This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: HDaQ5a/yZQbhOv1wXwBcvtDlXKmIT8eqmscvFzQGiVY= Subject key identifier: 7D:3D:37:E0:D7:97:F2:62:D4:EC:FC:85:3E:3D:3E:87:1D:E7:E5:76 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 191DB946FED87418BD76BBDD464B303C645AD1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03FE Signing time: Mon 01 Dec 2025 04:27:51 +0000 Manifest this update: Mon 01 Dec 2025 04:22:51 +0000 Manifest next update: Tue 02 Dec 2025 06:51:51 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Z79AtBGe7D6v6wdS102GTkUYIIsbzssMLhgh2gXoNeE=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 06:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1d:b9:46:fe:d8:74:18:bd:76:bb:dd:46:4b:30:3c:64:5a:d1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 1 04:22:51 2025 GMT Not After : Dec 2 06:51:51 2025 GMT Subject: CN=7D3D37E0D797F262D4ECFC853E3D3E871DE7E576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:33:5a:6d:24:e7:9d:96:44:44:da:62:da: 8b:98:3e:20:86:98:47:cf:04:4f:4e:88:6f:b7:d9: 51:67:7a:07:54:a7:b9:4f:9b:ac:bf:2a:2c:ad:12: ef:8f:bd:e9:59:29:6b:71:e7:1e:ac:d7:d4:09:34: 95:43:b0:0a:b0:18:84:75:0f:4e:af:94:82:11:73: ef:9b:8d:ba:2d:0c:8a:95:92:89:aa:d9:84:53:6f: 16:ac:ad:20:d2:14:ee:e8:4d:3b:83:7f:e7:42:4c: 96:94:50:49:1a:90:fd:3d:0e:d8:d7:ca:ed:ab:de: 47:9f:90:a4:bc:23:b5:82:c2:a2:73:53:90:b9:1b: 4c:1e:1d:fe:56:df:3f:9b:76:9f:81:c0:32:88:7d: ea:44:9f:93:04:65:f2:cb:11:1f:c7:0b:86:5f:cf: 03:38:0b:c5:25:ee:52:12:a3:dc:27:08:a3:af:29: 11:3d:92:92:cb:d2:61:20:8d:59:c0:87:33:76:c4: 68:58:c3:18:f2:7b:fb:17:f9:cb:9c:89:5e:61:79: 0a:d0:5c:99:d5:07:38:9e:7f:4c:8b:d2:23:63:c8: 26:19:f3:1e:a5:0a:cf:dd:76:84:c4:99:1a:8f:66: 45:5a:6d:80:a3:53:9f:61:59:96:a8:a2:60:70:ce: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3D:37:E0:D7:97:F2:62:D4:EC:FC:85:3E:3D:3E:87:1D:E7:E5:76 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3e:54:9f:4d:53:02:67:fc:be:46:6e:9d:39:a5:10:76:0f: 98:3b:0d:39:a4:30:26:82:ff:ae:1f:c6:90:c7:4d:37:cf:21: a3:1d:af:ba:ee:79:b6:08:5d:b7:61:63:42:d0:8f:a1:e3:73: 0e:0a:25:7e:47:c7:02:56:d1:e0:bd:ce:e7:79:c6:0a:b7:82: 2a:fc:af:9c:c7:c2:13:23:38:99:12:e1:65:d9:ed:c0:93:93: c9:70:f8:e3:80:e1:e6:a7:2a:37:1e:82:a4:9d:b3:f9:24:7f: 51:b7:73:f9:d2:27:50:ac:dc:93:f1:86:c3:eb:7c:49:5b:c8: 7b:ba:3c:67:ea:47:f3:c9:ec:f9:f7:8c:68:56:0e:f9:03:89: a6:db:6f:86:8b:bd:09:9b:22:45:7f:be:61:a3:15:0a:bd:66: eb:d5:cc:78:fa:04:8f:90:cc:2c:85:04:6d:7f:fa:3b:82:c6: 93:45:df:c5:aa:76:c5:36:8e:c9:5a:33:ee:ce:fd:0c:cf:cd: e7:06:bd:59:d0:84:30:fe:16:1a:47:2c:f5:8d:66:de:5d:bd: ac:7f:57:06:41:2a:2e:2b:cd:98:e8:38:11:45:db:fb:cd:c5: 94:df:d4:58:7a:3f:6d:7c:dd:8a:f8:df:1b:f6:bf:bc:7b:d4: 3b:7c:c6:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGR25Rv7YdBi9drvdRkswPGRa0a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDEwNDIyNTFaFw0yNTEyMDIwNjUxNTFaMDMxMTAvBgNV BAMTKDdEM0QzN0UwRDc5N0YyNjJENEVDRkM4NTNFM0QzRTg3MURFN0U1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7zNabSTnnZZERNpi2ouYPiCG mEfPBE9OiG+32VFnegdUp7lPm6y/KiytEu+PvelZKWtx5x6s19QJNJVDsAqwGIR1 D06vlIIRc++bjbotDIqVkomq2YRTbxasrSDSFO7oTTuDf+dCTJaUUEkakP09DtjX yu2r3kefkKS8I7WCwqJzU5C5G0weHf5W3z+bdp+BwDKIfepEn5MEZfLLER/HC4Zf zwM4C8Ul7lISo9wnCKOvKRE9kpLL0mEgjVnAhzN2xGhYwxjye/sX+cuciV5heQrQ XJnVBzief0yL0iNjyCYZ8x6lCs/ddoTEmRqPZkVabYCjU59hWZaoomBwzsy3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfT034NeX8mLU7PyFPj0+hx3n5XYwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYz5Un01TAmf8vkZunTml EHYPmDsNOaQwJoL/rh/GkMdNN88hox2vuu55tghdt2FjQtCPoeNzDgolfkfHAlbR 4L3O53nGCreCKvyvnMfCEyM4mRLhZdntwJOTyXD444Dh5qcqNx6CpJ2z+SR/Ubdz +dInUKzck/GGw+t8SVvIe7o8Z+pH88ns+feMaFYO+QOJpttvhou9CZsiRX++YaMV Cr1m69XMePoEj5DMLIUEbX/6O4LGk0Xfxap2xTaOyVoz7s79DM/N5wa9WdCEMP4W Gkcs9Y1m3l29rH9XBkEqLivNmOg4EUXb+83FlN/UWHo/bXzdivjfG/a/vHvUO3zG Tg== -----END CERTIFICATE-----Generated at Mon Dec 1 22:56:48 2025 by rpki-client