This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: aDM+29r59GT6fBULStcg7ORA0k7p6iP9fzbFATVhxRE= Subject key identifier: C5:25:5F:5D:E4:01:CA:F1:3C:85:5D:57:59:E7:2F:F0:8A:7F:FC:8E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1396DBC23F5D6A858F11F283AC075FD19861A090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0444 Signing time: Thu 22 Jan 2026 08:22:36 +0000 Manifest this update: Thu 22 Jan 2026 08:17:36 +0000 Manifest next update: Fri 23 Jan 2026 12:10:36 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: PjkDUf6D6jf0JLxrZeSSJssSsr4cPYlJu7HUUNGv4jA=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:96:db:c2:3f:5d:6a:85:8f:11:f2:83:ac:07:5f:d1:98:61:a0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 22 08:17:36 2026 GMT Not After : Jan 23 12:10:36 2026 GMT Subject: CN=C5255F5DE401CAF13C855D5759E72FF08A7FFC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:70:90:e8:f0:b5:e2:d3:18:80:0e:2a:65: 3a:11:4b:c4:2e:e6:d5:a4:60:e2:79:a4:44:b4:30: 91:1d:c5:d1:bb:9d:b9:5d:06:ec:83:8d:bf:51:1b: 4f:40:7d:06:ae:71:2e:cb:75:21:db:6f:5b:7e:01: 6b:86:2c:d8:d2:0e:d9:6e:79:e2:18:2a:e3:a6:99: a6:07:1c:f4:9b:2a:7e:16:d7:cb:50:eb:7f:d3:ce: 05:10:c7:7a:37:c4:b1:5b:7e:57:2b:6b:c2:77:18: 68:bf:62:b4:b5:88:6a:d1:59:2c:c2:3a:7d:3b:8b: b7:b3:21:19:54:d4:c5:5c:ba:c0:c2:16:bb:82:ab: 40:d7:04:e2:7b:fe:ff:b2:a4:9e:6f:04:cd:3d:d4: d3:26:88:b3:bf:06:d3:ce:bd:a7:ef:e9:19:a3:88: 8d:f6:b0:d3:d6:3a:ab:cf:bc:50:b5:67:cc:27:26: 3b:3e:b5:54:04:f6:2b:9b:3c:31:c9:9c:5d:57:7e: 37:0b:63:97:e2:cf:da:b7:bb:cd:5a:ca:0b:7b:f0: 43:c5:2f:46:b7:e0:4a:09:21:d9:e8:6d:b0:9f:fd: 49:41:dd:70:d2:03:a0:7d:69:42:0e:39:bd:fa:85: 0b:60:c3:f0:4a:03:51:ef:75:4b:65:fa:62:37:fc: 5c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:25:5F:5D:E4:01:CA:F1:3C:85:5D:57:59:E7:2F:F0:8A:7F:FC:8E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ee:d6:04:78:e0:38:2f:32:7d:27:53:a9:5d:e1:11:fc:a1: ab:a7:4b:3d:da:21:ce:fa:29:af:ff:79:0c:79:d9:88:69:2c: 23:d4:84:cb:a4:c7:62:e8:a0:04:15:b0:57:0a:2b:7a:8e:0c: a7:30:e5:22:8c:dd:e2:78:c2:ad:7c:9c:43:98:3e:3f:cb:63: bd:3a:92:29:1b:8c:62:e5:ce:be:10:6b:81:2e:fc:df:29:01: 30:f3:61:80:f7:50:9f:33:62:6d:0b:8a:a9:c8:a9:43:b3:40: 4a:30:4a:e4:ec:8f:05:fe:a4:08:94:88:89:49:67:af:45:30: e8:2c:15:40:e4:50:9b:c4:44:6f:d8:79:99:a4:1d:68:53:d4: a6:14:f4:b0:ad:7e:72:f8:02:3a:ff:6e:d9:2e:99:7d:ff:ab: 3d:ec:f3:d6:77:7d:83:82:c7:07:72:da:2a:9d:73:14:30:42: e4:e6:3e:0c:ad:f9:b6:87:5a:6d:09:0b:6d:e0:e1:2b:fc:d5: 4a:a1:82:d8:2a:9e:58:2c:e6:f6:62:61:b4:30:3f:d6:db:5e: 1c:8d:27:c1:ac:8f:ad:eb:59:e1:35:75:fe:f1:26:d7:6c:d5: 9c:42:9e:30:72:21:18:cb:b4:71:b9:38:e0:4a:a7:8a:f2:37: ea:ed:e4:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE5bbwj9daoWPEfKDrAdf0ZhhoJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMjIwODE3MzZaFw0yNjAxMjMxMjEwMzZaMDMxMTAvBgNV BAMTKEM1MjU1RjVERTQwMUNBRjEzQzg1NUQ1NzU5RTcyRkYwOEE3RkZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChnCQ6PC14tMYgA4qZToRS8Qu 5tWkYOJ5pES0MJEdxdG7nbldBuyDjb9RG09AfQaucS7LdSHbb1t+AWuGLNjSDtlu eeIYKuOmmaYHHPSbKn4W18tQ63/TzgUQx3o3xLFbflcra8J3GGi/YrS1iGrRWSzC On07i7ezIRlU1MVcusDCFruCq0DXBOJ7/v+ypJ5vBM091NMmiLO/BtPOvafv6Rmj iI32sNPWOqvPvFC1Z8wnJjs+tVQE9iubPDHJnF1XfjcLY5fiz9q3u81aygt78EPF L0a34EoJIdnobbCf/UlB3XDSA6B9aUIOOb36hQtgw/BKA1HvdUtl+mI3/FwFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxSVfXeQByvE8hV1XWecv8Ip//I4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+7WBHjgOC8yfSdTqV3h Efyhq6dLPdohzvopr/95DHnZiGksI9SEy6THYuigBBWwVworeo4MpzDlIozd4njC rXycQ5g+P8tjvTqSKRuMYuXOvhBrgS783ykBMPNhgPdQnzNibQuKqcipQ7NASjBK 5OyPBf6kCJSIiUlnr0Uw6CwVQORQm8REb9h5maQdaFPUphT0sK1+cvgCOv9u2S6Z ff+rPezz1nd9g4LHB3LaKp1zFDBC5OY+DK35todabQkLbeDhK/zVSqGC2CqeWCzm 9mJhtDA/1tteHI0nwayPretZ4TV1/vEm12zVnEKeMHIhGMu0cbk44EqnivI36u3k kQ== -----END CERTIFICATE-----Generated at Thu Jan 22 12:44:24 2026 by rpki-client