This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: hBtP62FsF7shKiJ89UTLuNiuo4oGXhK+xYGOuF8/14U= Subject key identifier: 17:0E:68:2E:8A:3B:A2:F2:55:D2:D2:02:7E:31:DE:A9:C2:93:20:02 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2AF2AA297BC3E229524F1058042C64C5A23F59A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0410 Signing time: Sun 14 Dec 2025 12:51:47 +0000 Manifest this update: Sun 14 Dec 2025 12:46:47 +0000 Manifest next update: Mon 15 Dec 2025 14:42:47 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 4YBWQE/osdNNrO7Vnr3A61UBs4t8lJPJKedREpvQUFs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f2:aa:29:7b:c3:e2:29:52:4f:10:58:04:2c:64:c5:a2:3f:59:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 14 12:46:47 2025 GMT Not After : Dec 15 14:42:47 2025 GMT Subject: CN=170E682E8A3BA2F255D2D2027E31DEA9C2932002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:ec:57:ef:54:cd:38:8b:23:8d:47:5e:24: da:19:b6:c0:b2:19:8c:46:23:2a:b5:04:b6:c5:2f: 7b:b2:20:1f:fb:05:e5:b0:aa:97:53:f0:f4:91:2a: 30:ae:d4:c7:75:d0:60:6b:c3:b9:4e:ca:57:74:c1: 4a:4d:21:af:91:af:bd:9c:93:fa:b7:44:fb:e0:df: 01:7c:72:65:a3:00:f0:56:f1:e7:60:63:82:ed:7a: fe:11:2b:6a:5a:22:cf:8b:c2:ac:48:6e:36:56:ef: 1e:38:d1:11:b5:18:4e:67:a3:07:d0:35:99:db:9c: ca:c9:d7:37:f8:4d:d7:9d:60:b8:39:b7:d8:fd:40: 36:b1:30:c6:fe:53:e1:d2:73:7c:ef:15:e7:bf:09: 09:49:92:0a:1c:ea:89:f1:60:8f:04:c3:af:3a:48: 20:43:ab:dd:f8:8a:89:03:56:bb:72:f9:77:c1:5d: a6:87:ce:0c:95:25:be:2a:e8:11:2b:ad:f6:e9:a9: 28:69:a0:02:e4:30:3b:87:c8:f2:57:bc:39:35:d2: ae:a0:aa:29:af:49:f3:94:ef:8c:bd:7b:59:1b:9d: 9a:12:94:ab:be:cf:a0:86:7d:6d:8a:d8:56:69:2c: 80:e6:54:9d:14:5b:13:77:fa:a6:4f:26:c4:47:70: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0E:68:2E:8A:3B:A2:F2:55:D2:D2:02:7E:31:DE:A9:C2:93:20:02 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3a:7e:74:4b:e1:20:4d:c2:fc:7e:5e:d0:cb:bc:23:ad:66: 9d:ef:35:cd:68:90:22:65:b5:cc:74:81:68:d5:e5:e2:c1:d3: 07:d9:54:0d:27:f3:1a:a6:c1:14:3e:c1:18:95:68:19:70:67: c3:dc:bc:43:65:f7:f2:67:7b:ae:29:b8:53:7f:e0:ac:93:c1: 85:0a:0c:3b:b0:ce:bd:dd:d3:f5:4d:1f:5a:f8:51:51:5e:61: 66:b9:b8:01:e8:cc:95:0a:f1:74:a6:10:0a:02:fc:37:0d:9d: 14:1d:12:50:00:93:ae:75:11:f0:dd:22:55:43:3b:45:19:7c: ed:02:33:27:2f:b5:35:58:99:e8:3c:a7:74:49:1c:01:a6:6d: 84:b4:54:3c:20:10:da:d2:41:ff:39:a6:ef:58:32:e5:8f:cc: b7:d7:07:6e:b6:36:a4:59:c6:56:2d:f2:27:12:fc:b8:ad:29: 62:55:fd:4d:e2:a1:a4:6d:5c:ff:f4:a3:2e:f7:ea:b4:04:69: c6:c6:83:a3:dc:4e:66:e5:f5:c0:ee:f9:e0:3a:82:78:33:15: e4:c2:de:79:66:2a:2d:f0:65:61:57:68:97:ab:5a:25:31:d3: 6b:0b:94:ed:ab:9c:d3:2b:19:c7:31:af:dc:14:b3:99:b0:b9: 69:2d:5a:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKvKqKXvD4ilSTxBYBCxkxaI/WaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTQxMjQ2NDdaFw0yNTEyMTUxNDQyNDdaMDMxMTAvBgNV BAMTKDE3MEU2ODJFOEEzQkEyRjI1NUQyRDIwMjdFMzFERUE5QzI5MzIwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7+xX71TNOIsjjUdeJNoZtsCy GYxGIyq1BLbFL3uyIB/7BeWwqpdT8PSRKjCu1Md10GBrw7lOyld0wUpNIa+Rr72c k/q3RPvg3wF8cmWjAPBW8edgY4Ltev4RK2paIs+LwqxIbjZW7x440RG1GE5nowfQ NZnbnMrJ1zf4TdedYLg5t9j9QDaxMMb+U+HSc3zvFee/CQlJkgoc6onxYI8Ew686 SCBDq934iokDVrty+XfBXaaHzgyVJb4q6BErrfbpqShpoALkMDuHyPJXvDk10q6g qimvSfOU74y9e1kbnZoSlKu+z6CGfW2K2FZpLIDmVJ0UWxN3+qZPJsRHcK3/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFw5oLoo7ovJV0tICfjHeqcKTIAIwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTp+dEvhIE3C/H5e0Mu8 I61mne81zWiQImW1zHSBaNXl4sHTB9lUDSfzGqbBFD7BGJVoGXBnw9y8Q2X38md7 rim4U3/grJPBhQoMO7DOvd3T9U0fWvhRUV5hZrm4AejMlQrxdKYQCgL8Nw2dFB0S UACTrnUR8N0iVUM7RRl87QIzJy+1NViZ6DyndEkcAaZthLRUPCAQ2tJB/zmm71gy 5Y/Mt9cHbrY2pFnGVi3yJxL8uK0pYlX9TeKhpG1c//SjLvfqtARpxsaDo9xOZuX1 wO754DqCeDMV5MLeeWYqLfBlYVdol6taJTHTawuU7auc0ysZxzGv3BSzmbC5aS1a MA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:54:02 2025 by rpki-client