This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: pbyWc7Dr5Z1Z0j+6VvKU/UwNBwFdNfoTAhGwBAx0vBo= Subject key identifier: 14:B0:6E:8F:1D:3A:B5:93:DC:A8:BD:BE:B1:8D:FA:6C:EB:47:9D:3F Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 578453A7C4888039C4EFB6637657FB7A26027A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0445 Signing time: Fri 23 Jan 2026 04:11:33 +0000 Manifest this update: Fri 23 Jan 2026 04:06:33 +0000 Manifest next update: Sat 24 Jan 2026 07:43:33 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: L4kWnPfvYVNFz56xxOzSNOGx/T+E0/6yS0+hApSGSF4=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:84:53:a7:c4:88:80:39:c4:ef:b6:63:76:57:fb:7a:26:02:7a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 23 04:06:33 2026 GMT Not After : Jan 24 07:43:33 2026 GMT Subject: CN=14B06E8F1D3AB593DCA8BDBEB18DFA6CEB479D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:a2:2b:f7:8f:c5:b4:b6:cd:28:20:9b:89: 3b:c4:3a:12:03:ce:d6:3d:f9:61:4a:5c:82:b1:6c: 07:77:c4:be:b7:35:23:6c:36:50:84:85:09:1b:0e: 3d:00:90:d3:25:3e:1f:d0:f8:5a:b8:ce:aa:b4:ff: 9e:d7:2c:bc:42:f4:98:2d:58:9c:f9:61:96:2a:3d: c3:53:8f:3a:bb:0a:50:e9:b0:43:bd:0a:07:57:aa: 80:b9:ae:4a:91:27:d0:61:b1:e1:81:44:a5:5a:af: bc:e0:25:1c:d6:80:fe:53:af:66:5a:bf:86:22:86: bd:86:1c:fb:77:33:5d:e9:43:a1:94:16:88:b9:aa: 30:d0:ca:8e:5e:bd:38:92:fd:48:7a:2d:46:b5:28: b9:4c:6c:6a:64:ba:51:bb:a4:f9:64:52:63:91:00: cc:98:03:7e:11:e3:c3:b8:39:d4:55:6b:43:68:82: 04:6d:12:ea:3a:fe:9e:98:6e:43:35:fa:cb:8b:4a: 83:8a:79:17:00:42:38:77:2b:b2:1c:0b:e7:01:21: bc:9e:2b:6f:74:49:55:9e:da:44:f4:23:dd:a7:83: eb:5e:ff:3f:2d:92:71:db:85:ff:c0:89:df:4a:2a: ef:89:3f:1c:c3:ea:33:36:74:5f:b8:14:70:42:27: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:6E:8F:1D:3A:B5:93:DC:A8:BD:BE:B1:8D:FA:6C:EB:47:9D:3F X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b2:f1:4d:46:c4:dd:b6:4d:79:2c:7f:b3:7f:d2:37:e6:d9: 66:cb:4a:76:91:3e:3d:94:5e:72:a0:86:3c:a3:47:24:e2:d8: ea:86:c2:a0:b8:ba:8a:7f:2d:e3:08:7a:a9:85:31:d6:a1:2c: 9b:28:1a:1a:df:27:b5:54:42:83:e6:42:82:e2:05:2d:7d:d8: d0:5d:f0:97:88:d1:df:ce:ff:5b:61:3a:c3:ae:16:3c:1c:bf: 4a:9c:c6:1a:69:d0:76:0c:76:c7:de:a1:2c:7a:d9:2d:39:54: b0:67:5b:a8:49:98:68:de:5e:8e:7d:c5:84:dd:e1:4a:c2:b1: 68:e2:10:3c:ad:2c:15:b6:5b:2a:74:2c:8f:3e:29:07:d5:dd: c1:2c:51:b6:93:1e:bb:e5:d1:6e:25:e3:0b:a8:90:56:99:c6: b7:db:db:bf:2d:43:5e:6b:43:b3:68:76:eb:eb:e4:e4:5c:8a: 0f:a5:3f:12:68:90:75:22:22:88:9d:4b:ec:09:91:22:c7:01: f5:6f:c6:9f:88:03:02:6b:3f:f5:17:8e:6a:ca:43:c8:c0:1d: e0:4e:8b:a7:53:78:ab:f3:63:5a:49:db:c7:4e:da:97:c6:9d: 35:1b:13:f8:0e:47:2c:0c:27:5a:d8:84:76:21:bd:c1:6c:da: 43:ff:b9:9b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUV4RTp8SIgDnE77Zjdlf7eiYCemIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMjMwNDA2MzNaFw0yNjAxMjQwNzQzMzNaMDMxMTAvBgNV BAMTKDE0QjA2RThGMUQzQUI1OTNEQ0E4QkRCRUIxOERGQTZDRUI0NzlEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgP6Ir94/FtLbNKCCbiTvEOhID ztY9+WFKXIKxbAd3xL63NSNsNlCEhQkbDj0AkNMlPh/Q+Fq4zqq0/57XLLxC9Jgt WJz5YZYqPcNTjzq7ClDpsEO9CgdXqoC5rkqRJ9BhseGBRKVar7zgJRzWgP5Tr2Za v4Yihr2GHPt3M13pQ6GUFoi5qjDQyo5evTiS/Uh6LUa1KLlMbGpkulG7pPlkUmOR AMyYA34R48O4OdRVa0NoggRtEuo6/p6YbkM1+suLSoOKeRcAQjh3K7IcC+cBIbye K290SVWe2kT0I92ng+te/z8tknHbhf/Aid9KKu+JPxzD6jM2dF+4FHBCJwFxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFLBujx06tZPcqL2+sY36bOtHnT8wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarLxTUbE3bZNeSx/s3/S N+bZZstKdpE+PZRecqCGPKNHJOLY6obCoLi6in8t4wh6qYUx1qEsmygaGt8ntVRC g+ZCguIFLX3Y0F3wl4jR387/W2E6w64WPBy/SpzGGmnQdgx2x96hLHrZLTlUsGdb qEmYaN5ejn3FhN3hSsKxaOIQPK0sFbZbKnQsjz4pB9XdwSxRtpMeu+XRbiXjC6iQ VpnGt9vbvy1DXmtDs2h26+vk5FyKD6U/EmiQdSIiiJ1L7AmRIscB9W/Gn4gDAms/ 9ReOaspDyMAd4E6Lp1N4q/NjWknbx07al8adNRsT+A5HLAwnWtiEdiG9wWzaQ/+5 mw== -----END CERTIFICATE-----Generated at Fri Jan 23 12:56:15 2026 by rpki-client