:fd:e3:46:90:e3:b0:1f:54:bd:59:fa:ab:22: 3e:6b:6b:7d:9c:8d:fc:60:e3:b6:60:58:f3:bb:03:e7:0d:f4: 4e:d8:3b:08:19:bf:1f:63:f5:a8:c1:04:d5:73:3a:3d:b9:1c: 0b:1d:15:13:ba:77:5a:84:5c:70:7f:45:6d:7c:d7:8b:e4:6b: e1:4f:04:e6:8a:52:50:29:70:e3:c7:e6:a0:0e:5b:49:97:7a: 60:0a:c2:78:7c:d4:89:95:f2:e2:63:2d:4a:97:86:34:5b:00: 85:8d:46:d4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK78VtGlJZ8WQ6TKY6Asd6f05uuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDkwMDIzNDdaFw0yNjAxMTAwMjE4NDdaMDMxMTAvBgNV BAMTKDkwNDZBMzI1NkMzMTlGMDY4MkY0NzA4RTIxQTE0RkM5OTREM0QxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftR3dtGQCzbSDVA1OYVHFckSd tK7CxpRtsVGaJYRlbOxdMbPj4a8H+v3OqQFP7sKjua6n+xNxSLany8Jz/0tzdwUd DIkTta4wf76SCmBTAg1wpsKnCh3PdT6CCRPImTCpc89Mw6eB6bgqn3H+CA8c3xdz MrPX2z5TKZh/b1GfG0Mw8PFZOw1VEj5jiv+k8JuDwB4Yv/tszeI05Vzw5e9WBHyf 2h92aXWmKkSOIfY3SGDi8dxKdTbu+d6NAew3f8quCGgDRFBIPdfeST8Ewgc6iXUy Pr6VVjquUtfyVg603tOnNn9UJnf5oTyvxyjVBdq1Ds7+Fk/XQJ/A3GSsuQqFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkEajJWwxnwaC9HCOIaFPyZTT0UEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPQdzjF8o9t07ga+OnwH L66kEI15M/tIuuQNMM0waOALpb4ArS1QhzJ9+IiY/ZMHueTmVsAht0uBg4jvy/oB T3oboNJnmYnuH4vWe+DVf/upDBKBtxE6WgDj90uKKw4HmA+WEhbTjMcykwkiHNnl 2J5Fh1slCdZpKTtXiAREJaj8EJUA0rEzELVYvSG8Nw437YmNksP940aQ47AfVL1Z +qsiPmtrfZyN/GDjtmBY87sD5w30Ttg7CBm/H2P1qMEE1XM6PbkcCx0VE7p3WoRc cH9FbXzXi+Rr4U8E5opSUClw48fmoA5bSZd6YArCeHzUiZXy4mMtSpeGNFsAhY1G 1A== -----END CERTIFICATE-----Generated at Fri Jan 9 14:59:25 2026 by rpki-client