This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Vvr7gqf35iTDJjs6nDG00NGNNhvQ9GkicFZ/xlVqdYw= Subject key identifier: 86:C2:B8:8C:69:F7:63:AB:2F:78:9C:12:69:AE:70:B8:C7:85:30:96 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3920D2F74946F779B28FA172A4B03D9C0ED039BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0433 Signing time: Fri 09 Jan 2026 18:22:21 +0000 Manifest this update: Fri 09 Jan 2026 18:17:21 +0000 Manifest next update: Sat 10 Jan 2026 20:40:21 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: YilJNSBuUjk0sHeJ3CMDagxU3u3+eQeLy6Flh3zzAtw=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 20:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:20:d2:f7:49:46:f7:79:b2:8f:a1:72:a4:b0:3d:9c:0e:d0:39:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 9 18:17:21 2026 GMT Not After : Jan 10 20:40:21 2026 GMT Subject: CN=86C2B88C69F763AB2F789C1269AE70B8C7853096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:92:22:13:66:3d:88:28:b9:b8:57:65:47: 40:e6:ea:be:c8:fe:7d:2e:e1:6a:ff:08:14:d5:a0: 4a:b8:24:03:63:7c:e8:62:b9:bc:a3:b6:e1:2a:1e: fe:28:95:7a:37:b0:10:12:fa:e3:7a:cb:9e:54:2c: 05:13:50:f2:c9:ee:72:b3:0f:fe:34:3e:3f:b1:dd: 1d:be:b3:2a:d8:ec:5b:c2:f3:19:be:6e:aa:14:0b: 05:ea:13:d8:90:64:68:7c:76:d7:d2:db:61:78:f3: 50:93:f9:f5:2f:69:ab:c7:f6:ca:f1:4c:f7:7c:ce: 12:10:29:dc:99:e2:5b:f5:f9:5b:c8:b4:8f:30:6d: 26:52:0c:c2:54:c8:a3:3c:a3:e1:60:12:c1:bb:3f: 1c:52:b6:01:66:36:42:ae:88:19:db:d4:58:79:ab: ce:e4:49:b8:f7:a8:95:bf:d8:33:6d:f0:4e:ab:4e: 99:19:2d:1a:cf:99:5d:b0:58:04:f8:c6:02:56:da: 82:7f:67:27:90:fb:fa:88:49:b9:ca:5b:6f:54:bc: 8b:40:6d:ba:0e:50:e1:4c:16:c6:47:60:85:df:f9: e5:4e:a9:ea:c3:8d:f0:2d:2a:bb:32:4e:a3:a1:47: 00:f1:95:cd:ed:6d:55:e3:8f:4d:39:12:cb:0a:88: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C2:B8:8C:69:F7:63:AB:2F:78:9C:12:69:AE:70:B8:C7:85:30:96 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3f:21:e9:aa:e3:9b:93:62:5a:24:52:2e:61:0e:14:5c:98: bf:24:b9:64:2c:6e:3e:bf:65:de:34:58:7b:a9:77:fd:0e:a4: 14:d1:4a:f8:ac:30:29:0a:af:5f:1a:3f:8e:87:3d:1e:6b:39: 76:75:01:0c:3f:82:44:e4:6f:01:39:6b:1a:8c:9b:7d:bc:9f: 56:58:0a:d6:04:45:5c:b8:1d:b1:15:ab:0f:7d:51:b4:d5:ae: b6:74:78:75:8e:83:9e:8b:e9:58:36:05:f2:a5:d2:58:5e:9f: d3:79:46:a1:85:06:7f:bd:5b:fa:4b:ad:fb:b1:57:ea:02:2d: fb:ef:c4:ec:6b:ce:6b:72:1d:86:22:66:19:65:61:9a:1b:aa: 8c:0e:38:c7:36:10:75:12:a5:9c:ad:fb:02:d4:f8:c1:19:c5: cb:3c:d9:f2:59:24:ee:cd:18:e6:ef:26:a2:44:0b:60:5a:86: 89:f5:26:26:b4:8b:30:9f:58:1e:55:c0:9f:58:d0:00:b7:02: b7:40:49:e9:8a:18:81:55:e8:07:92:18:3e:63:40:fa:c8:e2: 84:1b:87:62:0e:6c:f0:d0:7f:43:f3:bc:55:84:e8:ea:65:c9: 9d:bb:c5:b5:03:ad:62:a3:ec:ec:3f:c3:cb:f6:22:3d:1e:4f: 2c:74:02:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOSDS90lG93myj6FypLA9nA7QOb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDkxODE3MjFaFw0yNjAxMTAyMDQwMjFaMDMxMTAvBgNV BAMTKDg2QzJCODhDNjlGNzYzQUIyRjc4OUMxMjY5QUU3MEI4Qzc4NTMwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCZIiE2Y9iCi5uFdlR0Dm6r7I /n0u4Wr/CBTVoEq4JANjfOhiubyjtuEqHv4olXo3sBAS+uN6y55ULAUTUPLJ7nKz D/40Pj+x3R2+syrY7FvC8xm+bqoUCwXqE9iQZGh8dtfS22F481CT+fUvaavH9srx TPd8zhIQKdyZ4lv1+VvItI8wbSZSDMJUyKM8o+FgEsG7PxxStgFmNkKuiBnb1Fh5 q87kSbj3qJW/2DNt8E6rTpkZLRrPmV2wWAT4xgJW2oJ/ZyeQ+/qISbnKW29UvItA bboOUOFMFsZHYIXf+eVOqerDjfAtKrsyTqOhRwDxlc3tbVXjj005EssKiCJHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhsK4jGn3Y6sveJwSaa5wuMeFMJYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj8h6arjm5NiWiRSLmEO FFyYvyS5ZCxuPr9l3jRYe6l3/Q6kFNFK+KwwKQqvXxo/joc9Hms5dnUBDD+CRORv ATlrGoybfbyfVlgK1gRFXLgdsRWrD31RtNWutnR4dY6DnovpWDYF8qXSWF6f03lG oYUGf71b+kut+7FX6gIt++/E7GvOa3IdhiJmGWVhmhuqjA44xzYQdRKlnK37AtT4 wRnFyzzZ8lkk7s0Y5u8mokQLYFqGifUmJrSLMJ9YHlXAn1jQALcCt0BJ6YoYgVXo B5IYPmNA+sjihBuHYg5s8NB/Q/O8VYTo6mXJnbvFtQOtYqPs7D/Dy/YiPR5PLHQC rQ== -----END CERTIFICATE-----Generated at Sat Jan 10 01:53:13 2026 by rpki-client