This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: yrHdEfGtIx1CwtT3XJI3OjBIlcxhjHBlqWfoqTGN9RQ= Subject key identifier: 63:D7:E0:C6:C3:5C:B3:A8:32:4C:BD:52:9B:C9:39:CA:DA:9B:AB:88 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0D934E65FDF652B69908F0D54677E8AC6EAF1F7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03FF Signing time: Mon 01 Dec 2025 22:56:32 +0000 Manifest this update: Mon 01 Dec 2025 22:51:32 +0000 Manifest next update: Tue 02 Dec 2025 22:58:32 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: HQU0w9+LQIVuKCZDarD3tbdUf+p3sd4ToqibMg5HPjc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 19:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:93:4e:65:fd:f6:52:b6:99:08:f0:d5:46:77:e8:ac:6e:af:1f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 1 22:51:32 2025 GMT Not After : Dec 2 22:58:32 2025 GMT Subject: CN=63D7E0C6C35CB3A8324CBD529BC939CADA9BAB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:05:51:c7:09:62:1c:90:2f:7b:e7:b1:9c: d5:47:a4:bb:34:89:09:95:27:2a:99:52:1b:3e:f7: a2:9c:58:0c:fd:c5:2b:17:a9:39:11:40:f9:a8:37: d3:20:7c:06:86:02:14:33:33:4f:2c:eb:7f:cd:fa: ef:4c:b4:ce:f0:80:ab:6d:87:72:a3:93:ea:23:86: 15:16:71:ec:b3:8d:e1:30:09:65:12:8a:73:a9:ec: a3:f7:9b:40:e5:ec:a0:6f:d8:cb:3e:a1:d8:f3:f3: 19:16:fa:92:38:78:2f:b4:12:66:5c:2d:27:d9:8c: b9:31:cb:6e:a6:ff:6d:71:d2:7e:33:13:93:d4:b4: 5d:04:57:ae:6c:c9:5a:9a:7c:47:4b:c0:48:fb:9d: 38:99:50:e7:65:86:9c:fb:1b:c4:64:6b:38:fc:24: c8:63:f8:b0:df:05:d9:69:43:c1:5a:35:ec:a9:07: af:a0:10:e4:e8:69:96:e6:e5:32:1e:3e:2b:17:0d: 03:3e:cb:ca:bd:0d:3e:6b:64:29:d0:40:58:5c:8e: 80:43:22:ce:cf:3f:73:46:f0:7a:b0:d9:5a:4c:91: be:d5:ca:16:dd:02:cc:ae:98:14:e7:c8:c7:f0:04: 70:e8:76:d0:b6:7c:45:84:d4:b4:b5:2a:bf:d3:02: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D7:E0:C6:C3:5C:B3:A8:32:4C:BD:52:9B:C9:39:CA:DA:9B:AB:88 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:c4:17:e7:72:69:5a:02:f9:61:1d:87:31:88:ab:5e:e5: f7:8e:06:4c:1b:69:59:49:f0:f1:2b:34:1f:57:ee:13:9c:b6: 6b:93:6a:a1:22:bd:de:6b:80:27:06:cc:84:5f:83:b8:8c:73: cf:1d:86:40:10:93:38:ab:13:63:b0:73:87:1e:3d:6f:00:25: 02:73:20:42:61:58:3e:e1:a6:47:d7:37:5d:58:be:27:c9:24: fd:81:41:50:33:b5:54:7a:e4:e5:de:cc:88:b9:80:2a:24:29: c0:70:f6:3b:12:10:0a:57:2d:a5:f2:3f:8e:15:56:68:0a:a1: 7d:35:e4:41:d5:fc:80:0d:b7:77:40:e0:1c:31:89:fc:52:04: 9b:03:07:db:61:af:61:84:4d:a3:b8:34:c7:37:93:c2:99:ab: 09:c5:4e:57:2e:46:9a:b0:e3:f4:0c:cf:f9:d5:3b:41:93:c3: ac:a5:c0:6d:4b:fa:91:bb:24:cc:a8:dd:56:84:e4:09:3a:2c: a2:60:66:e8:0b:c4:eb:b2:46:9c:40:96:ca:15:cb:eb:c4:5f: cb:99:6e:73:11:fa:33:02:52:56:64:30:d5:ca:5c:af:be:c7: e6:b3:57:2f:14:0b:7d:01:80:ea:e8:a4:0f:66:ed:da:4e:ca: 20:c1:2a:c6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDZNOZf32UraZCPDVRnforG6vH38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDEyMjUxMzJaFw0yNTEyMDIyMjU4MzJaMDMxMTAvBgNV BAMTKDYzRDdFMEM2QzM1Q0IzQTgzMjRDQkQ1MjlCQzkzOUNBREE5QkFCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCloQVRxwliHJAve+exnNVHpLs0 iQmVJyqZUhs+96KcWAz9xSsXqTkRQPmoN9MgfAaGAhQzM08s63/N+u9MtM7wgKtt h3Kjk+ojhhUWceyzjeEwCWUSinOp7KP3m0Dl7KBv2Ms+odjz8xkW+pI4eC+0EmZc LSfZjLkxy26m/21x0n4zE5PUtF0EV65syVqafEdLwEj7nTiZUOdlhpz7G8Rkazj8 JMhj+LDfBdlpQ8FaNeypB6+gEOToaZbm5TIePisXDQM+y8q9DT5rZCnQQFhcjoBD Is7PP3NG8Hqw2VpMkb7VyhbdAsyumBTnyMfwBHDodtC2fEWE1LS1Kr/TAlVDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUY9fgxsNcs6gyTL1Sm8k5ytqbq4gwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2XEF+dyaVoC+WEdhzGI q17l944GTBtpWUnw8Ss0H1fuE5y2a5NqoSK93muAJwbMhF+DuIxzzx2GQBCTOKsT Y7Bzhx49bwAlAnMgQmFYPuGmR9c3XVi+J8kk/YFBUDO1VHrk5d7MiLmAKiQpwHD2 OxIQClctpfI/jhVWaAqhfTXkQdX8gA23d0DgHDGJ/FIEmwMH22GvYYRNo7g0xzeT wpmrCcVOVy5GmrDj9AzP+dU7QZPDrKXAbUv6kbskzKjdVoTkCTosomBm6AvE67JG nECWyhXL68Rfy5lucxH6MwJSVmQw1cpcr77H5rNXLxQLfQGA6uikD2bt2k7KIMEq xg== -----END CERTIFICATE-----Generated at Tue Dec 2 05:10:50 2025 by rpki-client