This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: JOHjekc4tYYftwvd7hiEfk+blnQcb7fjszPR7majwpg= Subject key identifier: A2:71:C9:39:D4:B1:BB:30:4A:2C:5F:2A:17:DD:BB:60:82:3B:21:1B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 542D0766187E1D0C609CEB51652CE0C8E1266D2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0408 Signing time: Mon 08 Dec 2025 12:17:56 +0000 Manifest this update: Mon 08 Dec 2025 12:12:56 +0000 Manifest next update: Tue 09 Dec 2025 13:21:56 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Rwg5D9KzsQOtQK799dV8el453pR8IC6aT3fublgPKJU=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 13:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2d:07:66:18:7e:1d:0c:60:9c:eb:51:65:2c:e0:c8:e1:26:6d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 8 12:12:56 2025 GMT Not After : Dec 9 13:21:56 2025 GMT Subject: CN=A271C939D4B1BB304A2C5F2A17DDBB60823B211B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:db:0f:57:5f:a5:d2:08:68:98:56:2b:b5: bd:61:8e:af:d1:5e:23:25:0d:9c:cb:fa:07:cc:a0: fb:56:e8:fb:57:16:4d:f3:db:31:44:84:24:6a:59: f5:c7:47:05:39:64:18:ac:d9:1c:d0:5a:6e:c1:9b: 48:d4:ce:e9:8d:ff:46:3b:0b:bf:4f:93:17:26:94: 20:93:e2:61:86:4d:91:1f:fa:60:b9:26:b3:81:06: 13:a4:72:79:c5:0d:f9:20:0e:af:3d:46:c4:57:17: 90:cc:94:b5:51:84:b1:6c:dd:03:ec:54:cb:31:65: e0:1a:b3:1e:13:32:31:09:53:0b:7f:a0:a6:58:4a: c0:22:03:06:b1:76:2f:26:1d:bf:db:9e:92:02:67: 07:72:29:d1:53:80:3d:db:40:f2:4d:a1:9b:f1:67: 38:90:5d:42:05:98:85:16:65:89:26:b0:81:ac:83: e0:8b:e0:e2:dc:91:a0:69:b7:76:f9:81:63:6e:38: a8:10:45:51:72:ed:bb:01:b2:af:53:c0:72:8a:0a: d8:b8:b1:de:67:18:d5:82:23:2f:5b:ca:8f:45:e8: 19:42:ed:df:69:f6:5b:a5:f7:ca:b5:8a:17:d0:13: a7:99:88:07:30:38:e1:4f:37:ab:34:8e:ea:3f:21: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:71:C9:39:D4:B1:BB:30:4A:2C:5F:2A:17:DD:BB:60:82:3B:21:1B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e3:29:39:9e:5b:95:d3:b2:6b:f1:12:05:ef:b3:b2:1a:0d: 68:2e:ee:01:58:97:39:1c:c7:fa:a7:8a:72:f6:af:98:a8:f5: 7a:ec:2e:4b:54:d3:a4:97:c3:8a:35:cc:3e:73:16:1a:b4:70: c7:01:46:a4:68:e1:cb:0d:40:eb:b4:19:e5:d7:8a:4c:5a:29: 41:6e:bc:a1:de:78:b7:ee:10:a6:31:03:31:7e:0f:86:30:87: 81:89:1f:30:38:3c:22:94:53:7e:24:fc:9d:d0:e2:ae:a1:f1: 5d:8b:27:35:c2:a1:2a:a1:98:c6:d2:ee:e1:97:71:54:fc:ec: d6:35:aa:4c:3d:d5:ec:32:26:99:51:84:7c:f8:a8:43:87:4f: 89:08:06:cf:68:e5:92:9e:5b:c4:2c:57:95:6c:2b:f6:b4:c3: 9c:e3:f4:fc:74:1f:79:71:54:03:70:3d:27:54:85:c5:e4:9b: fe:80:27:8c:c6:6f:f7:a2:1e:f2:8d:55:d9:a3:01:e5:5c:d6: 98:7f:b7:4e:62:0c:10:68:b2:fa:0b:f2:2f:d8:47:a3:bd:d6: d1:e9:ee:b6:a1:a5:43:d3:67:fc:17:f1:24:a4:3f:e3:e8:ae: 8f:fe:48:66:39:ed:c1:70:93:a0:d7:6f:e9:1d:89:9b:aa:74: 5a:89:f3:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVC0HZhh+HQxgnOtRZSzgyOEmbS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDgxMjEyNTZaFw0yNTEyMDkxMzIxNTZaMDMxMTAvBgNV BAMTKEEyNzFDOTM5RDRCMUJCMzA0QTJDNUYyQTE3RERCQjYwODIzQjIxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGdsPV1+l0ghomFYrtb1hjq/R XiMlDZzL+gfMoPtW6PtXFk3z2zFEhCRqWfXHRwU5ZBis2RzQWm7Bm0jUzumN/0Y7 C79PkxcmlCCT4mGGTZEf+mC5JrOBBhOkcnnFDfkgDq89RsRXF5DMlLVRhLFs3QPs VMsxZeAasx4TMjEJUwt/oKZYSsAiAwaxdi8mHb/bnpICZwdyKdFTgD3bQPJNoZvx ZziQXUIFmIUWZYkmsIGsg+CL4OLckaBpt3b5gWNuOKgQRVFy7bsBsq9TwHKKCti4 sd5nGNWCIy9byo9F6BlC7d9p9lul98q1ihfQE6eZiAcwOOFPN6s0juo/ISxzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUonHJOdSxuzBKLF8qF927YII7IRswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuMpOZ5bldOya/ESBe+z shoNaC7uAViXORzH+qeKcvavmKj1euwuS1TTpJfDijXMPnMWGrRwxwFGpGjhyw1A 67QZ5deKTFopQW68od54t+4QpjEDMX4PhjCHgYkfMDg8IpRTfiT8ndDirqHxXYsn NcKhKqGYxtLu4ZdxVPzs1jWqTD3V7DImmVGEfPioQ4dPiQgGz2jlkp5bxCxXlWwr 9rTDnOP0/HQfeXFUA3A9J1SFxeSb/oAnjMZv96Ie8o1V2aMB5VzWmH+3TmIMEGiy +gvyL9hHo73W0enutqGlQ9Nn/BfxJKQ/4+iuj/5IZjntwXCToNdv6R2Jm6p0Wonz /A== -----END CERTIFICATE-----Generated at Mon Dec 8 23:13:39 2025 by rpki-client