This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: bkw6XdXoHvP7Xgr2XDewXrjn/OEML3yqLojBBe68zfA= Subject key identifier: 36:D5:C1:B7:7D:0E:68:29:B6:C7:FD:41:F3:29:24:7F:1C:2A:78:3D Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 54D4418ADD4C3E454D9C3CA721980218C0AF5667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 044C Signing time: Wed 28 Jan 2026 12:47:11 +0000 Manifest this update: Wed 28 Jan 2026 12:42:11 +0000 Manifest next update: Thu 29 Jan 2026 13:12:11 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: EPCpIw4Tvg9ClcVlvpuwWOFmF5xVRSzT/EUwhW+vEh4=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 13:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d4:41:8a:dd:4c:3e:45:4d:9c:3c:a7:21:98:02:18:c0:af:56:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 28 12:42:11 2026 GMT Not After : Jan 29 13:12:11 2026 GMT Subject: CN=36D5C1B77D0E6829B6C7FD41F329247F1C2A783D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:21:6b:9d:58:d2:bc:83:d6:fa:bf:32:18: 57:9f:4b:ca:1c:3e:d2:db:bf:c9:cf:46:ad:ad:f3: ac:9f:0b:5e:ca:57:de:ab:a7:51:8e:24:f0:6a:8d: 95:66:85:dc:82:18:8c:90:fc:85:50:62:fe:63:b4: 37:10:99:25:f3:d9:d7:94:c1:0a:f4:d9:b3:a2:c3: c6:8d:76:53:c2:05:1a:e5:68:b5:d3:a4:e9:75:0c: 65:34:11:50:3b:c5:3e:c8:27:6a:44:9c:89:41:5f: 18:bf:f7:38:04:84:e2:7c:bc:35:fc:c2:b2:78:33: ba:cf:4d:e3:23:42:22:07:71:11:18:8f:b0:2b:4b: b0:6d:8d:e0:06:7d:5f:4e:e9:fd:b9:c6:13:f7:fa: a1:09:ce:61:ed:a8:41:4e:e1:0c:f4:fb:ee:98:14: 10:3b:ed:8f:20:a0:d0:5d:52:83:bf:02:16:f3:e2: e9:0a:22:84:53:51:87:13:1e:9e:90:b8:d9:c0:40: 01:12:53:0a:7d:7c:52:61:bb:8b:e2:64:2e:57:f1: ce:3e:83:8d:86:c8:78:ba:5a:22:60:61:04:9d:8a: da:1e:09:ca:03:f9:73:ee:0f:ec:76:2d:f0:0a:a2: 28:a9:d7:d4:2d:55:99:83:b1:c3:98:1f:e7:b0:7c: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D5:C1:B7:7D:0E:68:29:B6:C7:FD:41:F3:29:24:7F:1C:2A:78:3D X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b5:06:d6:ed:20:b2:f0:02:65:99:e5:96:40:33:2e:b8:34: 13:29:56:c3:33:64:11:49:96:ca:84:e6:7c:3a:ad:17:5a:f5: e5:5c:76:0d:e3:17:59:e8:09:fb:00:5a:bf:2e:1e:7f:a2:f2: 17:7e:66:5f:7f:6c:a5:eb:15:b6:3d:47:a8:70:fe:82:91:a0: 8e:c0:c0:97:70:39:b9:3d:4f:c7:a1:4a:32:4d:8a:13:91:ed: f5:67:8d:49:ec:dc:2c:e8:63:8f:93:1b:05:f7:21:c0:02:df: 2e:47:1e:9e:8a:ca:86:d2:51:b2:2d:ea:58:12:69:5c:17:43: 48:e2:0c:9e:a5:a7:0d:ac:7c:92:34:f7:46:61:98:cf:9d:7b: 9e:79:f9:0c:2c:c0:df:1b:d1:c5:85:59:12:dc:75:87:8c:bd: 20:ba:36:0c:d1:60:1d:bf:21:f0:27:0b:76:b4:94:92:2d:13: 84:16:97:fd:93:cd:62:58:24:b1:05:be:e2:66:b2:9b:0a:63: 37:40:21:d6:c7:28:90:d8:5f:1b:a1:c9:65:a4:30:77:8d:85: 23:cc:ff:ec:37:fa:76:df:f7:36:41:2b:3e:0e:d7:18:42:40: fc:fa:62:7a:08:bb:a1:40:ea:05:ee:a1:93:74:01:f9:69:b6: 5e:ed:c7:6f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVNRBit1MPkVNnDynIZgCGMCvVmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMjgxMjQyMTFaFw0yNjAxMjkxMzEyMTFaMDMxMTAvBgNV BAMTKDM2RDVDMUI3N0QwRTY4MjlCNkM3RkQ0MUYzMjkyNDdGMUMyQTc4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNiFrnVjSvIPW+r8yGFefS8oc PtLbv8nPRq2t86yfC17KV96rp1GOJPBqjZVmhdyCGIyQ/IVQYv5jtDcQmSXz2deU wQr02bOiw8aNdlPCBRrlaLXTpOl1DGU0EVA7xT7IJ2pEnIlBXxi/9zgEhOJ8vDX8 wrJ4M7rPTeMjQiIHcREYj7ArS7BtjeAGfV9O6f25xhP3+qEJzmHtqEFO4Qz0++6Y FBA77Y8goNBdUoO/Ahbz4ukKIoRTUYcTHp6QuNnAQAESUwp9fFJhu4viZC5X8c4+ g42GyHi6WiJgYQSditoeCcoD+XPuD+x2LfAKoiip19QtVZmDscOYH+ewfOmLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNtXBt30OaCm2x/1B8ykkfxwqeD0wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrUG1u0gsvACZZnllkAz Lrg0EylWwzNkEUmWyoTmfDqtF1r15Vx2DeMXWegJ+wBavy4ef6LyF35mX39spesV tj1HqHD+gpGgjsDAl3A5uT1Px6FKMk2KE5Ht9WeNSezcLOhjj5MbBfchwALfLkce norKhtJRsi3qWBJpXBdDSOIMnqWnDax8kjT3RmGYz517nnn5DCzA3xvRxYVZEtx1 h4y9ILo2DNFgHb8h8CcLdrSUki0ThBaX/ZPNYlgksQW+4maymwpjN0Ah1scokNhf G6HJZaQwd42FI8z/7Df6dt/3NkErPg7XGEJA/Ppiegi7oUDqBe6hk3QB+Wm2Xu3H bw== -----END CERTIFICATE-----Generated at Thu Jan 29 00:12:54 2026 by rpki-client