This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: vtEQQv2AdJyTqS2usDo24NwTmtTSW07932hbYaADBGM= Subject key identifier: D1:28:36:A0:20:96:67:88:F0:13:66:41:DA:D2:88:81:51:E4:4B:E1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7D7BB3DE0A2335B6123E995A0EFCA1BC1D4C06E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F2 Signing time: Fri 21 Nov 2025 22:43:35 +0000 Manifest this update: Fri 21 Nov 2025 22:38:35 +0000 Manifest next update: Sat 22 Nov 2025 23:54:35 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: b64KJWO91kwW+RWpDZySFKYtRnEwfRiQDPb7K0bo4eI=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 16:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7b:b3:de:0a:23:35:b6:12:3e:99:5a:0e:fc:a1:bc:1d:4c:06:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 21 22:38:35 2025 GMT Not After : Nov 22 23:54:35 2025 GMT Subject: CN=D12836A020966788F0136641DAD2888151E44BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:e9:ae:72:84:f4:e1:2c:11:5c:31:1f:01: 9b:c0:31:97:90:af:9c:e0:01:7c:eb:05:02:47:ab: 51:be:30:93:17:60:b4:18:7f:65:f1:38:3b:cc:41: 34:5f:74:be:89:b4:8c:55:3b:3e:91:44:90:f2:5a: af:c1:e4:3d:1c:1d:60:a2:28:b0:39:40:b9:12:15: 3c:2b:fd:20:e7:67:0d:fe:26:80:7b:c6:d5:fd:15: 06:d0:1b:9a:d1:ca:8b:64:f1:88:90:8b:36:b5:a0: 87:6b:c3:f5:27:3f:34:cb:05:0d:ec:a3:30:59:d1: e7:b4:17:9d:9f:ed:df:97:e2:cd:ff:b3:c9:f7:86: 9d:e3:de:5e:43:d6:a9:c2:0f:d2:90:54:19:60:36: 8e:f2:12:94:1c:41:df:7d:eb:8a:aa:be:45:a9:d9: ed:8b:cc:57:96:2d:8c:e9:3c:b8:11:1b:e0:21:f8: b9:20:7a:93:76:40:5a:a9:46:e0:8f:68:ee:0b:8b: 57:3b:6a:fd:be:09:b6:f0:89:a1:db:db:1e:67:05: ff:47:2d:f6:ac:2d:b6:8e:df:a6:65:52:00:8f:e3: db:50:1d:90:25:48:df:3c:d3:d9:77:75:90:f6:fb: e8:98:78:4a:a9:c7:4a:64:fb:16:c3:f3:0f:8f:d3: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:36:A0:20:96:67:88:F0:13:66:41:DA:D2:88:81:51:E4:4B:E1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6c:00:38:81:b7:f2:cc:f6:99:20:67:c9:04:61:6a:77:96: bd:ac:94:8c:71:98:28:ff:7d:f4:88:ed:65:2b:d9:eb:81:6b: 35:dd:a7:12:76:3b:76:ca:fa:f6:f8:e3:36:89:34:30:58:96: 4d:1f:60:f8:e8:6a:e6:b2:f5:5f:81:ed:26:9a:aa:68:e9:32: fe:c5:da:89:0b:58:bd:14:a5:8c:09:c7:ed:33:25:a4:c6:54: 98:4b:27:42:34:75:f2:63:2e:46:0f:b7:27:40:93:ed:bc:58: 1b:71:b3:ce:af:fa:a7:78:73:b0:71:2f:b9:e5:e7:d9:8f:f6: 7c:28:70:6d:e9:6f:21:b2:ec:40:e9:a0:6b:28:d4:d1:99:a0: e0:3e:47:60:9b:db:8a:b5:32:d3:ee:92:dd:95:6f:88:46:12: 4c:b4:31:f3:67:e4:05:3a:3b:f9:a4:43:7f:37:cf:af:eb:37: 7b:f7:db:55:7c:55:d7:6f:2d:f1:bb:da:a3:50:ba:99:50:c0: 0e:a5:2e:9c:2e:4a:48:67:58:30:9e:47:07:cb:c2:5f:78:0f: 4c:53:36:c6:fc:7f:84:36:84:bc:0d:78:05:79:58:fd:df:43: c3:e2:2e:a9:db:83:30:ce:e9:a3:5a:6b:92:2c:10:85:ee:63: a3:2c:27:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfXuz3gojNbYSPplaDvyhvB1MBugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjEyMjM4MzVaFw0yNTExMjIyMzU0MzVaMDMxMTAvBgNV BAMTKEQxMjgzNkEwMjA5NjY3ODhGMDEzNjY0MURBRDI4ODgxNTFFNDRCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURumucoT04SwRXDEfAZvAMZeQ r5zgAXzrBQJHq1G+MJMXYLQYf2XxODvMQTRfdL6JtIxVOz6RRJDyWq/B5D0cHWCi KLA5QLkSFTwr/SDnZw3+JoB7xtX9FQbQG5rRyotk8YiQiza1oIdrw/UnPzTLBQ3s ozBZ0ee0F52f7d+X4s3/s8n3hp3j3l5D1qnCD9KQVBlgNo7yEpQcQd9964qqvkWp 2e2LzFeWLYzpPLgRG+Ah+LkgepN2QFqpRuCPaO4Li1c7av2+CbbwiaHb2x5nBf9H LfasLbaO36ZlUgCP49tQHZAlSN8809l3dZD2++iYeEqpx0pk+xbD8w+P08dtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0Sg2oCCWZ4jwE2ZB2tKIgVHkS+EwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWwAOIG38sz2mSBnyQRh aneWvayUjHGYKP999IjtZSvZ64FrNd2nEnY7dsr69vjjNok0MFiWTR9g+Ohq5rL1 X4HtJpqqaOky/sXaiQtYvRSljAnH7TMlpMZUmEsnQjR18mMuRg+3J0CT7bxYG3Gz zq/6p3hzsHEvueXn2Y/2fChwbelvIbLsQOmgayjU0Zmg4D5HYJvbirUy0+6S3ZVv iEYSTLQx82fkBTo7+aRDfzfPr+s3e/fbVXxV128t8bvao1C6mVDADqUunC5KSGdY MJ5HB8vCX3gPTFM2xvx/hDaEvA14BXlY/d9Dw+IuqduDMM7po1prkiwQhe5joywn Xg== -----END CERTIFICATE-----Generated at Sat Nov 22 00:59:40 2025 by rpki-client