This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: BgM509jkxbyrM1q8lbbBeTMf5ePgDp5ku/6cEqgNJoE= Subject key identifier: 47:38:7E:3E:C3:8B:D7:CB:99:04:0F:31:06:33:CB:B7:14:B4:4A:21 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 61520E64D6185059A2A84F522849359CE3D7C197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0401 Signing time: Wed 03 Dec 2025 08:48:17 +0000 Manifest this update: Wed 03 Dec 2025 08:43:17 +0000 Manifest next update: Thu 04 Dec 2025 11:19:17 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: vasF5jYVCNaH822KFRbw5yGPTFTNTmwh1eZhDPx4vEU=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:52:0e:64:d6:18:50:59:a2:a8:4f:52:28:49:35:9c:e3:d7:c1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 3 08:43:17 2025 GMT Not After : Dec 4 11:19:17 2025 GMT Subject: CN=47387E3EC38BD7CB99040F310633CBB714B44A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:e0:01:56:f8:99:1d:ea:d1:b2:8a:47:35: e1:58:6f:56:12:95:4c:53:ab:4c:d8:04:b5:3f:75: 7f:e1:36:c3:7c:e1:c0:fc:b4:65:74:23:8e:4c:82: 71:55:d4:88:0a:3f:bc:ea:2d:87:5c:d8:97:bf:2b: d4:26:f4:5b:42:96:ee:4d:40:64:97:e6:b6:96:c8: f4:87:6c:7c:fc:99:23:4a:c3:ef:9d:0e:0d:6a:01: 1c:98:f2:52:df:97:a9:3b:f6:ec:ea:37:a7:5a:41: 8a:b2:3e:cb:38:a9:6e:ff:b5:53:40:5c:9d:c0:d6: 2f:8a:21:d8:d9:4a:41:79:7e:01:15:0a:3f:68:25: 52:c2:d0:7e:54:36:d6:4b:f8:ea:0b:11:e0:20:fe: 1c:1f:3a:01:f4:c6:52:40:05:0a:07:23:3d:0e:07: 69:54:45:81:9b:b5:22:78:72:a1:7d:10:89:c5:e7: 14:5e:12:0d:3f:c9:27:4e:ec:e4:0a:c3:69:f7:0c: 06:58:a2:80:4b:24:9d:b4:4d:c8:7d:58:03:be:9b: 8e:3f:56:b3:32:0f:75:67:11:fb:1d:17:d8:03:cd: 36:88:16:62:88:80:6b:48:14:23:40:b5:1f:43:13: b2:dd:e8:d8:fa:64:d2:eb:0a:44:f1:98:ca:60:05: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:38:7E:3E:C3:8B:D7:CB:99:04:0F:31:06:33:CB:B7:14:B4:4A:21 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e1:d3:e9:0e:4b:50:f4:d1:96:f1:ac:34:f3:f0:c5:c9:0c: 1e:40:06:1b:c3:9c:43:42:5b:a0:54:4d:74:db:17:61:a0:df: b0:09:26:cc:7f:2f:80:dd:a1:92:fd:f5:cb:ba:53:4d:be:d4: a1:fb:10:b2:c7:0c:5d:44:76:3b:a1:9d:f0:1a:2d:62:d0:8d: f4:3b:e5:0f:12:cc:80:a5:44:f4:0c:df:6c:62:4f:f9:ab:c0: cf:1a:0c:2f:d7:e4:a3:cd:22:8b:d1:09:56:0f:59:a2:3d:62: b7:76:97:fa:03:ee:00:da:89:37:21:9f:98:38:08:b8:5f:64: 8c:20:a4:16:9e:6e:0f:3b:be:08:01:5f:9a:b1:85:89:09:bd: 97:ca:df:4b:d6:13:99:b3:ab:61:77:b4:7f:f2:8f:fd:4b:27: 83:6e:f6:7b:97:6b:89:70:57:17:bb:e2:e0:2a:63:21:9f:18: 04:82:00:a3:bb:b7:02:ce:69:10:bb:01:a8:5f:bb:73:29:c8: 71:dd:9d:f3:30:77:06:b6:d0:9a:04:08:95:e3:f5:5f:8b:96: b0:cc:a4:5a:3e:b9:98:6a:66:b2:59:f8:6f:c4:55:4f:65:07: e9:92:0f:1b:5f:5b:8f:4a:1d:1a:1a:fa:6c:7c:e4:f0:a0:ab: fc:85:63:fb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYVIOZNYYUFmiqE9SKEk1nOPXwZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDMwODQzMTdaFw0yNTEyMDQxMTE5MTdaMDMxMTAvBgNV BAMTKDQ3Mzg3RTNFQzM4QkQ3Q0I5OTA0MEYzMTA2MzNDQkI3MTRCNDRBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAK+ABVviZHerRsopHNeFYb1YS lUxTq0zYBLU/dX/hNsN84cD8tGV0I45MgnFV1IgKP7zqLYdc2Je/K9Qm9FtClu5N QGSX5raWyPSHbHz8mSNKw++dDg1qARyY8lLfl6k79uzqN6daQYqyPss4qW7/tVNA XJ3A1i+KIdjZSkF5fgEVCj9oJVLC0H5UNtZL+OoLEeAg/hwfOgH0xlJABQoHIz0O B2lURYGbtSJ4cqF9EInF5xReEg0/ySdO7OQKw2n3DAZYooBLJJ20Tch9WAO+m44/ VrMyD3VnEfsdF9gDzTaIFmKIgGtIFCNAtR9DE7Ld6Nj6ZNLrCkTxmMpgBS3BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURzh+PsOL18uZBA8xBjPLtxS0SiEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuHT6Q5LUPTRlvGsNPPw xckMHkAGG8OcQ0JboFRNdNsXYaDfsAkmzH8vgN2hkv31y7pTTb7UofsQsscMXUR2 O6Gd8BotYtCN9DvlDxLMgKVE9AzfbGJP+avAzxoML9fko80ii9EJVg9Zoj1it3aX +gPuANqJNyGfmDgIuF9kjCCkFp5uDzu+CAFfmrGFiQm9l8rfS9YTmbOrYXe0f/KP /Usng272e5driXBXF7vi4CpjIZ8YBIIAo7u3As5pELsBqF+7cynIcd2d8zB3BrbQ mgQIleP1X4uWsMykWj65mGpmsln4b8RVT2UH6ZIPG19bj0odGhr6bHzk8KCr/IVj +w== -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:53 2025 by rpki-client