This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: TZGcD8LFf2+1K5zmD4igKvkJI5oCFBVPR5pQlRR4nys= Subject key identifier: 3E:A1:2A:27:D1:89:3C:14:CB:32:D0:3F:6E:BD:E2:2F:4E:70:EF:92 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6DC148B389FE2B08B09EB6DBEBAC9594CBC4A9F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0443 Signing time: Wed 21 Jan 2026 14:59:08 +0000 Manifest this update: Wed 21 Jan 2026 14:54:08 +0000 Manifest next update: Thu 22 Jan 2026 16:20:08 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: UQrmuQ012s83PbrB2obTOEDtpDRpdCpPB3tH9H1J/bY=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c1:48:b3:89:fe:2b:08:b0:9e:b6:db:eb:ac:95:94:cb:c4:a9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 21 14:54:08 2026 GMT Not After : Jan 22 16:20:08 2026 GMT Subject: CN=3EA12A27D1893C14CB32D03F6EBDE22F4E70EF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:72:7e:48:45:de:69:2c:3d:6a:72:ed:bb: 26:27:04:bb:ef:c1:45:96:f7:a8:ea:23:ba:0b:2f: b9:91:b4:96:44:60:be:5e:44:4b:cc:8e:32:5e:e5: 4a:23:99:d6:0b:f0:90:d0:e0:d9:6b:4e:1d:2d:18: 2c:15:cc:9e:c2:3a:b5:0b:92:e6:85:e7:0c:a7:e4: 2e:af:c0:14:01:1f:b9:16:89:63:28:b9:c1:a2:2f: 63:73:7b:69:d0:13:47:72:b7:00:75:23:54:0e:ce: 5a:1b:ca:d6:d8:43:b8:32:f1:22:38:14:bf:3f:69: 80:30:82:67:ca:4b:7a:3a:96:3f:f3:3b:af:47:4d: 50:df:da:3a:29:4e:8e:90:25:59:87:ec:1d:a6:57: 54:da:c3:20:1f:07:83:57:72:43:de:9f:9a:9d:be: a6:ee:29:07:91:37:8b:1f:5d:1f:18:11:d3:2e:3e: ea:f5:56:29:62:d8:52:2c:fb:a9:4d:7e:16:34:09: 3a:bb:5d:8f:dc:a2:b5:65:49:1c:78:f8:43:46:2b: 09:09:c1:38:bd:79:d2:8f:11:7d:dd:44:f8:f9:24: 0c:75:83:6d:c7:17:aa:2d:52:e7:0d:e5:94:6d:36: 0f:6c:81:29:79:68:bf:35:2f:93:4a:55:81:a8:98: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A1:2A:27:D1:89:3C:14:CB:32:D0:3F:6E:BD:E2:2F:4E:70:EF:92 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3e:1c:7c:c4:89:3d:68:30:fd:27:03:2a:6d:2a:30:7d:45: d7:f8:fd:b4:e3:87:d9:42:f5:4b:95:36:da:d2:de:84:60:ac: bf:b5:4b:3a:aa:e5:a6:08:66:40:f7:b6:68:41:0f:4b:37:d6: e4:93:28:b3:c9:ec:9d:69:c1:bb:c2:6a:66:91:6e:ec:54:b7: 85:31:be:93:04:fa:e0:bf:fd:ea:a5:01:12:44:e8:21:ee:a3: 67:93:12:74:6e:e1:2a:30:67:73:9e:2b:7b:01:cb:87:ad:26: f8:cf:6a:8c:25:54:04:cd:11:f8:2e:38:e0:bd:5c:87:da:f3: ec:99:9d:80:91:e7:37:9b:cc:44:09:fd:21:c4:97:fa:08:7e: 5b:78:f5:95:ef:c7:05:a1:e8:b6:50:e2:8e:0a:e6:4a:cf:46: 75:50:28:43:7a:95:37:ba:10:f5:6b:d7:b4:08:d4:ce:d3:b7: 1f:9f:1c:0e:b6:ad:f3:06:07:1e:6a:51:53:44:11:69:5e:55: d3:3c:a4:88:98:5c:53:44:38:da:f0:b2:64:b6:e3:b9:7b:a9: 07:a7:ec:0a:97:36:35:87:60:63:72:34:15:a2:61:f9:23:7e: 81:89:4e:ab:3a:b3:76:42:e0:46:05:a4:88:a0:46:e7:c1:c4: 83:7d:6d:8d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbcFIs4n+Kwiwnrbb66yVlMvEqfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMjExNDU0MDhaFw0yNjAxMjIxNjIwMDhaMDMxMTAvBgNV BAMTKDNFQTEyQTI3RDE4OTNDMTRDQjMyRDAzRjZFQkRFMjJGNEU3MEVGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaL3J+SEXeaSw9anLtuyYnBLvv wUWW96jqI7oLL7mRtJZEYL5eREvMjjJe5UojmdYL8JDQ4NlrTh0tGCwVzJ7COrUL kuaF5wyn5C6vwBQBH7kWiWMoucGiL2Nze2nQE0dytwB1I1QOzlobytbYQ7gy8SI4 FL8/aYAwgmfKS3o6lj/zO69HTVDf2jopTo6QJVmH7B2mV1TawyAfB4NXckPen5qd vqbuKQeRN4sfXR8YEdMuPur1Vili2FIs+6lNfhY0CTq7XY/corVlSRx4+ENGKwkJ wTi9edKPEX3dRPj5JAx1g23HF6otUucN5ZRtNg9sgSl5aL81L5NKVYGomBQDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPqEqJ9GJPBTLMtA/br3iL05w75IwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT4cfMSJPWgw/ScDKm0q MH1F1/j9tOOH2UL1S5U22tLehGCsv7VLOqrlpghmQPe2aEEPSzfW5JMos8nsnWnB u8JqZpFu7FS3hTG+kwT64L/96qUBEkToIe6jZ5MSdG7hKjBnc54rewHLh60m+M9q jCVUBM0R+C444L1ch9rz7JmdgJHnN5vMRAn9IcSX+gh+W3j1le/HBaHotlDijgrm Ss9GdVAoQ3qVN7oQ9WvXtAjUztO3H58cDrat8wYHHmpRU0QRaV5V0zykiJhcU0Q4 2vCyZLbjuXupB6fsCpc2NYdgY3I0FaJh+SN+gYlOqzqzdkLgRgWkiKBG58HEg31t jQ== -----END CERTIFICATE-----Generated at Thu Jan 22 00:24:50 2026 by rpki-client