This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: R4k269rewGcZ9wVeKjvizZJV2uRioy8kI4csZrFSC6E= Subject key identifier: B4:89:DE:15:B8:A7:98:55:30:8C:A9:1A:D3:1C:3B:C5:8B:60:C2:0E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6038C367C3D97B132A65EC64AFB70EF11F3951CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0415 Signing time: Thu 18 Dec 2025 08:10:00 +0000 Manifest this update: Thu 18 Dec 2025 08:05:00 +0000 Manifest next update: Fri 19 Dec 2025 10:09:00 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: AawfcxtLloaOUdAGnBsjsjpKfcvEBnXH1b+LTmD1fOE=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:38:c3:67:c3:d9:7b:13:2a:65:ec:64:af:b7:0e:f1:1f:39:51:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 18 08:05:00 2025 GMT Not After : Dec 19 10:09:00 2025 GMT Subject: CN=B489DE15B8A79855308CA91AD31C3BC58B60C20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:44:c0:5f:89:db:ba:d0:81:7e:0a:7c:ac: 7c:e9:fb:48:ee:1a:05:aa:2b:ff:69:bb:77:34:92: 00:9a:db:cf:27:ce:51:72:b9:47:3a:84:1a:23:6d: eb:11:b2:57:52:73:4a:06:66:ed:ed:0e:7d:60:0c: cb:dd:19:17:79:f1:5d:9e:05:0f:96:74:a1:46:61: 20:df:ab:e7:8e:d6:a7:30:2f:9f:0e:eb:22:0f:a5: 93:ce:e8:58:55:1f:db:26:8b:72:6c:ea:68:cb:87: 46:ed:c9:dc:2d:60:43:97:fb:d1:dd:ae:38:c1:dd: 49:e8:76:81:05:b2:c8:93:a2:3c:5c:a9:76:73:0c: 8a:c4:5e:2e:bb:bc:41:aa:1a:f1:ff:96:99:d9:b8: e4:39:41:5a:b4:d8:f5:2b:d0:cc:d6:7b:0e:4c:2b: e2:de:1e:8e:99:7d:48:6f:d8:2f:a2:57:b2:3b:97: c8:37:27:ea:28:41:b1:5a:0f:9d:7e:e9:46:e8:d9: 66:f6:4a:1f:4d:9a:f9:82:bc:23:47:e8:40:a3:71: 40:14:48:de:3b:21:ab:95:db:0b:7b:cd:28:2e:d4: 27:f6:a1:a3:35:ca:d4:db:9a:90:47:12:f5:4f:98: 43:9c:2b:e7:ef:fa:8d:5a:52:f6:26:4d:1c:4a:de: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:89:DE:15:B8:A7:98:55:30:8C:A9:1A:D3:1C:3B:C5:8B:60:C2:0E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b5:d5:40:83:9a:9a:df:f8:84:17:6a:0e:84:ab:44:b0:12: 0c:44:81:75:94:de:bb:4c:be:a0:c1:6b:5a:8b:5c:4b:11:0e: cb:2f:e9:62:d5:fa:b0:af:1d:d6:ee:07:b5:b2:e8:08:e8:94: 1c:40:34:81:a0:66:11:c9:f4:03:94:e9:09:cd:34:8b:8a:fa: 9c:fa:dc:32:59:22:89:15:ad:20:9d:23:38:46:49:0c:2a:0e: 3c:1e:64:60:93:1d:0c:6d:61:48:2a:42:98:6c:5c:9f:d6:4c: 0f:11:9d:8a:b0:00:ac:91:e0:d2:b1:03:ef:83:25:ea:d6:87: cf:98:c7:2d:c0:da:71:31:0e:7f:20:8b:48:b0:9c:87:7a:5e: 3c:a5:e9:8b:7c:f6:9f:52:68:e7:8a:8e:06:6c:78:56:5f:ce: 99:d8:75:07:b3:54:8d:b4:76:98:a3:3c:32:f0:de:82:3b:27: 6b:14:49:18:11:8a:f4:a8:3a:55:9c:0c:a9:4e:c7:e2:1c:75: 59:6e:01:21:3a:c6:53:07:28:a5:2f:86:0f:c4:14:9a:5f:2f: 37:61:07:01:fc:a7:a5:d8:e6:29:3f:9b:93:93:d0:24:e2:f8: 5b:1e:3a:f9:a0:1a:d4:63:7d:46:b8:97:e5:13:d0:78:9a:57: 2c:df:87:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYDjDZ8PZexMqZexkr7cO8R85Uc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTgwODA1MDBaFw0yNTEyMTkxMDA5MDBaMDMxMTAvBgNV BAMTKEI0ODlERTE1QjhBNzk4NTUzMDhDQTkxQUQzMUMzQkM1OEI2MEMyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvG0TAX4nbutCBfgp8rHzp+0ju GgWqK/9pu3c0kgCa288nzlFyuUc6hBojbesRsldSc0oGZu3tDn1gDMvdGRd58V2e BQ+WdKFGYSDfq+eO1qcwL58O6yIPpZPO6FhVH9smi3Js6mjLh0btydwtYEOX+9Hd rjjB3UnodoEFssiTojxcqXZzDIrEXi67vEGqGvH/lpnZuOQ5QVq02PUr0MzWew5M K+LeHo6ZfUhv2C+iV7I7l8g3J+ooQbFaD51+6Ubo2Wb2Sh9NmvmCvCNH6ECjcUAU SN47IauV2wt7zSgu1Cf2oaM1ytTbmpBHEvVPmEOcK+fv+o1aUvYmTRxK3jfrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtIneFbinmFUwjKka0xw7xYtgwg4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrXVQIOamt/4hBdqDoSr RLASDESBdZTeu0y+oMFrWotcSxEOyy/pYtX6sK8d1u4HtbLoCOiUHEA0gaBmEcn0 A5TpCc00i4r6nPrcMlkiiRWtIJ0jOEZJDCoOPB5kYJMdDG1hSCpCmGxcn9ZMDxGd irAArJHg0rED74Ml6taHz5jHLcDacTEOfyCLSLCch3pePKXpi3z2n1Jo54qOBmx4 Vl/Omdh1B7NUjbR2mKM8MvDegjsnaxRJGBGK9Kg6VZwMqU7H4hx1WW4BITrGUwco pS+GD8QUml8vN2EHAfynpdjmKT+bk5PQJOL4Wx46+aAa1GN9RriX5RPQeJpXLN+H QQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:14:10 2025 by rpki-client