This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: EbZCMrFgF0N2QrdtO1E6d851QNNwVgbRiUnlsbw/TMo= Subject key identifier: A7:03:3C:42:ED:FE:1D:8C:8B:F7:2C:7E:75:FF:F7:66:20:3C:16:D4 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4B8BF9D0CE0B02AA3C3B3B32C893655E711B74A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0420 Signing time: Fri 26 Dec 2025 15:39:49 +0000 Manifest this update: Fri 26 Dec 2025 15:34:49 +0000 Manifest next update: Sat 27 Dec 2025 19:04:49 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7tZ09xMgDcX7lkcVZBIc3E9hP9ETDmn8AASD4cmjFFM=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:f9:d0:ce:0b:02:aa:3c:3b:3b:32:c8:93:65:5e:71:1b:74:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 26 15:34:49 2025 GMT Not After : Dec 27 19:04:49 2025 GMT Subject: CN=A7033C42EDFE1D8C8BF72C7E75FFF766203C16D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:b3:9c:24:4a:cc:13:88:04:04:39:e7:5a: 8e:ee:ca:35:49:d3:5f:bf:3f:39:22:fc:a9:8f:22: f0:98:a7:05:d1:74:8e:0c:b3:d4:e6:3f:79:ba:66: 57:08:73:bd:27:b9:2e:a8:9d:f4:5f:54:48:81:5e: c7:47:12:f6:30:6a:81:00:13:d0:7a:01:95:76:10: 42:07:b6:4f:ab:3e:10:01:f0:ec:a1:3a:44:5e:6d: 58:55:dc:ad:35:a5:ca:64:50:89:d3:95:8b:ca:29: e8:88:1f:5e:31:dd:82:c9:f7:28:06:1d:75:98:dd: 84:68:de:d1:06:91:f1:ab:80:8a:d3:cc:9d:73:23: 9f:b6:a9:0f:8d:f5:e9:b5:81:de:b2:67:b7:12:b5: 65:19:b0:f0:d4:ab:36:73:62:61:f9:cc:51:b7:27: a6:1c:cf:f0:0f:a4:04:18:cd:cd:b2:a0:7d:e2:29: 40:3b:61:84:3b:72:49:f2:f3:b0:eb:1e:04:1e:87: 73:ea:ac:dc:1c:18:1a:e1:61:81:e9:a3:fb:ef:8e: f5:46:d4:15:a3:80:b3:2e:d3:74:bd:4d:ff:0f:91: c0:5f:f4:76:a9:33:c6:ab:9d:0d:8d:f8:44:07:0c: 28:a7:ea:9c:eb:6b:9b:f0:5b:3f:cd:b6:1a:7b:68: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:03:3C:42:ED:FE:1D:8C:8B:F7:2C:7E:75:FF:F7:66:20:3C:16:D4 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b6:6e:cb:92:3b:35:6a:f9:a6:37:f8:39:3d:42:13:5e:93: 0f:43:ca:f8:d2:48:36:0d:44:6c:29:40:10:94:4b:44:34:aa: 7a:12:b1:0a:68:94:3f:30:5c:ed:6e:f7:20:96:6c:8d:db:39: e0:7b:bb:9c:d7:f9:29:2a:76:1c:20:42:83:d6:62:d0:3b:34: 6a:c6:34:11:69:1a:dc:67:f4:89:0e:c2:09:2a:31:1a:15:ce: f8:04:c1:31:9d:c3:db:e5:08:23:00:64:86:f5:92:b2:9c:25: c7:f1:c0:18:16:0d:b2:c2:03:ec:2c:d2:42:1f:93:60:56:46: 2e:5e:a0:cb:8f:9e:48:e8:c2:30:1d:45:b1:32:61:ea:d1:dc: 89:72:a0:2e:12:d2:ed:3f:eb:9a:bc:e6:c2:86:dc:b6:a7:15: fe:e1:08:e9:31:e8:63:7e:b6:56:a3:de:56:a4:20:7d:f0:cc: 53:1f:01:d6:b4:a9:80:a2:b2:a3:0f:fd:73:d4:8d:59:d1:7d: f9:53:9d:f1:d7:5b:5d:17:c5:83:17:dd:f6:3b:3c:59:16:83: 63:07:c6:4d:8c:f4:02:91:7b:be:aa:20:1f:a9:6e:df:66:90: 2e:cf:16:9c:73:8c:0f:d5:7a:b3:25:95:07:6d:b0:ea:47:7c: 69:74:99:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS4v50M4LAqo8OzsyyJNlXnEbdKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMjYxNTM0NDlaFw0yNTEyMjcxOTA0NDlaMDMxMTAvBgNV BAMTKEE3MDMzQzQyRURGRTFEOEM4QkY3MkM3RTc1RkZGNzY2MjAzQzE2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ57OcJErME4gEBDnnWo7uyjVJ 01+/Pzki/KmPIvCYpwXRdI4Ms9TmP3m6ZlcIc70nuS6onfRfVEiBXsdHEvYwaoEA E9B6AZV2EEIHtk+rPhAB8OyhOkRebVhV3K01pcpkUInTlYvKKeiIH14x3YLJ9ygG HXWY3YRo3tEGkfGrgIrTzJ1zI5+2qQ+N9em1gd6yZ7cStWUZsPDUqzZzYmH5zFG3 J6Ycz/APpAQYzc2yoH3iKUA7YYQ7ckny87DrHgQeh3PqrNwcGBrhYYHpo/vvjvVG 1BWjgLMu03S9Tf8PkcBf9HapM8arnQ2N+EQHDCin6pzra5vwWz/Nthp7aGZlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpwM8Qu3+HYyL9yx+df/3ZiA8FtQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbZuy5I7NWr5pjf4OT1C E16TD0PK+NJINg1EbClAEJRLRDSqehKxCmiUPzBc7W73IJZsjds54Hu7nNf5KSp2 HCBCg9Zi0Ds0asY0EWka3Gf0iQ7CCSoxGhXO+ATBMZ3D2+UIIwBkhvWSspwlx/HA GBYNssID7CzSQh+TYFZGLl6gy4+eSOjCMB1FsTJh6tHciXKgLhLS7T/rmrzmwobc tqcV/uEI6THoY362VqPeVqQgffDMUx8B1rSpgKKyow/9c9SNWdF9+VOd8ddbXRfF gxfd9js8WRaDYwfGTYz0ApF7vqogH6lu32aQLs8WnHOMD9V6syWVB22w6kd8aXSZ tg== -----END CERTIFICATE-----Generated at Fri Dec 26 19:31:42 2025 by rpki-client