This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 6v3RAAb3mVOjAi46f5ydCwJgMKP9KvU8wT1C26SoCjc= Subject key identifier: 1A:42:76:30:F6:BE:7E:D9:27:AF:0B:73:41:70:63:C4:F9:FB:C7:71 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 7E3F4AED3FF03FFC4989527FC796603742C61C14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0430 Signing time: Wed 07 Jan 2026 15:17:10 +0000 Manifest this update: Wed 07 Jan 2026 15:12:10 +0000 Manifest next update: Thu 08 Jan 2026 15:46:10 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: QVYWf3CW7BVqKC5jkKi6x3wNvyqJx6DEolKBP8+AWmQ=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3f:4a:ed:3f:f0:3f:fc:49:89:52:7f:c7:96:60:37:42:c6:1c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 7 15:12:10 2026 GMT Not After : Jan 8 15:46:10 2026 GMT Subject: CN=1A427630F6BE7ED927AF0B73417063C4F9FBC771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ad:74:d8:64:0e:c0:c5:bb:5b:b2:10:be:b6: 0b:07:1a:05:74:6b:a2:27:2a:51:7c:86:e7:48:d7: 37:9f:cb:81:63:6a:37:9b:38:26:2a:47:17:26:16: 4f:7e:3b:22:f7:d4:bd:5a:c2:ea:37:e6:8f:59:0a: 53:2f:1b:0d:7b:02:89:85:c9:e8:5c:15:b8:6f:c3: 3d:8e:fa:8e:09:81:e8:21:66:29:ca:31:85:1e:0f: a5:7c:0c:db:33:19:c0:cf:7c:13:7a:04:ff:93:bd: 43:1c:85:53:c6:35:f5:24:4a:ba:e0:30:ce:b0:e8: 4c:3c:e5:10:95:8a:25:27:9b:35:41:1d:02:fe:43: c9:2d:c0:4e:6a:90:3f:d9:ed:67:22:7e:e9:d2:1e: 86:a8:89:c7:56:a8:5c:45:56:29:b0:02:23:c5:f1: 5f:b0:fb:5e:39:de:30:a6:15:32:e2:05:66:4c:f9: b9:48:4b:34:c7:db:55:56:52:4f:d6:3c:bb:e4:cf: e8:ef:14:f8:4c:59:cf:2b:67:74:9a:df:b1:94:0d: b1:64:af:c1:dc:92:46:4f:91:24:6f:f9:02:81:21: 5a:2d:fd:c5:fe:41:89:06:9c:39:21:e4:32:b7:fb: 35:0e:97:31:c7:1a:a2:30:b9:5c:16:1c:76:11:58: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:42:76:30:F6:BE:7E:D9:27:AF:0B:73:41:70:63:C4:F9:FB:C7:71 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:09:b5:21:d6:7e:1a:fe:b5:06:34:a8:13:f2:50:7e:28:04: a7:d0:bd:36:3f:9a:3f:ae:0d:42:ae:38:38:2e:9b:82:02:95: 23:9a:d0:a2:da:6b:c8:e6:ae:13:b0:8b:2d:74:94:1d:51:02: ce:f2:a3:e0:6a:66:bb:dd:e1:30:92:76:ca:82:33:65:36:b3: 32:e8:65:67:9b:77:dc:20:3e:fe:33:b7:9d:ab:e0:ec:ed:91: 67:57:29:88:a9:60:c0:9c:fd:21:d3:32:b7:45:4f:3f:04:96: f6:35:35:17:e8:69:b4:39:a6:fa:14:69:4f:2a:82:87:ba:f5: 9a:5b:01:67:fd:e3:e0:d0:be:ba:bd:da:a2:e0:54:25:cc:1e: ce:60:48:86:b9:89:f2:c0:89:37:b4:ed:55:cd:32:0c:3f:c9: d5:f6:a4:be:f2:10:a6:96:90:24:ed:d2:75:b8:4a:72:33:a5: da:24:c0:13:64:6e:5d:5d:a5:53:71:41:97:e5:18:a0:6a:5a: a0:7b:3f:83:ee:20:2c:a8:b2:82:1b:c9:37:6f:19:43:73:65: a0:d3:b4:d4:d7:6a:03:c6:53:63:45:cc:27:fb:45:84:d3:d0: b1:7a:88:c6:38:4b:21:1d:1a:d2:fa:c5:aa:d0:17:f9:36:f5: f0:9b:78:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfj9K7T/wP/xJiVJ/x5ZgN0LGHBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDcxNTEyMTBaFw0yNjAxMDgxNTQ2MTBaMDMxMTAvBgNV BAMTKDFBNDI3NjMwRjZCRTdFRDkyN0FGMEI3MzQxNzA2M0M0RjlGQkM3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMrXTYZA7AxbtbshC+tgsHGgV0 a6InKlF8hudI1zefy4FjajebOCYqRxcmFk9+OyL31L1awuo35o9ZClMvGw17AomF yehcFbhvwz2O+o4JgeghZinKMYUeD6V8DNszGcDPfBN6BP+TvUMchVPGNfUkSrrg MM6w6Ew85RCViiUnmzVBHQL+Q8ktwE5qkD/Z7WcifunSHoaoicdWqFxFVimwAiPF 8V+w+1453jCmFTLiBWZM+blISzTH21VWUk/WPLvkz+jvFPhMWc8rZ3Sa37GUDbFk r8HckkZPkSRv+QKBIVot/cX+QYkGnDkh5DK3+zUOlzHHGqIwuVwWHHYRWKKxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGkJ2MPa+ftknrwtzQXBjxPn7x3EwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQm1IdZ+Gv61BjSoE/JQ figEp9C9Nj+aP64NQq44OC6bggKVI5rQotpryOauE7CLLXSUHVECzvKj4Gpmu93h MJJ2yoIzZTazMuhlZ5t33CA+/jO3navg7O2RZ1cpiKlgwJz9IdMyt0VPPwSW9jU1 F+hptDmm+hRpTyqCh7r1mlsBZ/3j4NC+ur3aouBUJcwezmBIhrmJ8sCJN7TtVc0y DD/J1fakvvIQppaQJO3SdbhKcjOl2iTAE2RuXV2lU3FBl+UYoGpaoHs/g+4gLKiy ghvJN28ZQ3NloNO01NdqA8ZTY0XMJ/tFhNPQsXqIxjhLIR0a0vrFqtAX+Tb18Jt4 iQ== -----END CERTIFICATE-----Generated at Wed Jan 7 20:37:42 2026 by rpki-client