This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 7EVIDyNZ8I+zYBm/KSIJE8VOaVXcak1Zq0e8hnXV/VQ= Subject key identifier: A6:CB:7C:18:54:49:97:E0:A0:24:38:63:44:42:08:17:15:8B:D2:55 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 07EFC32D30E477942A1807116221B774F5709007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0442 Signing time: Tue 20 Jan 2026 21:30:39 +0000 Manifest this update: Tue 20 Jan 2026 21:25:39 +0000 Manifest next update: Wed 21 Jan 2026 22:54:39 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 4rjuGXVFGakl7T3ddYg+W+BJZ+34z8l4mCbzgigN9DM=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ef:c3:2d:30:e4:77:94:2a:18:07:11:62:21:b7:74:f5:70:90:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 20 21:25:39 2026 GMT Not After : Jan 21 22:54:39 2026 GMT Subject: CN=A6CB7C18544997E0A024386344420817158BD255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:34:bd:48:a0:1b:10:8a:4c:68:4f:94:73: 21:c6:ad:2b:ae:a3:01:a2:ae:db:01:6e:e1:c6:3a: 3b:86:b0:64:05:74:a4:be:ed:4f:c8:10:b2:e8:36: 80:d3:ca:b8:6f:bb:2e:a8:11:2e:f0:fc:de:04:cf: d3:81:40:60:15:12:f7:05:1e:35:6c:1c:ea:38:04: 5c:46:7c:7b:7c:fa:a3:03:9e:f8:bb:a9:68:9b:4d: 09:84:49:29:04:30:86:1b:b1:47:ae:14:ed:08:36: 03:e6:ac:e4:6a:bb:1e:c4:fc:ae:76:b5:94:3f:1e: 6a:6a:de:ef:b1:93:d1:b7:0a:e6:0a:42:27:b5:ee: e2:aa:35:99:d0:f1:71:99:6f:0d:18:b0:ed:70:99: 28:a5:8d:ef:6a:28:39:e5:d2:d5:f9:09:53:77:5c: 2b:7c:f6:61:a9:d9:63:0a:4c:db:40:4f:99:a0:01: db:62:9d:70:0d:21:6d:57:e2:fd:12:10:1d:fb:8a: 71:8b:aa:f3:85:2e:97:61:e3:4c:13:09:fd:eb:dc: 90:02:30:09:6d:9b:65:50:92:e4:23:b6:21:82:e8: cc:53:53:4a:be:79:97:f0:8e:8e:79:8b:1d:63:0b: 7e:be:a7:1d:45:62:23:a3:65:15:3e:24:d2:39:08: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CB:7C:18:54:49:97:E0:A0:24:38:63:44:42:08:17:15:8B:D2:55 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c3:f1:65:2a:53:69:f3:e2:e9:37:b4:ea:c9:b3:0b:d0:ec: 79:e5:7f:b2:45:08:5b:a4:5d:67:c1:bc:1d:0a:26:89:1b:a5: a1:71:34:40:ff:0f:d8:f4:61:56:c5:08:1e:67:79:73:9b:c5: 2d:bf:92:65:11:de:4f:1b:28:e7:08:15:ff:03:7d:c0:d7:53: 08:d7:06:57:9d:64:c7:b3:58:5f:80:0d:f7:b8:50:04:a7:bd: a4:97:b4:b5:3f:4d:8c:5b:48:59:b5:04:d3:89:2a:47:ed:d6: 59:ed:cf:86:03:6b:be:9a:4e:e3:49:03:54:27:fb:89:92:d7: a5:d6:ee:f1:0e:1f:ac:12:5b:d1:d1:58:85:ff:d7:cd:09:e5: 05:d5:c1:d0:fd:e1:f5:56:9b:52:1a:1d:ef:1c:94:28:ce:a1: 2d:b3:71:02:9e:95:1f:49:a9:69:a2:34:d8:b1:c9:b9:12:25: 88:f4:c7:66:08:e6:3b:65:6b:b2:f7:b8:34:08:de:3b:a0:03: 2c:48:1f:90:ad:5c:a4:c7:b0:05:b9:19:5c:a8:5d:b5:5c:89: 71:54:40:34:47:98:52:69:3c:48:83:84:8f:ce:8b:43:bb:f0: 29:e6:13:5b:92:82:1b:36:8c:bf:07:02:96:96:9e:a1:56:b0: 33:02:f1:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUB+/DLTDkd5QqGAcRYiG3dPVwkAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMjAyMTI1MzlaFw0yNjAxMjEyMjU0MzlaMDMxMTAvBgNV BAMTKEE2Q0I3QzE4NTQ0OTk3RTBBMDI0Mzg2MzQ0NDIwODE3MTU4QkQyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ADS9SKAbEIpMaE+UcyHGrSuu owGirtsBbuHGOjuGsGQFdKS+7U/IELLoNoDTyrhvuy6oES7w/N4Ez9OBQGAVEvcF HjVsHOo4BFxGfHt8+qMDnvi7qWibTQmESSkEMIYbsUeuFO0INgPmrORqux7E/K52 tZQ/Hmpq3u+xk9G3CuYKQie17uKqNZnQ8XGZbw0YsO1wmSilje9qKDnl0tX5CVN3 XCt89mGp2WMKTNtAT5mgAdtinXANIW1X4v0SEB37inGLqvOFLpdh40wTCf3r3JAC MAltm2VQkuQjtiGC6MxTU0q+eZfwjo55ix1jC36+px1FYiOjZRU+JNI5CDpxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpst8GFRJl+CgJDhjREIIFxWL0lUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8PxZSpTafPi6Te06smz C9DseeV/skUIW6RdZ8G8HQomiRuloXE0QP8P2PRhVsUIHmd5c5vFLb+SZRHeTxso 5wgV/wN9wNdTCNcGV51kx7NYX4AN97hQBKe9pJe0tT9NjFtIWbUE04kqR+3WWe3P hgNrvppO40kDVCf7iZLXpdbu8Q4frBJb0dFYhf/XzQnlBdXB0P3h9VabUhod7xyU KM6hLbNxAp6VH0mpaaI02LHJuRIliPTHZgjmO2Vrsve4NAjeO6ADLEgfkK1cpMew BbkZXKhdtVyJcVRANEeYUmk8SIOEj86LQ7vwKeYTW5KCGzaMvwcClpaeoVawMwLx rQ== -----END CERTIFICATE-----Generated at Tue Jan 20 23:52:51 2026 by rpki-client