This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: eVnOvhGv8GiuUGYDUrWHkW29IGITFz22G9uTs6JEwAU=
Subject key identifier: 56:68:AB:78:A7:4C:93:25:78:D0:CD:EA:5B:5E:5A:F4:49:88:5B:D8
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 5B41521ECF24204C827AE7D2CC0BD3A6A8D2E8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 045B
Signing time: Sun 08 Feb 2026 23:21:55 +0000
Manifest this update: Sun 08 Feb 2026 23:16:55 +0000
Manifest next update: Tue 10 Feb 2026 02:27:55 +0000
Files and hashes: 1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yAg9nTywF0Eq5R9dzI5Fh5JQsXnCjJLdzEi2wmanQBo=)
3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Feb 2026 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:41:52:1e:cf:24:20:4c:82:7a:e7:d2:cc:0b:d3:a6:a8:d2:e8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Feb 8 23:16:55 2026 GMT
Not After : Feb 10 02:27:55 2026 GMT
Subject: CN=5668AB78A74C932578D0CDEA5B5E5AF449885BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:17:98:2f:e5:c8:aa:ed:5e:b7:76:60:9f:
d6:59:73:86:c8:9a:4a:ba:ab:71:9a:26:26:0f:a1:
6f:66:2f:2b:3a:16:59:f2:7f:4f:02:bb:62:f5:16:
49:0a:81:36:ef:2b:02:a7:2b:1b:9f:73:ab:c5:17:
34:46:d4:0b:40:e2:51:7e:78:31:55:49:56:96:37:
a2:c1:5e:04:1c:11:40:5b:62:5c:89:5c:73:be:f4:
b8:fc:b0:45:d9:e7:65:7a:68:6d:c7:af:91:99:d5:
ec:0f:b4:02:2a:d4:ee:0e:61:06:c6:22:fc:b2:c9:
84:2f:61:e2:78:5e:86:ca:c7:f1:25:85:4f:34:9a:
a6:8a:4d:e6:21:de:11:cd:c7:28:2a:fe:83:af:41:
47:e4:0d:08:59:4b:2f:4a:c0:96:da:6e:a8:81:7c:
c7:a0:79:bd:0c:b8:60:4c:b5:ca:a6:d2:f0:b6:c5:
73:e5:a5:05:c7:e4:7c:28:a2:c5:69:4b:39:f1:0d:
62:4b:ce:47:b5:d6:f5:cd:31:4b:86:65:4e:82:e1:
08:4c:f6:a9:7d:d4:1c:14:1f:81:fb:9f:85:16:86:
cb:68:a8:7f:b8:4e:fa:a0:37:b1:16:0d:3b:62:79:
7f:73:69:0c:c4:13:49:6d:e6:fe:bd:e5:83:d0:63:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:AB:78:A7:4C:93:25:78:D0:CD:EA:5B:5E:5A:F4:49:88:5B:D8
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:81:fb:ce:af:4f:0c:d5:60:4c:91:7c:9c:53:b1:c8:88:
ab:3c:22:b9:d8:83:11:c4:d6:bb:98:11:ed:d0:4d:5e:8a:42:
cb:ae:ba:49:1e:01:28:c1:26:c7:8b:f6:60:48:a9:b4:98:cf:
9b:50:8c:18:5b:ce:e7:3a:a7:9c:f1:58:4e:1b:9e:2d:55:c9:
cc:00:49:fc:f6:f6:1a:ea:e1:a4:ec:d2:ba:c3:d5:bf:d0:07:
44:30:e1:13:40:5f:96:ea:9e:b3:ec:ea:86:ca:2b:cd:16:ab:
ba:50:bd:21:bf:78:e9:7a:0b:4e:c5:0b:22:8c:d4:a2:17:1b:
d6:16:6f:36:ca:5f:eb:62:03:85:08:7a:5e:c0:57:52:3c:5a:
df:a3:30:42:dd:6d:95:6a:4b:54:5e:7c:21:b1:ed:43:5b:a8:
43:95:a9:c7:55:5e:96:7b:00:c6:2e:e3:6a:16:da:b3:74:d3:
30:34:6d:4c:13:cb:89:28:e5:21:2d:ba:a4:51:9d:1b:d8:a2:
1b:ab:46:96:44:c2:29:0a:6c:46:13:56:2a:e0:10:da:58:22:
e6:f1:d4:73:b0:11:80:f6:b1:31:0c:24:1b:a8:8c:a6:8e:86:
d0:18:7a:38:2a:2f:8f:80:98:39:5d:0a:63:db:23:c8:ce:a6:
fa:3c:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 01:12:26 2026 by rpki-client