This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: F2gr8P3oYd+7GGvWawmBBuEzm7VqP2okWU2AMr5ICF4= Subject key identifier: 40:FD:C2:3B:F5:74:E5:F3:AC:E2:2A:46:D1:18:6B:67:03:4C:DD:76 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 465E88B84DB27FB9F930154EA287358F85388E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03FD Signing time: Sun 30 Nov 2025 09:14:01 +0000 Manifest this update: Sun 30 Nov 2025 09:09:01 +0000 Manifest next update: Mon 01 Dec 2025 12:23:01 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: YES6L4C/FJ4P4oTd+m7OkQkHpLz/PIQYwKn6dH7X/3Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5e:88:b8:4d:b2:7f:b9:f9:30:15:4e:a2:87:35:8f:85:38:8e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 30 09:09:01 2025 GMT Not After : Dec 1 12:23:01 2025 GMT Subject: CN=40FDC23BF574E5F3ACE22A46D1186B67034CDD76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:1b:5a:d8:04:6a:fb:f0:c7:87:2d:0b:c0: 39:f9:e9:24:eb:84:da:11:fa:8d:09:e7:f8:1b:46: e8:d2:eb:aa:95:3b:0a:1e:cb:92:6a:e3:d1:65:10: 2b:c8:b7:73:a1:00:76:db:97:f4:b5:70:0a:19:30: 8e:f9:ce:f6:c2:15:91:fd:1a:3d:40:52:d6:3e:33: eb:e3:51:86:6f:67:8f:b8:59:c2:bd:b7:c7:c8:be: 97:09:0d:a1:2f:51:11:cd:fe:d8:b9:74:4c:0c:85: 8c:32:9b:95:07:74:54:5c:49:bb:64:3a:50:92:b0: f8:23:56:89:27:70:23:18:ba:23:b3:80:48:25:d4: da:5d:9c:60:c3:97:87:ff:b6:3a:e7:33:56:21:f7: 8a:22:c8:54:3f:04:52:dc:9f:e1:fb:f6:1a:f1:32: 70:6c:58:b6:ae:3f:fd:55:34:a3:27:f5:7c:b7:b4: 54:e0:5d:fe:11:88:13:0b:3c:60:35:ac:8a:3e:55: 90:fb:05:85:a9:be:3d:a0:e6:7c:e9:5c:e7:36:f4: 95:37:80:4c:e4:58:88:45:a0:74:fa:ef:ba:b4:d0: bf:67:0b:44:8d:65:7a:f6:8a:ff:ec:a4:92:32:55: 6e:42:48:f9:8f:8f:a1:2a:9b:cc:2e:67:25:d4:27: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FD:C2:3B:F5:74:E5:F3:AC:E2:2A:46:D1:18:6B:67:03:4C:DD:76 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7f:63:33:e5:12:27:f8:c6:2a:44:6c:2d:44:d5:21:f8:c9: 97:b6:8c:0c:6c:49:ae:2f:b3:a0:72:2f:e9:e2:44:bf:a0:ba: 0e:8f:f3:dd:23:23:f7:9a:56:d0:4f:2f:a2:a1:23:e7:12:e8: a5:0f:dc:dd:b8:cc:dd:95:31:b7:6e:a7:b8:51:cb:be:25:c1: a1:0a:64:d4:a1:1e:28:26:76:00:08:68:60:9f:6c:55:83:d6: f3:92:e1:a2:36:67:04:43:13:1f:d6:e7:12:1d:ae:fc:29:04: d1:41:ab:d6:98:4c:fe:29:af:af:2e:7a:6f:7d:76:e7:68:a1: 0d:a2:77:7b:1c:fd:1e:a5:99:7a:03:35:75:61:9a:ee:5a:c2: 21:14:f8:56:be:13:e0:80:c4:91:37:3b:f8:09:f5:46:ba:61: 37:32:0a:f2:30:fb:68:ac:ea:4d:98:b6:d2:87:2d:9a:f3:bf: f1:2e:28:ef:d9:18:f2:63:6e:6a:83:25:ba:3c:fc:01:b7:3e: b7:ae:a7:50:71:0e:d6:96:1e:7b:1e:3c:91:a7:46:4a:74:c8: 8d:c0:23:cc:89:cd:1a:39:61:c9:32:01:9b:1c:2a:97:9d:97: ab:fa:92:8a:90:33:f4:12:83:11:80:7c:61:12:94:80:30:9d: 9d:f0:d6:70 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURl6IuE2yf7n5MBVOooc1j4U4jkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMzAwOTA5MDFaFw0yNTEyMDExMjIzMDFaMDMxMTAvBgNV BAMTKDQwRkRDMjNCRjU3NEU1RjNBQ0UyMkE0NkQxMTg2QjY3MDM0Q0RENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhhta2ARq+/DHhy0LwDn56STr hNoR+o0J5/gbRujS66qVOwoey5Jq49FlECvIt3OhAHbbl/S1cAoZMI75zvbCFZH9 Gj1AUtY+M+vjUYZvZ4+4WcK9t8fIvpcJDaEvURHN/ti5dEwMhYwym5UHdFRcSbtk OlCSsPgjVokncCMYuiOzgEgl1NpdnGDDl4f/tjrnM1Yh94oiyFQ/BFLcn+H79hrx MnBsWLauP/1VNKMn9Xy3tFTgXf4RiBMLPGA1rIo+VZD7BYWpvj2g5nzpXOc29JU3 gEzkWIhFoHT677q00L9nC0SNZXr2iv/spJIyVW5CSPmPj6Eqm8wuZyXUJ6pXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQP3CO/V05fOs4ipG0RhrZwNM3XYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn9jM+USJ/jGKkRsLUTV IfjJl7aMDGxJri+zoHIv6eJEv6C6Do/z3SMj95pW0E8voqEj5xLopQ/c3bjM3ZUx t26nuFHLviXBoQpk1KEeKCZ2AAhoYJ9sVYPW85LhojZnBEMTH9bnEh2u/CkE0UGr 1phM/imvry56b31252ihDaJ3exz9HqWZegM1dWGa7lrCIRT4Vr4T4IDEkTc7+An1 RrphNzIK8jD7aKzqTZi20octmvO/8S4o79kY8mNuaoMlujz8Abc+t66nUHEO1pYe ex48kadGSnTIjcAjzInNGjlhyTIBmxwql52Xq/qSipAz9BKDEYB8YRKUgDCdnfDW cA== -----END CERTIFICATE-----Generated at Sun Nov 30 12:15:32 2025 by rpki-client