This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: HKVpQ7DV5J2jaKAaK5cctE3fQeZ9hjTFTidw7YR7FFE= Subject key identifier: 1C:79:A9:EF:DA:B4:AE:00:CE:15:6E:C8:3E:BB:42:7E:20:24:55:24 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 551D713FA579D811537F84A1CBB5AD72EA3085F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0402 Signing time: Thu 04 Dec 2025 03:22:01 +0000 Manifest this update: Thu 04 Dec 2025 03:17:01 +0000 Manifest next update: Fri 05 Dec 2025 05:05:01 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: PTyH8/ckvwUdRLf3ZHv79f7vN4qZ9ZHsr7dyFnIBJLs=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1d:71:3f:a5:79:d8:11:53:7f:84:a1:cb:b5:ad:72:ea:30:85:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 4 03:17:01 2025 GMT Not After : Dec 5 05:05:01 2025 GMT Subject: CN=1C79A9EFDAB4AE00CE156EC83EBB427E20245524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:64:40:cb:2a:21:0a:39:5a:6a:c2:96:19: 04:fb:34:6a:ed:51:1b:40:d0:c6:4f:86:b6:8a:94: 3a:2b:49:d7:43:ba:5f:ce:d1:c8:86:22:c9:65:f6: 93:7a:b5:8c:03:1b:91:94:1c:7f:fb:77:dd:b8:7d: 0d:1f:bc:c0:6e:6a:b4:d7:6a:2e:e2:a4:04:85:8c: bd:67:f8:a8:e6:2b:45:0c:a9:62:33:20:f1:5d:bc: 09:cf:ac:98:91:d5:42:b3:40:61:dd:6b:78:45:52: f3:80:08:1e:86:03:7c:11:31:0b:89:aa:bf:6a:04: 1e:f6:94:c1:73:d0:e7:44:ed:b0:7e:c0:4c:56:be: cc:ad:43:43:88:b5:6f:df:d1:4d:ba:f7:46:87:21: e0:9a:c8:02:73:ac:34:b1:23:ae:69:b1:7e:5f:f4: 74:75:85:97:71:4b:38:20:02:62:e7:4a:85:22:f8: 57:98:d4:1a:9d:eb:b6:b4:2a:a4:0d:b8:63:a2:09: b8:ed:13:85:f8:1a:1e:38:5b:50:9b:6a:b3:35:b5: b4:ad:b5:de:25:1d:f7:74:9f:50:60:29:3e:70:a6: fc:9f:b1:02:9f:52:13:37:57:21:58:3c:4e:c9:6b: 77:48:11:41:f0:6e:f3:90:3c:3b:4c:51:82:97:6c: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:A9:EF:DA:B4:AE:00:CE:15:6E:C8:3E:BB:42:7E:20:24:55:24 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:48:70:e8:93:6a:3b:c5:d1:11:f6:0a:40:27:2e:ff:7d:62: dc:77:8e:fa:9d:ea:e3:a0:34:c4:ea:75:63:8e:3f:b6:22:cc: 5c:7c:ed:99:90:f0:9a:69:80:00:e7:0b:72:a0:cf:be:95:99: 24:e9:c5:88:f9:2b:04:66:33:e3:26:72:9a:71:af:68:8c:f6: 6f:f8:f3:bd:e7:18:24:f6:43:42:29:7d:4a:b7:83:c9:c9:b1: 96:4c:27:29:6e:32:a2:6c:29:fb:01:15:2d:60:6c:64:93:c5: 63:3e:d2:63:01:84:1d:f1:49:84:39:42:52:aa:15:e5:83:78: 15:97:17:af:85:d3:15:5e:91:69:5d:99:7d:b1:62:90:19:cd: 0c:6d:36:93:4b:8f:a4:29:11:b2:c7:c7:3c:9e:07:a4:37:8f: 06:bd:48:eb:70:ef:99:84:0f:52:fa:6a:ca:4e:16:4f:f5:67: 52:70:27:b0:f9:60:a8:20:d3:7c:69:88:4a:2e:a0:71:e1:73: 39:cd:33:99:d9:7f:86:23:e8:25:63:94:03:5b:a6:93:32:fb: 12:22:6d:e1:dd:0d:fe:d1:b9:5c:af:f0:a7:a8:21:3d:ca:4f: d7:09:bf:61:0a:68:c7:f2:9d:b3:35:be:46:7c:9c:e9:bc:a8: a7:d3:6e:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVR1xP6V52BFTf4Shy7WtcuowhfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDQwMzE3MDFaFw0yNTEyMDUwNTA1MDFaMDMxMTAvBgNV BAMTKDFDNzlBOUVGREFCNEFFMDBDRTE1NkVDODNFQkI0MjdFMjAyNDU1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjWRAyyohCjlaasKWGQT7NGrt URtA0MZPhraKlDorSddDul/O0ciGIsll9pN6tYwDG5GUHH/7d924fQ0fvMBuarTX ai7ipASFjL1n+KjmK0UMqWIzIPFdvAnPrJiR1UKzQGHda3hFUvOACB6GA3wRMQuJ qr9qBB72lMFz0OdE7bB+wExWvsytQ0OItW/f0U2690aHIeCayAJzrDSxI65psX5f 9HR1hZdxSzggAmLnSoUi+FeY1Bqd67a0KqQNuGOiCbjtE4X4Gh44W1CbarM1tbSt td4lHfd0n1BgKT5wpvyfsQKfUhM3VyFYPE7Ja3dIEUHwbvOQPDtMUYKXbBh1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHHmp79q0rgDOFW7IPrtCfiAkVSQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUhw6JNqO8XREfYKQCcu /31i3HeO+p3q46A0xOp1Y44/tiLMXHztmZDwmmmAAOcLcqDPvpWZJOnFiPkrBGYz 4yZymnGvaIz2b/jzvecYJPZDQil9SreDycmxlkwnKW4yomwp+wEVLWBsZJPFYz7S YwGEHfFJhDlCUqoV5YN4FZcXr4XTFV6RaV2ZfbFikBnNDG02k0uPpCkRssfHPJ4H pDePBr1I63DvmYQPUvpqyk4WT/VnUnAnsPlgqCDTfGmISi6gceFzOc0zmdl/hiPo JWOUA1umkzL7EiJt4d0N/tG5XK/wp6ghPcpP1wm/YQpox/KdszW+Rnyc6byop9Nu 5g== -----END CERTIFICATE-----Generated at Thu Dec 4 20:22:13 2025 by rpki-client