This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 0dn1i+j4w+wvGl5by7UOkEVPybAlTSrGvoAiGzTWSWk= Subject key identifier: 52:1B:0B:48:F6:C6:58:51:FC:FC:B4:82:5D:01:CD:EA:38:FA:A8:14 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6F68E7BABD5181727F5503DD5550B00033E42E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0455 Signing time: Wed 04 Feb 2026 05:14:10 +0000 Manifest this update: Wed 04 Feb 2026 05:09:10 +0000 Manifest next update: Thu 05 Feb 2026 08:12:10 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: GeKRaAJeplOg/vTKTZkiiWn2yUInWpHmLmk0wn8YgYA=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:68:e7:ba:bd:51:81:72:7f:55:03:dd:55:50:b0:00:33:e4:2e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Feb 4 05:09:10 2026 GMT Not After : Feb 5 08:12:10 2026 GMT Subject: CN=521B0B48F6C65851FCFCB4825D01CDEA38FAA814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:a4:37:b4:2d:ca:3f:38:43:40:8a:8e:0e: 89:dc:da:48:90:ec:31:e6:26:28:b9:76:6f:90:9e: 81:65:a1:2e:7f:ef:fc:76:75:5f:1a:25:ab:c9:82: 3a:e6:51:d9:21:70:cc:73:ad:67:6f:8e:88:95:65: eb:52:d4:52:49:c8:a4:27:a4:c3:39:9b:70:ff:6d: 5a:8b:f4:0f:6b:da:6f:53:9a:f1:27:3a:2b:9b:49: dc:ee:05:a0:52:0f:45:f8:a3:58:33:bf:4d:f6:0a: 65:52:ac:e1:23:8e:68:01:9e:0d:6c:ca:ca:96:4e: 37:0c:c1:92:63:30:64:1a:45:d3:f9:35:ad:94:90: a6:88:95:9a:db:7e:ba:35:dd:d9:48:de:14:1f:09: 27:f2:c2:86:7f:44:63:71:8b:5f:bc:87:64:6b:7e: 67:5c:73:a8:8e:8e:69:e8:21:25:f9:a8:18:b8:98: 2a:da:8e:35:d4:22:c7:59:56:3e:ba:85:45:62:1e: 70:d8:33:57:02:7e:a2:ba:f7:20:2b:34:93:65:df: cf:76:0d:33:9b:3e:d2:97:f1:5a:46:6f:19:bf:99: cc:de:08:96:f8:aa:c4:51:08:1c:e5:be:27:8a:68: cb:22:13:cf:7b:2c:cb:5c:a8:8b:dd:14:a3:e5:58: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1B:0B:48:F6:C6:58:51:FC:FC:B4:82:5D:01:CD:EA:38:FA:A8:14 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:49:f2:8d:f7:f7:9d:8d:c2:4d:62:6a:6f:92:d6:24:48:0c: 4c:23:fb:5d:1d:05:8b:e1:b9:88:03:fd:ef:b0:f6:ae:22:af: fe:24:00:06:ba:39:44:17:be:1f:e8:bc:4f:41:0e:58:6f:ed: cf:c0:0f:cb:50:50:2a:b3:f6:06:69:39:00:27:23:72:39:33: 77:55:6c:29:cd:4d:5f:d0:36:1a:62:7a:46:66:31:9f:7d:ca: 09:09:c1:77:2b:59:6d:cd:e0:28:23:34:86:03:3b:a1:8a:0c: c0:ed:4b:4b:b3:89:74:08:20:10:01:92:43:c4:b5:38:1a:01: 41:eb:b4:31:94:7a:03:e9:de:f8:0f:ef:c7:20:86:63:18:1a: 05:12:65:a1:10:72:1c:21:c5:4f:b1:b0:f9:a4:8e:75:8e:22: 28:e4:af:2a:43:24:cd:0e:17:23:0b:45:0a:51:39:34:ba:c7: 1c:a4:e5:1c:c0:32:03:a4:2f:65:23:5f:8d:eb:80:01:be:cc: 8b:be:82:d1:d4:94:8f:4f:d4:bb:50:ef:f4:f3:96:96:dd:66: 9f:8e:01:f0:d5:3a:63:0a:22:96:1e:88:25:90:27:27:ee:0f: c9:5f:b7:f9:51:80:eb:8b:6a:15:5b:a5:85:e2:b6:0d:5f:5a: fe:d4:32:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUb2jnur1RgXJ/VQPdVVCwADPkLowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAyMDQwNTA5MTBaFw0yNjAyMDUwODEyMTBaMDMxMTAvBgNV BAMTKDUyMUIwQjQ4RjZDNjU4NTFGQ0ZDQjQ4MjVEMDFDREVBMzhGQUE4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7aQ3tC3KPzhDQIqODonc2kiQ 7DHmJii5dm+QnoFloS5/7/x2dV8aJavJgjrmUdkhcMxzrWdvjoiVZetS1FJJyKQn pMM5m3D/bVqL9A9r2m9TmvEnOiubSdzuBaBSD0X4o1gzv032CmVSrOEjjmgBng1s ysqWTjcMwZJjMGQaRdP5Na2UkKaIlZrbfro13dlI3hQfCSfywoZ/RGNxi1+8h2Rr fmdcc6iOjmnoISX5qBi4mCrajjXUIsdZVj66hUViHnDYM1cCfqK69yArNJNl3892 DTObPtKX8VpGbxm/mczeCJb4qsRRCBzlvieKaMsiE897LMtcqIvdFKPlWLCpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUhsLSPbGWFH8/LSCXQHN6jj6qBQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEnyjff3nY3CTWJqb5LW JEgMTCP7XR0Fi+G5iAP977D2riKv/iQABro5RBe+H+i8T0EOWG/tz8APy1BQKrP2 Bmk5ACcjcjkzd1VsKc1NX9A2GmJ6RmYxn33KCQnBdytZbc3gKCM0hgM7oYoMwO1L S7OJdAggEAGSQ8S1OBoBQeu0MZR6A+ne+A/vxyCGYxgaBRJloRByHCHFT7Gw+aSO dY4iKOSvKkMkzQ4XIwtFClE5NLrHHKTlHMAyA6QvZSNfjeuAAb7Mi76C0dSUj0/U u1Dv9POWlt1mn44B8NU6Ywoilh6IJZAnJ+4PyV+3+VGA64tqFVulheK2DV9a/tQy RA== -----END CERTIFICATE-----Generated at Wed Feb 4 11:39:58 2026 by rpki-client