This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 3E23ArGUS6mCUNJv2CxVp1iaFr+pThqOHMmvl0e7y4c= Subject key identifier: 0F:B4:CE:C8:99:6E:05:EE:95:51:D8:D8:3F:04:22:51:42:01:DB:18 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2A706AE37F65B6808913B7A3E7BE3DCDD8AFBE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0416 Signing time: Fri 19 Dec 2025 02:13:36 +0000 Manifest this update: Fri 19 Dec 2025 02:08:36 +0000 Manifest next update: Sat 20 Dec 2025 04:05:36 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: +pIox6Mlpcrjaw+gF1qEflQnDSFrfrT6lI8r7Uydj70=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:70:6a:e3:7f:65:b6:80:89:13:b7:a3:e7:be:3d:cd:d8:af:be:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 19 02:08:36 2025 GMT Not After : Dec 20 04:05:36 2025 GMT Subject: CN=0FB4CEC8996E05EE9551D8D83F0422514201DB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:b1:38:40:a6:1b:88:02:48:80:23:56:3e: 43:2c:27:f7:20:0f:73:c3:84:4d:9e:83:28:1b:d4: 09:bb:58:12:37:10:8b:03:1c:9e:fd:d3:3b:95:1f: 43:a9:35:d9:21:bb:59:de:3c:26:28:d3:f3:a3:ea: 3f:74:d1:a8:08:05:bf:50:8c:eb:51:00:0c:75:2b: 7f:b4:14:0a:27:e1:3e:20:25:65:7a:82:75:e9:30: d3:02:9d:52:e5:72:50:7d:46:11:99:34:22:29:be: e7:5b:2e:96:af:a4:14:a1:bf:6d:f6:c9:3a:62:ca: 4d:18:a9:fe:19:11:15:e9:53:b9:5d:0d:69:0e:81: dd:dc:87:71:a9:6b:c8:ee:8c:b2:51:8b:a4:e6:27: 9f:08:86:b8:6c:61:49:c7:4c:76:5c:33:9a:76:e5: 4c:f6:00:79:0d:46:28:7f:8d:be:c4:8c:c5:13:99: ff:cc:5d:5d:32:f1:d8:33:64:94:26:ef:6c:ce:e8: f1:81:48:00:53:ce:33:bf:1d:8d:24:36:2c:c4:79: b9:75:3b:4a:09:89:3a:6d:79:5f:a3:95:d5:ce:28: c2:f7:6b:99:af:f6:25:59:7d:04:d2:94:16:16:de: 8f:87:95:3c:77:d8:aa:53:2c:33:b2:35:ec:df:3c: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:CE:C8:99:6E:05:EE:95:51:D8:D8:3F:04:22:51:42:01:DB:18 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5e:b6:b6:1c:25:b5:90:5c:9e:99:d2:6c:bc:23:51:51:e7: 57:75:ed:72:77:15:7f:c6:86:8f:cf:ab:25:d2:71:5f:97:83: 54:e5:69:12:42:25:23:77:38:19:56:9f:32:ca:f8:20:c7:c9: 71:6b:62:09:0e:c8:db:47:fd:df:ae:89:1e:f0:31:a7:00:11: 3e:93:e5:30:43:d2:8e:36:c3:43:65:33:00:0a:75:19:0b:b0: d8:90:7e:e6:bb:f3:a3:78:76:88:3f:f1:54:af:6a:3a:c9:d1: b7:69:a5:c3:29:33:af:e6:20:02:c6:91:ba:43:01:f8:3e:5a: 77:c1:4f:db:07:cf:3c:a2:66:61:1c:80:e1:20:fa:10:1f:97: ea:7c:8b:70:68:f0:c7:db:e0:52:79:04:90:0e:ee:aa:a8:90: 58:48:dc:00:3e:dd:ce:d7:e6:02:41:6e:a6:c3:8a:6b:26:55: 08:d6:9b:7d:a1:38:84:08:04:2d:11:17:c9:ed:05:9a:ea:96: 1b:1b:b9:cc:a7:4f:57:e5:ff:fd:a1:fd:f0:6b:e5:7f:41:d1: 07:68:d3:12:fa:ea:da:e6:f8:03:bc:7c:af:7b:cb:84:43:34: 5a:50:23:06:b7:b9:ba:af:f9:0d:e6:06:8b:fa:a8:98:60:ec: 31:02:f9:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKnBq439ltoCJE7ej5749zdivvgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTkwMjA4MzZaFw0yNTEyMjAwNDA1MzZaMDMxMTAvBgNV BAMTKDBGQjRDRUM4OTk2RTA1RUU5NTUxRDhEODNGMDQyMjUxNDIwMURCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4frE4QKYbiAJIgCNWPkMsJ/cg D3PDhE2egygb1Am7WBI3EIsDHJ790zuVH0OpNdkhu1nePCYo0/Oj6j900agIBb9Q jOtRAAx1K3+0FAon4T4gJWV6gnXpMNMCnVLlclB9RhGZNCIpvudbLpavpBShv232 yTpiyk0Yqf4ZERXpU7ldDWkOgd3ch3Gpa8jujLJRi6TmJ58IhrhsYUnHTHZcM5p2 5Uz2AHkNRih/jb7EjMUTmf/MXV0y8dgzZJQm72zO6PGBSABTzjO/HY0kNizEebl1 O0oJiTpteV+jldXOKML3a5mv9iVZfQTSlBYW3o+HlTx32KpTLDOyNezfPO0jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUD7TOyJluBe6VUdjYPwQiUUIB2xgwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD162thwltZBcnpnSbLwj UVHnV3XtcncVf8aGj8+rJdJxX5eDVOVpEkIlI3c4GVafMsr4IMfJcWtiCQ7I20f9 366JHvAxpwARPpPlMEPSjjbDQ2UzAAp1GQuw2JB+5rvzo3h2iD/xVK9qOsnRt2ml wykzr+YgAsaRukMB+D5ad8FP2wfPPKJmYRyA4SD6EB+X6nyLcGjwx9vgUnkEkA7u qqiQWEjcAD7dztfmAkFupsOKayZVCNabfaE4hAgELREXye0FmuqWGxu5zKdPV+X/ /aH98Gvlf0HRB2jTEvrq2ub4A7x8r3vLhEM0WlAjBre5uq/5DeYGi/qomGDsMQL5 4g== -----END CERTIFICATE-----Generated at Fri Dec 19 17:54:05 2025 by rpki-client