This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: wrQ/SbLVGUAc+VX/klUv1R022Kdw6GIMjyD02nGNH7I= Subject key identifier: 25:F0:0A:2D:85:88:BF:0C:4A:D6:87:CB:08:3E:8E:B5:73:7A:20:95 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0702F7BE45584185515AAC8C615B80FC179BA135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0414 Signing time: Wed 17 Dec 2025 13:46:20 +0000 Manifest this update: Wed 17 Dec 2025 13:41:20 +0000 Manifest next update: Thu 18 Dec 2025 16:05:20 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 4TNYdsaru6a6WwnOPBuHmaWvRxlcWM8BCPJdhJ0JMW4=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:02:f7:be:45:58:41:85:51:5a:ac:8c:61:5b:80:fc:17:9b:a1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 17 13:41:20 2025 GMT Not After : Dec 18 16:05:20 2025 GMT Subject: CN=25F00A2D8588BF0C4AD687CB083E8EB5737A2095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:02:da:75:61:8f:ba:82:e1:7d:dd:42:20: d3:a9:09:fa:6c:88:5f:55:fb:0c:9d:6e:c9:74:62: 11:f1:b8:7d:be:e7:4d:22:29:9f:5f:ef:41:93:d8: 46:be:81:7f:02:c7:2f:f5:75:4f:d4:0c:5e:6c:3e: cc:aa:9f:b5:bc:b5:8e:22:17:b3:2d:30:81:d1:d2: 1a:bd:28:fd:b0:bc:06:5e:44:b9:bf:ad:7f:cf:f5: 99:8d:9c:fc:91:0d:cf:56:b7:90:f8:99:9b:fd:14: 73:3b:02:9b:32:00:28:24:88:7a:8d:0f:26:16:49: 96:d7:15:ed:47:cb:c2:9f:6d:bd:f7:f1:58:33:1b: 45:04:cb:56:62:ba:60:fd:fc:98:33:1a:26:65:cf: c8:9e:ca:35:65:b5:bc:17:cd:47:d3:2a:f6:07:f4: ca:b4:5f:fb:af:86:7f:a8:ec:59:33:ae:51:2a:c3: da:6e:db:d3:d1:3f:4b:8c:92:36:73:36:3b:8e:ba: 7d:05:5f:7f:f8:bb:77:75:02:6a:85:f6:1d:68:c5: 1f:3a:2b:df:62:c6:04:1c:6b:c5:03:46:91:d9:4a: 53:69:d1:d1:bd:7f:bf:82:4c:5e:c5:f5:be:35:34: a6:d3:16:1f:f8:6e:b3:c0:e1:0c:6c:fe:bf:5d:32: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:0A:2D:85:88:BF:0C:4A:D6:87:CB:08:3E:8E:B5:73:7A:20:95 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6f:b5:7d:a2:5c:ff:69:51:cc:4f:0c:78:5a:4a:6f:9f:78: 1f:21:bb:dc:25:7d:13:07:b4:2f:eb:25:72:ad:73:db:1f:e6: 6c:fc:ea:ce:6b:87:c5:fc:67:0c:b2:7f:2e:6e:fe:21:92:65: 74:1c:30:c7:f5:38:36:6a:56:3f:39:f6:65:d1:10:70:7f:16: ab:23:0a:64:2d:f3:c6:0b:1e:ce:0f:d2:06:46:b0:f6:be:b9: 3f:c1:1e:a7:b3:56:be:18:82:fe:84:ac:77:35:f2:49:a7:e5: 49:1d:40:57:09:e9:6f:e5:bf:ef:35:7f:d8:94:ab:dc:15:3f: e6:aa:4b:7d:bd:8b:8f:51:3c:b6:f6:d2:58:8b:62:56:e7:be: 47:21:94:a9:14:42:6f:a2:93:c5:a0:27:35:52:85:ec:c7:92: 0e:7d:3b:f0:fd:99:f4:fe:68:8c:00:2e:f4:2c:a6:69:09:ab: a3:6c:8d:39:40:99:89:a9:d2:17:f8:07:c5:d1:bc:d8:09:9f: a1:93:ad:d9:11:0d:33:a6:97:d0:bc:c6:13:5b:cb:33:22:3f: 1d:d5:86:e4:f7:78:6c:4b:1b:cd:bf:20:22:46:83:18:a3:24: 3e:78:3b:5a:25:45:99:cd:ce:5b:3f:da:14:d1:7c:56:dd:2b: fc:a5:60:b0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBwL3vkVYQYVRWqyMYVuA/BeboTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTcxMzQxMjBaFw0yNTEyMTgxNjA1MjBaMDMxMTAvBgNV BAMTKDI1RjAwQTJEODU4OEJGMEM0QUQ2ODdDQjA4M0U4RUI1NzM3QTIwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflwLadWGPuoLhfd1CINOpCfps iF9V+wydbsl0YhHxuH2+500iKZ9f70GT2Ea+gX8Cxy/1dU/UDF5sPsyqn7W8tY4i F7MtMIHR0hq9KP2wvAZeRLm/rX/P9ZmNnPyRDc9Wt5D4mZv9FHM7ApsyACgkiHqN DyYWSZbXFe1Hy8Kfbb338VgzG0UEy1ZiumD9/JgzGiZlz8ieyjVltbwXzUfTKvYH 9Mq0X/uvhn+o7FkzrlEqw9pu29PRP0uMkjZzNjuOun0FX3/4u3d1AmqF9h1oxR86 K99ixgQca8UDRpHZSlNp0dG9f7+CTF7F9b41NKbTFh/4brPA4Qxs/r9dMsidAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJfAKLYWIvwxK1ofLCD6OtXN6IJUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2+1faJc/2lRzE8MeFpK b594HyG73CV9Ewe0L+slcq1z2x/mbPzqzmuHxfxnDLJ/Lm7+IZJldBwwx/U4NmpW Pzn2ZdEQcH8WqyMKZC3zxgsezg/SBkaw9r65P8Eep7NWvhiC/oSsdzXySaflSR1A Vwnpb+W/7zV/2JSr3BU/5qpLfb2Lj1E8tvbSWItiVue+RyGUqRRCb6KTxaAnNVKF 7MeSDn078P2Z9P5ojAAu9CymaQmro2yNOUCZianSF/gHxdG82AmfoZOt2RENM6aX 0LzGE1vLMyI/HdWG5Pd4bEsbzb8gIkaDGKMkPng7WiVFmc3OWz/aFNF8Vt0r/KVg sA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:55:43 2025 by rpki-client