This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: M30DY1cbFtjaGg35SuJ0nMNt67Ern2DSXdqz4fD2G9s= Subject key identifier: 6D:AE:5E:81:18:26:F0:2E:6C:11:A8:AF:9C:A6:BD:23:74:95:63:9E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 71B8492A32799BDC30D072E424B3B455CA73F2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 040C Signing time: Thu 11 Dec 2025 11:52:12 +0000 Manifest this update: Thu 11 Dec 2025 11:47:12 +0000 Manifest next update: Fri 12 Dec 2025 14:39:12 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: m+jb13BxyJLDxEeznj79xyH116i/dofO+zmRkGx4c+8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b8:49:2a:32:79:9b:dc:30:d0:72:e4:24:b3:b4:55:ca:73:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 11 11:47:12 2025 GMT Not After : Dec 12 14:39:12 2025 GMT Subject: CN=6DAE5E811826F02E6C11A8AF9CA6BD237495639E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:8d:d8:03:f4:b7:4b:20:99:90:9c:51:92: 80:1b:3d:53:04:75:af:52:b1:f2:57:d9:c4:ad:85: d5:c1:4c:23:24:57:91:94:d0:81:eb:8d:cb:b7:4c: 36:fe:c6:e2:16:7e:63:83:49:62:72:3b:29:68:78: 82:d1:4f:00:d6:3a:38:41:55:6e:d0:fd:17:b5:6e: db:cf:40:d1:af:6b:d2:7e:2a:66:d0:5a:37:7a:a5: b2:61:06:fc:31:d0:05:e2:26:da:49:5f:ff:80:42: 3c:de:ed:45:ff:49:6d:48:6b:f3:cf:c4:dd:7f:3f: c7:dc:40:18:c3:30:f0:69:b8:88:ed:ed:b8:d4:3e: 14:83:b0:26:d0:08:71:d8:50:10:aa:69:1b:42:d8: 64:9f:e6:26:3e:a0:f9:28:1d:0c:66:08:7a:58:52: ef:d8:03:29:5f:e2:10:18:95:38:20:a5:55:f8:9c: 9f:65:73:9b:ea:27:03:55:f6:03:7f:c6:9e:cf:ed: 74:c7:9a:7d:bb:0a:95:15:8f:e3:b6:be:7e:86:36: 3b:c5:a8:30:6a:56:58:6f:33:1e:44:83:64:e9:75: c9:8c:2c:e3:be:f6:11:24:f8:d5:aa:62:7a:47:25: f5:94:09:87:c7:15:25:5c:46:1f:9b:cc:13:1b:74: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AE:5E:81:18:26:F0:2E:6C:11:A8:AF:9C:A6:BD:23:74:95:63:9E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:4e:4a:40:c9:d3:31:94:e2:59:66:9c:ca:20:83:2c:86: 1f:a6:22:44:c0:79:f5:00:8c:1a:3d:55:a6:2f:10:bd:ba:ae: eb:c5:7b:31:82:d7:3c:cb:35:e0:ca:e0:0a:10:e7:2f:1c:4c: 81:f1:c2:ea:a2:d9:b6:cb:45:24:4c:1a:91:d0:4c:0c:18:4e: 62:3d:45:1a:97:a8:4f:7a:d0:80:48:c9:65:08:39:81:a3:59: 6a:be:25:29:e7:42:ab:d6:47:ca:ae:d4:ea:8e:ca:1f:f3:89: ce:c0:ca:92:37:b9:73:3d:b0:d2:d5:0b:da:80:e5:60:0e:67: ee:a0:db:ab:05:48:99:6e:db:eb:7a:5f:14:e3:fa:6d:84:66: 8f:29:82:f9:18:25:6b:a5:cf:95:cd:a1:4e:d3:9d:55:bb:c0: 27:f6:00:b2:bc:f7:06:63:2e:22:1b:21:45:6f:08:0b:c1:c4: dc:7c:37:7d:00:82:dc:16:bb:ac:98:87:43:d6:42:ad:10:6b: 0f:25:1c:d0:e5:e3:03:1b:8f:2c:53:3a:42:2b:a6:13:d8:fb: 1c:6a:f6:7e:2b:b5:bb:22:5a:42:ba:51:67:59:97:c3:a3:ee: 27:42:29:43:d9:f7:20:da:ed:18:c4:2c:78:bb:d6:7c:37:1a: 65:02:88:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcbhJKjJ5m9ww0HLkJLO0Vcpz8sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTExMTQ3MTJaFw0yNTEyMTIxNDM5MTJaMDMxMTAvBgNV BAMTKDZEQUU1RTgxMTgyNkYwMkU2QzExQThBRjlDQTZCRDIzNzQ5NTYzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJ43YA/S3SyCZkJxRkoAbPVME da9SsfJX2cSthdXBTCMkV5GU0IHrjcu3TDb+xuIWfmODSWJyOyloeILRTwDWOjhB VW7Q/Re1btvPQNGva9J+KmbQWjd6pbJhBvwx0AXiJtpJX/+AQjze7UX/SW1Ia/PP xN1/P8fcQBjDMPBpuIjt7bjUPhSDsCbQCHHYUBCqaRtC2GSf5iY+oPkoHQxmCHpY Uu/YAylf4hAYlTggpVX4nJ9lc5vqJwNV9gN/xp7P7XTHmn27CpUVj+O2vn6GNjvF qDBqVlhvMx5Eg2TpdcmMLOO+9hEk+NWqYnpHJfWUCYfHFSVcRh+bzBMbdD+hAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUba5egRgm8C5sEaivnKa9I3SVY54wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfJOSkDJ0zGU4llmnMog gyyGH6YiRMB59QCMGj1Vpi8Qvbqu68V7MYLXPMs14MrgChDnLxxMgfHC6qLZtstF JEwakdBMDBhOYj1FGpeoT3rQgEjJZQg5gaNZar4lKedCq9ZHyq7U6o7KH/OJzsDK kje5cz2w0tUL2oDlYA5n7qDbqwVImW7b63pfFOP6bYRmjymC+Rgla6XPlc2hTtOd VbvAJ/YAsrz3BmMuIhshRW8IC8HE3Hw3fQCC3Ba7rJiHQ9ZCrRBrDyUc0OXjAxuP LFM6QiumE9j7HGr2fiu1uyJaQrpRZ1mXw6PuJ0IpQ9n3INrtGMQseLvWfDcaZQKI WQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:12:25 2025 by rpki-client