This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: A/EeFQf4ozOhnyZww2tBWDS5v8uadxO4oxyEyZjJ4C4= Subject key identifier: 94:CA:D4:3B:CF:B3:F6:C5:EB:41:20:D0:2D:C2:9D:0F:BD:B6:B9:A9 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 606666F20BC1BA88B9A739F03A1C975B97BBF618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0418 Signing time: Sat 20 Dec 2025 15:15:59 +0000 Manifest this update: Sat 20 Dec 2025 15:10:59 +0000 Manifest next update: Sun 21 Dec 2025 19:08:59 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Yp6OcqRfoQCa+xLMpcyrX6aKdSUKTk17PODUWXRbUk4=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:66:66:f2:0b:c1:ba:88:b9:a7:39:f0:3a:1c:97:5b:97:bb:f6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 20 15:10:59 2025 GMT Not After : Dec 21 19:08:59 2025 GMT Subject: CN=94CAD43BCFB3F6C5EB4120D02DC29D0FBDB6B9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:09:09:b2:92:cc:61:72:62:55:cc:31:d7: 87:1a:ff:e8:c5:4e:9d:c1:f4:ef:a1:89:73:7c:05: fa:b6:33:7d:0a:4e:41:9a:df:b6:aa:03:b4:8d:8b: e6:1a:a6:a9:ae:17:e8:d0:b2:c8:35:82:f0:cf:bc: 8c:51:d5:d5:d9:8d:3a:0a:9a:72:9a:dd:d4:4c:3a: 33:38:ea:85:fb:06:89:28:59:de:c6:bf:8f:2c:b6: 4e:2b:54:84:da:98:49:7d:91:c7:52:ea:3a:ee:14: 8a:33:a0:3d:1e:cc:14:d6:e7:f1:35:16:d3:15:4f: 36:08:82:a9:b2:9b:e1:7c:d0:2b:c6:36:fb:6b:56: 42:05:75:06:14:03:75:b5:34:f9:82:22:f7:e6:43: 0b:04:46:09:7a:1a:cd:a5:6b:bb:c9:85:3b:a8:aa: 7b:d6:de:7d:7f:11:23:f9:db:63:5d:74:38:81:a0: 77:11:58:cc:b7:0c:20:cc:d9:73:30:8a:85:73:0e: 06:52:bd:20:d5:c2:bd:9f:94:e6:3c:e4:af:69:67: f1:53:08:c1:05:63:4b:8b:1d:b8:dd:27:92:53:b8: 1e:ed:26:38:85:33:53:be:b1:29:0e:20:7f:b8:af: e0:3e:f1:af:2f:53:5c:7a:6c:38:6c:78:c7:2b:98: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CA:D4:3B:CF:B3:F6:C5:EB:41:20:D0:2D:C2:9D:0F:BD:B6:B9:A9 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5f:26:e6:b0:eb:0a:13:13:de:cc:2a:c3:cb:47:1d:54:40: 01:5c:0b:55:6b:b4:96:03:6a:b4:07:a6:9f:cc:6e:0f:98:96: f2:7c:14:6f:19:98:1b:9d:c8:23:51:57:14:f0:c9:f4:c7:7b: 91:ab:b2:3e:6f:cc:38:86:38:5e:b1:17:96:01:21:3e:47:6f: df:dd:38:f5:e1:37:e9:be:e7:90:bc:29:f2:ed:c4:b6:26:93: 38:ed:2f:8c:49:d6:32:86:03:6f:44:c6:21:1d:ce:57:9c:16: 2a:98:66:59:16:1c:6c:3c:e9:35:5f:7e:f6:67:fb:b6:b6:2d: 2f:95:80:e4:79:50:d5:b2:a0:46:c9:93:c8:2f:82:95:c8:17: a5:a3:a1:e0:ce:11:84:a3:94:13:4e:17:b9:16:a3:be:4c:fd: 69:c1:ee:21:2f:d2:cf:5a:1d:a8:d4:7e:39:1a:a2:0f:31:32: 27:b1:aa:17:ea:65:b1:92:f0:47:f7:8f:7d:95:23:3b:a0:b5: a2:6a:ca:b7:11:4f:c0:72:0e:40:37:02:d7:c1:72:69:8e:5b: a3:96:c6:29:80:93:3c:cc:3e:c9:c8:2f:04:ec:b0:e2:0f:d5: 64:c4:a3:f2:d3:5c:6a:cb:82:1d:5b:b5:7e:3e:20:d4:74:d0: e0:c5:5a:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYGZm8gvBuoi5pznwOhyXW5e79hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMjAxNTEwNTlaFw0yNTEyMjExOTA4NTlaMDMxMTAvBgNV BAMTKDk0Q0FENDNCQ0ZCM0Y2QzVFQjQxMjBEMDJEQzI5RDBGQkRCNkI5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfbQkJspLMYXJiVcwx14ca/+jF Tp3B9O+hiXN8Bfq2M30KTkGa37aqA7SNi+YapqmuF+jQssg1gvDPvIxR1dXZjToK mnKa3dRMOjM46oX7BokoWd7Gv48stk4rVITamEl9kcdS6jruFIozoD0ezBTW5/E1 FtMVTzYIgqmym+F80CvGNvtrVkIFdQYUA3W1NPmCIvfmQwsERgl6Gs2la7vJhTuo qnvW3n1/ESP522NddDiBoHcRWMy3DCDM2XMwioVzDgZSvSDVwr2flOY85K9pZ/FT CMEFY0uLHbjdJ5JTuB7tJjiFM1O+sSkOIH+4r+A+8a8vU1x6bDhseMcrmL61AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlMrUO8+z9sXrQSDQLcKdD722uakwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl8m5rDrChMT3swqw8tH HVRAAVwLVWu0lgNqtAemn8xuD5iW8nwUbxmYG53II1FXFPDJ9Md7kauyPm/MOIY4 XrEXlgEhPkdv39049eE36b7nkLwp8u3EtiaTOO0vjEnWMoYDb0TGIR3OV5wWKphm WRYcbDzpNV9+9mf7trYtL5WA5HlQ1bKgRsmTyC+ClcgXpaOh4M4RhKOUE04XuRaj vkz9acHuIS/Sz1odqNR+ORqiDzEyJ7GqF+plsZLwR/ePfZUjO6C1omrKtxFPwHIO QDcC18FyaY5bo5bGKYCTPMw+ycgvBOyw4g/VZMSj8tNcasuCHVu1fj4g1HTQ4MVa 3g== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:00 2025 by rpki-client