This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: N5QPnAFsqeKaYN8sx8MW8+35BdvUzSKfYGc7wuSt4vQ= Subject key identifier: 31:D8:AE:CD:77:CE:75:D8:9D:4E:30:31:32:41:83:B8:BC:85:E4:20 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 4A0D2B888F16406B8BBCEC0C28CED9503E489179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 041D Signing time: Wed 24 Dec 2025 12:09:33 +0000 Manifest this update: Wed 24 Dec 2025 12:04:33 +0000 Manifest next update: Thu 25 Dec 2025 13:28:33 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: ZcHW8yfz6WNbT/fTzQzuQP1RWjXvwO9AfpvRq+lDTIo=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0d:2b:88:8f:16:40:6b:8b:bc:ec:0c:28:ce:d9:50:3e:48:91:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 24 12:04:33 2025 GMT Not After : Dec 25 13:28:33 2025 GMT Subject: CN=31D8AECD77CE75D89D4E3031324183B8BC85E420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:33:c0:19:37:bd:e5:f0:31:60:c8:5a:74: 8e:b4:d5:ab:a2:6b:be:f5:72:00:23:f2:86:28:d9: ad:cd:7c:be:68:41:95:1c:22:a8:a4:9a:e5:d0:4b: 67:ea:4d:07:02:b3:d3:b0:7f:05:73:c0:f9:a5:0e: 72:75:9a:44:0f:ff:01:a8:9b:6b:a2:75:e0:e9:8d: 67:a2:16:15:79:6e:2b:69:94:30:b7:2d:b8:ec:ce: 05:bf:7d:e3:80:7c:97:07:1d:95:1b:7f:b3:74:27: 92:7b:71:f6:b6:ea:08:00:60:ea:83:6e:65:dc:09: 87:84:76:d1:83:e7:a2:91:aa:b8:7e:4e:a1:70:ac: 5c:21:5f:95:94:f1:12:e7:05:61:12:ab:46:58:93: 4f:fa:65:00:40:6f:bf:a0:a5:a2:75:19:39:f1:8c: 31:1b:a0:15:bb:e1:00:08:ce:a6:69:0d:aa:8a:07: cf:91:81:b2:69:b5:c0:e6:67:23:9a:ee:d3:b2:b5: d0:4e:d7:c5:d5:0c:3d:31:37:83:f8:60:8b:e8:5b: c2:59:6e:a5:6c:fc:9e:6a:09:f2:d9:f9:71:eb:02: 83:75:59:2e:82:b3:25:5e:f4:d8:8e:bf:ef:9d:81: 16:29:56:a1:8c:a2:b1:9c:b5:a6:51:e5:ad:47:53: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D8:AE:CD:77:CE:75:D8:9D:4E:30:31:32:41:83:B8:BC:85:E4:20 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6c:35:b1:79:61:9d:03:ff:d6:3d:a9:81:aa:4b:37:a1:07: 4e:0e:81:f6:c7:85:46:75:38:1b:26:d5:87:64:bb:33:6a:48: 44:92:7d:84:71:af:88:a6:af:cb:02:e4:cf:d8:20:62:7a:e1: a6:f7:9f:47:bf:fd:86:4c:2e:4a:49:70:06:e1:b3:ce:99:5b: 05:fc:ff:e8:14:91:e4:84:15:7a:4d:52:ee:fd:56:6d:44:ad: 64:96:32:dd:1a:e3:cf:3f:80:12:95:cc:94:9d:61:fb:fa:35: 6b:59:c5:26:3b:ff:66:37:1d:03:ef:8c:37:c6:b6:85:46:f4: 2e:82:12:c4:36:9e:8d:0c:28:2f:52:d5:f6:71:04:5f:cc:da: 1c:4a:f5:eb:f4:15:56:11:a5:a9:d6:58:ed:93:fc:78:e8:0e: 51:80:39:1e:e6:d1:8e:e3:d6:95:b1:ca:76:92:49:cf:df:17: 17:2d:0a:e4:31:01:61:9c:53:16:46:68:09:c1:57:82:30:3c: 10:dc:ec:eb:9a:aa:32:a0:79:d5:b8:72:b3:51:e7:d7:30:4d: 0e:23:fb:82:c7:c7:2b:ba:10:1f:14:7f:6f:c8:68:9e:86:4c: 1e:b9:8a:5a:8f:1c:55:17:91:1b:64:86:8f:a0:59:4f:74:12: b4:39:26:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSg0riI8WQGuLvOwMKM7ZUD5IkXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMjQxMjA0MzNaFw0yNTEyMjUxMzI4MzNaMDMxMTAvBgNV BAMTKDMxRDhBRUNENzdDRTc1RDg5RDRFMzAzMTMyNDE4M0I4QkM4NUU0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchDPAGTe95fAxYMhadI601aui a771cgAj8oYo2a3NfL5oQZUcIqikmuXQS2fqTQcCs9OwfwVzwPmlDnJ1mkQP/wGo m2uideDpjWeiFhV5bitplDC3LbjszgW/feOAfJcHHZUbf7N0J5J7cfa26ggAYOqD bmXcCYeEdtGD56KRqrh+TqFwrFwhX5WU8RLnBWESq0ZYk0/6ZQBAb7+gpaJ1GTnx jDEboBW74QAIzqZpDaqKB8+RgbJptcDmZyOa7tOytdBO18XVDD0xN4P4YIvoW8JZ bqVs/J5qCfLZ+XHrAoN1WS6CsyVe9NiOv++dgRYpVqGMorGctaZR5a1HU4hBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMdiuzXfOddidTjAxMkGDuLyF5CAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGw1sXlhnQP/1j2pgapL N6EHTg6B9seFRnU4GybVh2S7M2pIRJJ9hHGviKavywLkz9ggYnrhpvefR7/9hkwu SklwBuGzzplbBfz/6BSR5IQVek1S7v1WbUStZJYy3Rrjzz+AEpXMlJ1h+/o1a1nF Jjv/ZjcdA++MN8a2hUb0LoISxDaejQwoL1LV9nEEX8zaHEr16/QVVhGlqdZY7ZP8 eOgOUYA5HubRjuPWlbHKdpJJz98XFy0K5DEBYZxTFkZoCcFXgjA8ENzs65qqMqB5 1bhys1Hn1zBNDiP7gsfHK7oQHxR/b8honoZMHrmKWo8cVReRG2SGj6BZT3QStDkm JQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:38:38 2025 by rpki-client