This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: uWJVMBgdrLDhKGupStK0UC7T2Lo9vOArujoEStSaKM0= Subject key identifier: 87:7E:0A:A7:FB:D4:59:BF:E6:7B:46:0F:99:D7:24:5A:73:7C:29:1A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3FA28F99BF6102E03B4AD7A191F8E3610BC5301C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03FB Signing time: Fri 28 Nov 2025 21:46:56 +0000 Manifest this update: Fri 28 Nov 2025 21:41:56 +0000 Manifest next update: Sat 29 Nov 2025 22:47:56 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: aI3wWpJ3fWySXHh7KYvNgx4VkK0FdfeE2AD9lulx33Y=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 22:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a2:8f:99:bf:61:02:e0:3b:4a:d7:a1:91:f8:e3:61:0b:c5:30:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 28 21:41:56 2025 GMT Not After : Nov 29 22:47:56 2025 GMT Subject: CN=877E0AA7FBD459BFE67B460F99D7245A737C291A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:3d:85:20:07:a4:ad:bf:af:94:74:9d:50: 7f:45:3c:b6:4a:c5:9a:c4:19:b1:a7:b9:0c:fa:fe: b5:87:54:2a:84:a8:65:27:97:87:4e:81:00:23:8b: 41:1c:f4:7f:bf:38:68:23:2a:1a:63:70:e8:18:ec: 9a:35:de:14:09:b0:cc:30:40:c9:3a:ef:52:9a:87: ff:47:3e:31:f2:7d:c7:5f:87:a5:9c:7c:bf:bd:70: 98:89:3d:cc:4c:01:ac:8f:01:ac:79:b5:35:c5:38: f5:a8:07:ec:6e:34:b0:1f:f8:ba:e7:3a:72:5d:ea: df:df:39:3c:75:9f:ff:d7:a4:fb:c7:ed:7c:f7:fd: d7:f2:4d:9d:bf:fd:63:03:28:e2:7c:4a:f9:63:01: bd:40:9e:cb:63:e2:9a:62:44:aa:46:97:b9:ed:03: 4f:89:d9:50:76:d8:f7:30:28:9a:58:62:07:fc:5e: 6f:7a:6e:94:b9:e5:e6:07:77:e9:a8:57:d4:ae:9d: 38:3c:df:43:b7:eb:8d:1a:41:64:d7:33:d7:aa:61: e9:3b:be:52:8c:b0:21:cc:4f:b4:b4:25:fa:f4:65: e1:fb:71:e6:da:87:c7:ca:08:9f:67:ba:40:48:ad: 6e:28:80:fc:4c:ee:3c:38:78:4d:6f:57:74:a4:49: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:0A:A7:FB:D4:59:BF:E6:7B:46:0F:99:D7:24:5A:73:7C:29:1A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5e:d5:80:71:d4:12:df:2c:e3:84:26:c4:26:09:8f:ab:14: ef:8f:cf:d0:fe:b7:6c:5a:ef:93:cc:a8:97:9e:19:79:a3:98: 29:c9:9b:3e:96:38:f3:d0:e7:45:a2:c8:ff:64:4d:da:4e:4a: e6:b3:3d:0f:68:7f:75:75:69:98:3f:e8:cf:ed:fa:37:d3:27: 30:04:61:30:13:79:99:be:4f:a4:1a:c9:4a:05:2f:1a:59:eb: 81:73:d3:ba:82:5a:98:4e:7f:e2:ab:57:1b:ee:55:f1:29:45: 35:34:4d:46:2e:f1:4b:2c:91:27:4d:5a:25:1f:88:eb:bc:af: 20:41:64:89:f9:de:35:02:e7:0f:ee:d9:2a:15:50:86:75:9d: 69:99:f2:7f:ff:40:df:e9:98:28:12:50:8d:a7:ac:bb:47:02: 3a:b9:72:52:5b:70:17:70:c3:a0:4e:a2:39:0a:eb:9f:1f:35: 47:66:5d:4b:81:69:8e:c3:ec:df:9e:df:43:9a:14:3e:67:1c: df:7f:79:bd:d1:91:be:0d:49:46:1f:b5:95:d0:8a:16:a0:70: 78:25:72:dd:2f:10:f7:02:3d:47:31:87:5e:cc:a5:97:77:09: fa:7c:e1:b6:b9:66:6d:00:a5:55:7e:26:90:fe:8c:fd:5f:4a: 14:49:2f:29 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUP6KPmb9hAuA7StehkfjjYQvFMBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjgyMTQxNTZaFw0yNTExMjkyMjQ3NTZaMDMxMTAvBgNV BAMTKDg3N0UwQUE3RkJENDU5QkZFNjdCNDYwRjk5RDcyNDVBNzM3QzI5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26z2FIAekrb+vlHSdUH9FPLZK xZrEGbGnuQz6/rWHVCqEqGUnl4dOgQAji0Ec9H+/OGgjKhpjcOgY7Jo13hQJsMww QMk671Kah/9HPjHyfcdfh6WcfL+9cJiJPcxMAayPAax5tTXFOPWoB+xuNLAf+Lrn OnJd6t/fOTx1n//XpPvH7Xz3/dfyTZ2//WMDKOJ8SvljAb1Anstj4ppiRKpGl7nt A0+J2VB22PcwKJpYYgf8Xm96bpS55eYHd+moV9SunTg830O3640aQWTXM9eqYek7 vlKMsCHMT7S0Jfr0ZeH7cebah8fKCJ9nukBIrW4ogPxM7jw4eE1vV3SkSWl5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUh34Kp/vUWb/me0YPmdckWnN8KRowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV7VgHHUEt8s44QmxCYJ j6sU74/P0P63bFrvk8yol54ZeaOYKcmbPpY489DnRaLI/2RN2k5K5rM9D2h/dXVp mD/oz+36N9MnMARhMBN5mb5PpBrJSgUvGlnrgXPTuoJamE5/4qtXG+5V8SlFNTRN Ri7xSyyRJ01aJR+I67yvIEFkifneNQLnD+7ZKhVQhnWdaZnyf/9A3+mYKBJQjaes u0cCOrlyUltwF3DDoE6iOQrrnx81R2ZdS4FpjsPs357fQ5oUPmcc3395vdGRvg1J Rh+1ldCKFqBweCVy3S8Q9wI9RzGHXsyll3cJ+nzhtrlmbQClVX4mkP6M/V9KFEkv KQ== -----END CERTIFICATE-----Generated at Sat Nov 29 09:58:45 2025 by rpki-client