This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: T9m/viRWgEXGPtM7jmsdTDVg4oni0/SxdwjRBib9d8c= Subject key identifier: C7:25:28:23:11:EF:B0:7F:80:DC:2C:80:23:3A:E7:AC:0D:42:CE:1E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 1B941F50F42A22CAC38C62C9C42284D7ECBC9E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F3 Signing time: Sat 22 Nov 2025 15:57:01 +0000 Manifest this update: Sat 22 Nov 2025 15:52:01 +0000 Manifest next update: Sun 23 Nov 2025 19:24:01 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: xU9ySVWtI+rNLEBom2ypHOnFvA37UXo9vb5+ihROS+0=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 19:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:94:1f:50:f4:2a:22:ca:c3:8c:62:c9:c4:22:84:d7:ec:bc:9e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 22 15:52:01 2025 GMT Not After : Nov 23 19:24:01 2025 GMT Subject: CN=C725282311EFB07F80DC2C80233AE7AC0D42CE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bb:45:b6:ad:40:ab:60:0f:d9:47:36:34:b0: 43:55:8f:12:7d:cb:71:47:f6:01:15:03:3a:3b:84: a4:ed:2e:a0:b5:6e:31:c0:88:b3:0a:f0:93:c3:43: 7b:10:96:3e:e2:52:10:b3:e2:6b:6a:68:58:37:c3: 77:ac:35:4b:64:23:33:62:a6:01:82:f2:29:47:11: a8:1c:5f:59:50:53:d9:eb:ff:c3:9b:2e:56:17:3b: 38:ba:bf:9f:4a:43:0f:99:ea:b3:99:bb:f3:e2:6b: 32:b4:d2:ed:35:8b:78:9b:18:75:68:23:56:42:b3: 25:98:bc:74:a7:f8:c7:20:c4:7e:00:4e:64:1d:9f: 07:48:05:17:b4:8e:8d:bf:43:55:65:2c:e5:01:4b: 37:05:98:0e:44:de:c6:c0:f2:14:12:fa:3c:9b:a8: 51:24:e8:af:01:5b:e6:71:1d:cd:08:8c:db:f2:1f: 7d:09:09:af:49:70:91:f8:8c:44:f6:12:8a:24:08: c6:83:5d:04:0d:5a:fd:71:ae:4a:ff:1b:7d:19:7a: ba:0e:33:60:23:58:28:6e:f8:59:8c:00:ae:ec:94: 09:aa:ba:09:61:a0:6f:26:51:bb:fe:9a:4c:21:60: bb:cf:0f:b4:1e:b6:03:1f:90:07:4e:7e:53:47:5e: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:25:28:23:11:EF:B0:7F:80:DC:2C:80:23:3A:E7:AC:0D:42:CE:1E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:32:55:10:fb:8a:89:11:bc:88:3b:85:25:52:42:97:1b:09: 0a:0b:d6:f4:07:93:dc:5c:eb:98:7f:06:b1:23:3a:c1:1e:a5: 0a:cb:b3:69:0f:7f:38:31:78:07:b9:d0:e8:4d:77:b9:4d:4c: fb:2a:13:f4:ee:e7:c1:ab:c9:12:11:13:8e:66:aa:9c:71:43: 9f:4d:ef:79:ec:3a:e8:d4:ec:a9:71:98:57:a4:65:2f:1d:2a: 33:f2:be:35:55:3f:36:b3:35:2d:29:24:15:fb:08:df:63:58: e1:9f:07:f4:ff:e0:6f:80:50:86:45:ee:92:d8:bc:c9:ea:55: 38:4e:88:b9:6b:f8:9f:03:b1:7f:59:59:16:5f:fe:a3:70:a2: 37:50:08:88:ef:e0:50:ae:c7:07:37:60:5c:f5:ff:79:f1:1d: 7b:e0:02:7e:41:ed:2b:d8:9e:35:06:ef:36:c6:d9:01:e0:a8: b8:f2:44:0e:3a:fa:64:ec:b5:a4:68:f0:df:4b:0c:44:de:08: 54:ff:91:16:c6:75:02:c0:e7:8a:b2:ad:1e:c2:48:29:6d:a1: 69:b8:3b:bb:d3:06:65:75:8a:1a:2e:b7:36:e6:44:71:36:34: 2e:15:84:80:8e:dd:ed:cf:1f:36:0b:db:64:fa:b5:f0:67:3e: 0f:cf:89:3a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG5QfUPQqIsrDjGLJxCKE1+y8ng0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjIxNTUyMDFaFw0yNTExMjMxOTI0MDFaMDMxMTAvBgNV BAMTKEM3MjUyODIzMTFFRkIwN0Y4MERDMkM4MDIzM0FFN0FDMEQ0MkNFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcu0W2rUCrYA/ZRzY0sENVjxJ9 y3FH9gEVAzo7hKTtLqC1bjHAiLMK8JPDQ3sQlj7iUhCz4mtqaFg3w3esNUtkIzNi pgGC8ilHEagcX1lQU9nr/8ObLlYXOzi6v59KQw+Z6rOZu/PiazK00u01i3ibGHVo I1ZCsyWYvHSn+McgxH4ATmQdnwdIBRe0jo2/Q1VlLOUBSzcFmA5E3sbA8hQS+jyb qFEk6K8BW+ZxHc0IjNvyH30JCa9JcJH4jET2EookCMaDXQQNWv1xrkr/G30ZeroO M2AjWChu+FmMAK7slAmquglhoG8mUbv+mkwhYLvPD7QetgMfkAdOflNHXv7DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxyUoIxHvsH+A3CyAIzrnrA1Czh4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjJVEPuKiRG8iDuFJVJC lxsJCgvW9AeT3FzrmH8GsSM6wR6lCsuzaQ9/ODF4B7nQ6E13uU1M+yoT9O7nwavJ EhETjmaqnHFDn03veew66NTsqXGYV6RlLx0qM/K+NVU/NrM1LSkkFfsI32NY4Z8H 9P/gb4BQhkXukti8yepVOE6IuWv4nwOxf1lZFl/+o3CiN1AIiO/gUK7HBzdgXPX/ efEde+ACfkHtK9ieNQbvNsbZAeCouPJEDjr6ZOy1pGjw30sMRN4IVP+RFsZ1AsDn irKtHsJIKW2habg7u9MGZXWKGi63NuZEcTY0LhWEgI7d7c8fNgvbZPq18Gc+D8+J Og== -----END CERTIFICATE-----Generated at Sun Nov 23 02:35:07 2025 by rpki-client