This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 2562bke3u7VTy8JI3DUjSMT4TPxE8xTblvfHT172Ieo= Subject key identifier: 5B:60:00:90:03:44:20:F3:D6:5B:E5:3F:D9:C8:07:08:FC:44:5A:D2 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2AF7D0C637DBE4F5CEBC179DF8F94FE6EDB94FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0412 Signing time: Tue 16 Dec 2025 02:24:16 +0000 Manifest this update: Tue 16 Dec 2025 02:19:16 +0000 Manifest next update: Wed 17 Dec 2025 03:48:16 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: OETf8L8pProDRHKehkxHhYei2TSfio/62egsctP/Zcc=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f7:d0:c6:37:db:e4:f5:ce:bc:17:9d:f8:f9:4f:e6:ed:b9:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 16 02:19:16 2025 GMT Not After : Dec 17 03:48:16 2025 GMT Subject: CN=5B600090034420F3D65BE53FD9C80708FC445AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:9a:75:a4:09:eb:69:a7:0e:36:62:ff:ba: 4a:ba:c7:09:3f:3f:d7:9b:87:22:50:45:d9:cc:12: 2f:9a:1d:88:d5:fd:25:54:ca:b7:b7:4e:90:68:c2: 3d:1d:e4:e7:a8:d7:3b:57:5a:69:d6:4c:d5:ba:f7: 4e:94:76:9d:ca:9c:61:a8:f7:53:2c:a7:66:29:08: eb:09:96:f8:2b:2f:d6:f1:78:ac:fd:1a:18:b6:6e: 59:dc:07:17:b9:7c:b5:28:aa:66:39:4e:3e:62:7d: 76:b5:19:b4:ae:19:fa:67:45:28:0c:73:c0:d6:d1: e6:2e:84:c4:ff:f0:17:16:d4:aa:bf:98:f1:68:06: 3f:cf:1f:46:cd:d3:22:f1:cb:e5:ed:c9:b4:c4:1e: 61:4a:14:4a:49:61:e1:d2:4b:06:8e:26:ed:54:fe: f3:77:ec:39:05:34:08:7c:7c:42:b4:65:09:8b:15: ef:69:48:63:da:42:9c:8f:33:53:80:b5:fe:ad:67: ff:26:25:4a:77:0e:eb:58:93:00:3f:21:77:f7:66: 03:c3:90:63:8e:80:bd:e7:22:20:bd:df:53:42:7e: 6a:45:6c:c5:7f:de:6e:4f:72:6d:c6:49:68:72:c8: 62:c2:54:ab:ac:d4:56:7a:21:90:37:d8:d1:65:ad: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:60:00:90:03:44:20:F3:D6:5B:E5:3F:D9:C8:07:08:FC:44:5A:D2 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:32:73:53:98:98:c2:1c:58:a7:01:7a:ea:ca:2e:4e:af:d8: e2:aa:a1:eb:c1:81:d4:60:2a:92:40:0b:15:b7:5d:0a:60:7a: 5f:2b:96:39:71:62:b7:3e:5b:b5:65:87:7b:d0:b9:ec:32:d5: 98:ee:22:c2:0d:28:89:d7:4d:b6:16:e8:3a:a7:13:0a:25:fc: 41:60:63:f2:3b:f2:67:45:48:22:34:e0:17:ca:0f:7f:ca:6b: 47:b7:41:a3:b4:53:0f:df:8c:68:19:b6:3f:a5:11:c9:f9:39: 49:49:11:73:83:72:e6:06:73:71:ec:cb:02:24:b8:9b:d0:74: 46:97:eb:c4:a3:1c:3d:be:e2:7c:ca:ae:28:bb:e2:bf:07:ab: e9:73:24:79:b9:9a:5e:b1:e1:f8:02:a8:9e:b5:6a:2d:e0:9b: 27:71:47:60:81:a4:ad:c8:1a:97:8f:7a:3e:99:ce:5a:79:eb: 59:02:fd:cc:c3:ee:e3:e4:5f:57:75:66:a2:65:ee:6c:05:bb: 36:67:24:35:0f:4e:f1:df:f3:02:f4:bd:e3:8a:07:37:ad:d4: b2:7a:dd:21:f9:6c:1b:30:37:dd:9e:3e:ad:07:64:7d:3c:60: f7:b5:10:b9:ed:91:1a:86:7a:e6:38:29:7f:ee:cf:f6:7d:5d: 0b:c8:85:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKvfQxjfb5PXOvBed+PlP5u25T9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTYwMjE5MTZaFw0yNTEyMTcwMzQ4MTZaMDMxMTAvBgNV BAMTKDVCNjAwMDkwMDM0NDIwRjNENjVCRTUzRkQ5QzgwNzA4RkM0NDVBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORpp1pAnraacONmL/ukq6xwk/ P9ebhyJQRdnMEi+aHYjV/SVUyre3TpBowj0d5Oeo1ztXWmnWTNW6906Udp3KnGGo 91Msp2YpCOsJlvgrL9bxeKz9Ghi2blncBxe5fLUoqmY5Tj5ifXa1GbSuGfpnRSgM c8DW0eYuhMT/8BcW1Kq/mPFoBj/PH0bN0yLxy+XtybTEHmFKFEpJYeHSSwaOJu1U /vN37DkFNAh8fEK0ZQmLFe9pSGPaQpyPM1OAtf6tZ/8mJUp3DutYkwA/IXf3ZgPD kGOOgL3nIiC931NCfmpFbMV/3m5Pcm3GSWhyyGLCVKus1FZ6IZA32NFlrYHFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW2AAkANEIPPWW+U/2cgHCPxEWtIwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTJzU5iYwhxYpwF66sou Tq/Y4qqh68GB1GAqkkALFbddCmB6XyuWOXFitz5btWWHe9C57DLVmO4iwg0oiddN thboOqcTCiX8QWBj8jvyZ0VIIjTgF8oPf8prR7dBo7RTD9+MaBm2P6URyfk5SUkR c4Ny5gZzcezLAiS4m9B0RpfrxKMcPb7ifMquKLvivwer6XMkebmaXrHh+AKonrVq LeCbJ3FHYIGkrcgal496PpnOWnnrWQL9zMPu4+RfV3VmomXubAW7NmckNQ9O8d/z AvS944oHN63UsnrdIflsGzA33Z4+rQdkfTxg97UQue2RGoZ65jgpf+7P9n1dC8iF IQ== -----END CERTIFICATE-----Generated at Tue Dec 16 08:45:25 2025 by rpki-client