This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: tMT9b+ixXHnM7AGHlfqN4r7a+t2pG39d5l74JtDIvrg= Subject key identifier: B9:5C:FA:11:13:49:88:AD:35:DA:08:06:DB:46:63:44:C9:6F:24:88 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3CE87B4751408E7ABCA147D04173878AD27420C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 043F Signing time: Sun 18 Jan 2026 16:25:03 +0000 Manifest this update: Sun 18 Jan 2026 16:20:03 +0000 Manifest next update: Mon 19 Jan 2026 17:42:03 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: HdAMBv546ZRbPxEk6AipBA5jc1tHwoUVfloG6J+h/rQ=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 17:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e8:7b:47:51:40:8e:7a:bc:a1:47:d0:41:73:87:8a:d2:74:20:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 18 16:20:03 2026 GMT Not After : Jan 19 17:42:03 2026 GMT Subject: CN=B95CFA11134988AD35DA0806DB466344C96F2488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:0b:14:56:27:24:8a:e9:f2:e4:32:7f:47: 07:e5:f4:ac:b5:35:8f:31:a0:a8:c0:85:b7:5d:57: e1:9b:d8:db:df:ff:b8:9e:c5:bb:77:80:a1:5d:ee: 8a:3f:38:36:89:3b:ba:2c:fd:49:c7:87:1a:5e:9f: bc:13:b0:42:20:01:a5:5a:ec:42:67:02:85:8e:9f: e6:c1:be:f2:51:f1:ed:80:4f:72:cb:a9:63:d1:66: 64:88:53:d9:18:e5:eb:b0:ab:41:d2:64:e1:fc:af: 0f:d3:c4:92:52:ea:9a:6d:07:c5:5c:eb:65:bf:62: 1e:8b:e5:0a:74:26:16:66:44:e1:28:63:6f:ff:0b: 9f:e9:d2:cb:90:c5:ac:a0:9a:87:8f:6d:8c:fa:66: 42:56:fa:73:79:f3:0f:05:02:4c:4c:fe:90:ac:32: a4:81:ef:98:9e:51:c3:67:c9:2a:f7:8e:03:35:10: 1f:e6:7f:e3:5d:43:c3:45:38:b4:2c:29:1e:53:bf: 4f:13:f2:21:8f:7e:07:6f:f9:c3:c7:34:2a:1b:bf: f8:b4:c1:f0:00:2a:09:10:d3:e0:17:57:00:45:2e: 51:1a:e6:16:97:21:66:84:c9:5c:bd:35:16:73:f8: c8:41:99:ea:63:cc:a6:07:71:b5:d4:da:a6:ca:97: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:FA:11:13:49:88:AD:35:DA:08:06:DB:46:63:44:C9:6F:24:88 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:90:92:ba:4a:3c:ab:60:e3:e6:aa:ba:f0:d8:cb:08:c1:9d: 43:2a:b4:98:21:d2:48:da:7c:50:19:9a:e5:08:c3:53:43:ff: ab:9c:97:dd:b2:e3:ae:2d:f1:df:55:24:c5:8d:4e:d3:5c:63: 28:12:18:9b:aa:e6:a0:6c:6c:38:56:76:cf:ff:bd:c7:cd:b7: b7:5b:1b:cb:68:56:3e:51:cf:8d:f7:4c:1c:d0:bb:24:bd:ec: 90:ac:33:1e:b5:ec:ff:00:41:71:2d:e5:4d:c8:22:d9:4e:32: 49:a2:f3:d1:5c:19:96:49:22:96:a8:4c:ae:d0:01:b4:12:75: d8:38:37:d8:62:4d:f9:0e:08:a8:f8:b3:d7:d0:54:72:32:42: af:99:15:57:50:b8:a8:44:c6:89:12:e1:a7:5a:da:98:f7:9c: 9b:ae:7a:90:d6:c3:d2:31:ef:d2:32:97:d2:42:63:34:de:1a: 99:c8:57:c8:6d:26:55:11:d5:53:be:dc:3b:06:bd:2e:53:44: 46:f3:5b:00:58:71:2a:a4:b0:ec:4f:f7:8f:30:d5:42:04:42: 7f:d2:30:f1:bc:ce:fa:bf:00:00:b3:fd:73:ac:d1:64:bc:58: 00:4c:1b:31:98:75:f6:e3:13:95:9f:f9:e1:9e:ef:ba:4f:2e: 38:ff:af:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPOh7R1FAjnq8oUfQQXOHitJ0IMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMTgxNjIwMDNaFw0yNjAxMTkxNzQyMDNaMDMxMTAvBgNV BAMTKEI5NUNGQTExMTM0OTg4QUQzNURBMDgwNkRCNDY2MzQ0Qzk2RjI0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18gsUVickiuny5DJ/Rwfl9Ky1 NY8xoKjAhbddV+Gb2Nvf/7iexbt3gKFd7oo/ODaJO7os/UnHhxpen7wTsEIgAaVa 7EJnAoWOn+bBvvJR8e2AT3LLqWPRZmSIU9kY5euwq0HSZOH8rw/TxJJS6pptB8Vc 62W/Yh6L5Qp0JhZmROEoY2//C5/p0suQxaygmoePbYz6ZkJW+nN58w8FAkxM/pCs MqSB75ieUcNnySr3jgM1EB/mf+NdQ8NFOLQsKR5Tv08T8iGPfgdv+cPHNCobv/i0 wfAAKgkQ0+AXVwBFLlEa5haXIWaEyVy9NRZz+MhBmepjzKYHcbXU2qbKl7hVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuVz6ERNJiK012ggG20ZjRMlvJIgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZCSuko8q2Dj5qq68NjL CMGdQyq0mCHSSNp8UBma5QjDU0P/q5yX3bLjri3x31UkxY1O01xjKBIYm6rmoGxs OFZ2z/+9x823t1sby2hWPlHPjfdMHNC7JL3skKwzHrXs/wBBcS3lTcgi2U4ySaLz 0VwZlkkilqhMrtABtBJ12Dg32GJN+Q4IqPiz19BUcjJCr5kVV1C4qETGiRLhp1ra mPecm656kNbD0jHv0jKX0kJjNN4amchXyG0mVRHVU77cOwa9LlNERvNbAFhxKqSw 7E/3jzDVQgRCf9Iw8bzO+r8AALP9c6zRZLxYAEwbMZh19uMTlZ/54Z7vuk8uOP+v iQ== -----END CERTIFICATE-----Generated at Mon Jan 19 10:59:09 2026 by rpki-client