This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: o5Lejte/P6An6uuc9zV5UZk+DZ9PCWJSMlBnNwt9ZH0= Subject key identifier: 17:1D:D1:10:74:3F:85:8F:D8:B5:B2:1E:CA:B7:31:B4:6F:0E:C2:04 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1CDAB2C71047FF3A8867E3A8282CECC0394BA447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0438 Signing time: Tue 13 Jan 2026 12:45:23 +0000 Manifest this update: Tue 13 Jan 2026 12:40:23 +0000 Manifest next update: Wed 14 Jan 2026 15:14:23 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: zkl09R3JQvFGnqyBWE+TzoDLxoV32Qb99CPiB4eWaMM=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:da:b2:c7:10:47:ff:3a:88:67:e3:a8:28:2c:ec:c0:39:4b:a4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 13 12:40:23 2026 GMT Not After : Jan 14 15:14:23 2026 GMT Subject: CN=171DD110743F858FD8B5B21ECAB731B46F0EC204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:74:8e:fe:58:7a:f2:be:8b:cc:69:0c:73: fb:2e:0f:85:a6:f6:2b:71:ff:bd:da:e8:b4:d6:58: 8e:f3:cd:fa:34:df:58:29:86:3e:52:86:5f:32:14: a2:c1:4f:f7:d7:88:89:a7:bd:13:bd:4b:85:b4:38: ff:da:cd:c2:df:8d:a7:19:91:5a:28:61:9f:a4:98: 2a:ff:c1:e0:8d:e3:20:48:9e:1a:35:8e:0a:3d:55: 8d:51:53:a6:1a:f7:66:01:58:84:5a:56:85:4e:e1: 8e:cb:5f:62:df:5d:f2:ee:15:f5:2f:db:ab:64:8e: ba:09:bd:67:da:5c:d5:cf:cc:9a:fc:4f:49:7c:22: 16:b0:69:29:a9:ab:59:30:72:5f:85:42:65:47:b9: df:3c:d0:55:2b:43:60:7f:ce:b5:b9:8f:a8:ed:0e: 96:30:7f:8d:72:4c:80:81:27:3a:71:5e:84:57:23: f9:51:da:08:04:39:5e:35:6d:95:0d:44:1c:92:f0: a2:8a:56:c9:c2:48:7c:1b:cc:de:73:72:f7:ca:ca: af:8f:47:de:e9:2b:81:28:28:7b:5a:14:61:9d:52: 50:41:4c:54:4f:57:a7:22:72:69:1a:be:f4:03:8e: a6:fe:78:ff:ca:eb:ed:f4:79:96:0f:8c:ed:f8:66: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:D1:10:74:3F:85:8F:D8:B5:B2:1E:CA:B7:31:B4:6F:0E:C2:04 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a7:fb:2b:98:37:4d:39:67:30:b4:c1:67:35:f6:7d:d9:5e: 4e:97:2d:85:0f:7e:b5:65:3e:98:4d:8d:8b:3f:ef:ea:b5:3b: dd:1f:60:4e:6c:74:07:69:fc:f2:2e:57:87:25:25:84:ab:76: e8:1b:6f:b4:13:fa:23:50:43:08:74:9f:ed:ab:5c:13:3d:01: a2:61:d2:6d:81:d3:d0:a0:a1:fe:5a:5d:16:95:ad:19:a6:97: a8:8f:d9:8e:29:33:0c:18:b3:c7:30:b5:1a:03:1b:fe:36:89: b4:a0:3e:70:69:73:2e:a3:6e:d0:53:91:09:5b:a5:db:bf:c5: f2:91:90:bd:b8:46:b7:b5:7d:a4:cb:9e:78:75:0c:88:74:98: 9b:f7:6c:36:5b:90:5e:e9:bf:97:eb:ac:39:f6:fd:c8:0e:ea: ac:cd:ae:04:18:31:c7:9a:c2:99:e6:2b:3b:bc:00:74:e2:7b: e6:72:60:98:7e:5b:75:ef:f6:a0:34:0c:b1:b1:74:1e:21:c5: 35:2d:b0:74:a9:d0:de:5d:40:3f:a0:b7:c0:27:77:54:2e:02: 52:6c:f3:e4:2b:d0:2d:66:d7:92:54:66:ad:33:ff:d1:43:62: dc:d7:b7:52:6e:6c:bc:4b:3b:ac:44:85:11:4a:3f:50:c7:73: bb:4a:27:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHNqyxxBH/zqIZ+OoKCzswDlLpEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMTMxMjQwMjNaFw0yNjAxMTQxNTE0MjNaMDMxMTAvBgNV BAMTKDE3MUREMTEwNzQzRjg1OEZEOEI1QjIxRUNBQjczMUI0NkYwRUMyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm83SO/lh68r6LzGkMc/suD4Wm 9itx/73a6LTWWI7zzfo031gphj5Shl8yFKLBT/fXiImnvRO9S4W0OP/azcLfjacZ kVooYZ+kmCr/weCN4yBInho1jgo9VY1RU6Ya92YBWIRaVoVO4Y7LX2LfXfLuFfUv 26tkjroJvWfaXNXPzJr8T0l8IhawaSmpq1kwcl+FQmVHud880FUrQ2B/zrW5j6jt DpYwf41yTICBJzpxXoRXI/lR2ggEOV41bZUNRByS8KKKVsnCSHwbzN5zcvfKyq+P R97pK4EoKHtaFGGdUlBBTFRPV6cicmkavvQDjqb+eP/K6+30eZYPjO34ZlkRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFx3REHQ/hY/YtbIeyrcxtG8OwgQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKf7K5g3TTlnMLTBZzX2 fdleTpcthQ9+tWU+mE2Niz/v6rU73R9gTmx0B2n88i5XhyUlhKt26BtvtBP6I1BD CHSf7atcEz0BomHSbYHT0KCh/lpdFpWtGaaXqI/ZjikzDBizxzC1GgMb/jaJtKA+ cGlzLqNu0FORCVul27/F8pGQvbhGt7V9pMueeHUMiHSYm/dsNluQXum/l+usOfb9 yA7qrM2uBBgxx5rCmeYrO7wAdOJ75nJgmH5bde/2oDQMsbF0HiHFNS2wdKnQ3l1A P6C3wCd3VC4CUmzz5CvQLWbXklRmrTP/0UNi3Ne3Um5svEs7rESFEUo/UMdzu0on /A== -----END CERTIFICATE-----Generated at Tue Jan 13 20:31:28 2026 by rpki-client