This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: q70I+Ives6mQfHQUB1PKY1chgZgH4NI8KJQY2bG158g= Subject key identifier: 57:38:D1:A3:4F:75:28:F8:43:26:D5:88:6C:7D:BE:38:EE:9E:75:A7 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 544B5A2D80AB0D5C2FFBC10CA6C7CC33CF86BCF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0429 Signing time: Fri 02 Jan 2026 05:21:16 +0000 Manifest this update: Fri 02 Jan 2026 05:16:16 +0000 Manifest next update: Sat 03 Jan 2026 07:32:16 +0000 Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: GQBF8EMJV311Gw4kOeLI78grtKsNzdDvZQYsUuWOIUg=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4b:5a:2d:80:ab:0d:5c:2f:fb:c1:0c:a6:c7:cc:33:cf:86:bc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 2 05:16:16 2026 GMT Not After : Jan 3 07:32:16 2026 GMT Subject: CN=5738D1A34F7528F84326D5886C7DBE38EE9E75A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:f2:48:d0:22:22:37:f2:76:74:6d:1c:66: c1:a8:07:b3:fa:bf:ff:17:b9:88:4e:0e:e0:87:52: f5:9e:35:c1:cd:d2:d4:3f:64:3a:0b:cc:da:f9:16: 88:c4:08:de:b9:27:62:80:8a:27:16:55:59:2d:6a: 5d:c4:4f:ec:68:f5:95:c5:e5:69:ae:ef:85:db:05: 6a:f8:9d:05:67:23:d9:4f:a0:94:b5:52:bd:c3:ce: 6c:d4:b0:31:3d:6d:dc:84:c8:4e:2d:bb:54:10:a7: cf:3c:22:32:f2:d4:d0:49:de:72:d0:62:2c:0d:24: 0b:35:be:eb:a5:c9:10:2f:23:2d:db:58:45:17:1d: 39:0b:21:fc:a7:c9:8c:16:09:09:a0:56:ad:e7:76: 78:b3:18:99:1b:18:ac:5e:2c:78:24:72:bf:5a:55: 53:01:a2:f9:92:c1:6b:ad:f6:3b:ba:0c:8e:9a:00: e2:6d:e2:9c:2a:da:11:a2:1a:78:67:67:f5:4c:ba: 3a:b5:cf:a0:29:91:0b:c1:a2:40:66:67:8e:40:9e: ad:0d:47:fc:34:83:0b:14:ee:69:45:f8:78:57:db: 30:61:6c:37:6d:b6:75:0f:38:f4:11:32:26:24:47: 4c:cd:64:62:ad:e5:e0:26:12:db:48:31:bc:df:42: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:38:D1:A3:4F:75:28:F8:43:26:D5:88:6C:7D:BE:38:EE:9E:75:A7 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:94:e2:91:e4:fd:58:12:9d:f1:8f:d7:b6:88:14:9a:56: e7:04:02:50:93:9e:d9:db:12:14:a8:dc:6b:7a:55:0c:e8:ee: 24:7a:83:80:59:59:aa:e0:2b:e0:98:d7:9e:02:ee:6f:a2:39: 48:39:b7:f4:21:41:f9:51:33:46:01:55:a5:ce:e7:ee:57:78: f7:2e:0c:1a:9e:fd:e4:f8:65:2b:ab:0c:f9:52:ec:5a:60:c4: 70:7d:46:81:37:ad:4a:2e:cd:d7:fa:19:3e:a8:56:17:02:f9: 4f:04:0d:b6:96:0f:be:53:c0:7e:6c:de:b6:61:e9:30:f8:da: f3:4b:54:1c:85:9b:0e:b3:7d:01:51:9c:95:a1:7b:54:e2:43: ae:0f:7e:ec:a1:82:75:a8:a2:17:62:9e:29:b5:1c:b2:5c:45: e8:52:bb:63:00:7d:88:d5:2a:52:89:a9:75:af:3c:56:85:ec: 6b:18:6e:bb:6f:3a:fd:c2:dc:d1:2e:50:0c:22:bb:ba:71:ee: 1c:8c:1f:47:d4:80:4f:0d:68:8f:b4:f1:d1:12:0b:a2:3d:bd: 2c:c2:b1:37:f8:d8:61:be:7e:46:98:27:47:17:87:ba:37:9e: e6:68:b3:60:5f:a4:95:df:ae:e2:2c:18:04:be:d5:f5:3e:7c: 52:8a:43:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVEtaLYCrDVwv+8EMpsfMM8+GvPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDIwNTE2MTZaFw0yNjAxMDMwNzMyMTZaMDMxMTAvBgNV BAMTKDU3MzhEMUEzNEY3NTI4Rjg0MzI2RDU4ODZDN0RCRTM4RUU5RTc1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/x/JI0CIiN/J2dG0cZsGoB7P6 v/8XuYhODuCHUvWeNcHN0tQ/ZDoLzNr5FojECN65J2KAiicWVVktal3ET+xo9ZXF 5Wmu74XbBWr4nQVnI9lPoJS1Ur3DzmzUsDE9bdyEyE4tu1QQp888IjLy1NBJ3nLQ YiwNJAs1vuulyRAvIy3bWEUXHTkLIfynyYwWCQmgVq3ndnizGJkbGKxeLHgkcr9a VVMBovmSwWut9ju6DI6aAOJt4pwq2hGiGnhnZ/VMujq1z6ApkQvBokBmZ45Anq0N R/w0gwsU7mlF+HhX2zBhbDdttnUPOPQRMiYkR0zNZGKt5eAmEttIMbzfQu6XAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVzjRo091KPhDJtWIbH2+OO6edacwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARduU4pHk/VgSnfGP17aI FJpW5wQCUJOe2dsSFKjca3pVDOjuJHqDgFlZquAr4JjXngLub6I5SDm39CFB+VEz RgFVpc7n7ld49y4MGp795PhlK6sM+VLsWmDEcH1GgTetSi7N1/oZPqhWFwL5TwQN tpYPvlPAfmzetmHpMPja80tUHIWbDrN9AVGclaF7VOJDrg9+7KGCdaiiF2KeKbUc slxF6FK7YwB9iNUqUompda88VoXsaxhuu286/cLc0S5QDCK7unHuHIwfR9SATw1o j7Tx0RILoj29LMKxN/jYYb5+RpgnRxeHujee5mizYF+kld+u4iwYBL7V9T58UopD Jg== -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:44 2026 by rpki-client