This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: Pnsov7/Vmo4IRrsydvaXmAsKq+SYb0dZFSkpWljYIdU= Subject key identifier: F8:39:F4:48:A6:E5:4F:B9:59:A9:98:6B:B7:25:7F:D4:C8:83:39:CE Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 03A4BBA814688054B78E5B8625BB22A1B583C898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 042D Signing time: Mon 05 Jan 2026 05:25:38 +0000 Manifest this update: Mon 05 Jan 2026 05:20:38 +0000 Manifest next update: Tue 06 Jan 2026 08:58:38 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: CfHh92rt5uBGULbCs/Eias3LIPTQtDDlI048Zd4CNc8=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a4:bb:a8:14:68:80:54:b7:8e:5b:86:25:bb:22:a1:b5:83:c8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 5 05:20:38 2026 GMT Not After : Jan 6 08:58:38 2026 GMT Subject: CN=F839F448A6E54FB959A9986BB7257FD4C88339CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fd:74:62:cc:b7:f1:db:9d:cb:4b:3d:c1:0e: 92:9d:ea:f5:ce:bb:b7:ff:f4:94:68:2f:d6:29:70: c4:8a:9c:80:89:5d:cd:d5:99:e4:79:66:a8:48:e7: fb:85:58:1c:d3:5c:b9:d0:72:84:0d:76:6c:b0:fc: bf:1b:7a:37:84:8d:c4:df:ee:7e:f9:f8:c2:ad:34: 63:36:6b:b4:1b:45:6e:b3:26:c5:fa:e6:3a:bd:e7: 85:4a:e2:1c:6c:37:8a:c9:9f:85:d2:a1:64:ea:98: c2:61:7c:5b:27:6b:e3:80:05:54:91:03:d8:73:a8: 3a:b5:64:1f:a1:3b:8f:e7:06:20:bf:97:e0:98:0a: 83:fd:ce:b8:f3:a7:1f:da:95:5f:56:b1:1b:83:b4: bd:f9:4a:de:ce:ac:7d:62:34:09:06:13:88:99:9c: f6:84:b5:53:00:93:0a:81:fb:1d:06:d0:e3:59:99: f5:65:66:6d:0e:3e:e0:a0:db:d2:25:39:a5:02:89: a8:53:62:2e:e3:09:fb:4b:7a:ae:ba:7c:a5:3f:f1: 4b:cc:4d:92:31:ab:c6:47:46:6e:4f:4a:73:ea:75: 00:da:c7:58:5c:88:98:34:6a:48:2e:bd:06:b4:2b: b0:76:d6:6f:eb:14:22:6b:b3:ce:f2:55:a8:ee:31: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:39:F4:48:A6:E5:4F:B9:59:A9:98:6B:B7:25:7F:D4:C8:83:39:CE X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:61:23:da:d1:7e:8d:39:02:d0:c4:85:fc:cc:10:93:5a:72: 1d:e5:7b:4c:08:d1:5e:16:80:ba:e1:63:37:38:14:dc:a8:5b: 3d:0d:33:49:17:16:82:35:be:a0:12:c1:26:01:c2:8b:e5:b8: 17:4e:75:03:d6:69:bb:e0:26:41:56:03:f7:57:95:26:6b:7c: c1:7f:1d:aa:dd:a2:69:84:cf:0f:b4:3b:05:68:28:ac:14:58: 5e:5e:56:38:d7:a0:25:fb:88:29:6f:67:38:16:d0:55:55:bc: 4b:9d:cf:3c:21:24:0f:fc:96:71:cc:c4:43:73:45:2e:df:1a: 2c:29:78:e5:61:f1:b9:89:98:90:88:74:2d:09:fe:a1:55:ca: 37:58:ad:ca:7f:e2:29:73:5b:10:70:c5:53:53:55:0f:86:a0: fa:52:b2:4c:d1:f6:44:25:29:b2:57:32:a0:35:b6:59:d9:27: 67:3a:4f:a3:4e:84:6d:e2:89:79:96:2d:28:58:47:79:dc:5a: 3c:ce:98:a5:b7:8f:c9:6e:18:80:3d:67:1e:a5:07:d8:a9:57: 72:a8:80:61:ff:5b:19:26:aa:99:03:d1:53:0b:da:ad:72:99: 2c:36:8d:fc:78:ca:e1:4f:0c:21:02:a1:17:a4:43:14:47:58: 64:62:f3:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA6S7qBRogFS3jluGJbsiobWDyJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDUwNTIwMzhaFw0yNjAxMDYwODU4MzhaMDMxMTAvBgNV BAMTKEY4MzlGNDQ4QTZFNTRGQjk1OUE5OTg2QkI3MjU3RkQ0Qzg4MzM5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv/XRizLfx253LSz3BDpKd6vXO u7f/9JRoL9YpcMSKnICJXc3VmeR5ZqhI5/uFWBzTXLnQcoQNdmyw/L8bejeEjcTf 7n75+MKtNGM2a7QbRW6zJsX65jq954VK4hxsN4rJn4XSoWTqmMJhfFsna+OABVSR A9hzqDq1ZB+hO4/nBiC/l+CYCoP9zrjzpx/alV9WsRuDtL35St7OrH1iNAkGE4iZ nPaEtVMAkwqB+x0G0ONZmfVlZm0OPuCg29IlOaUCiahTYi7jCftLeq66fKU/8UvM TZIxq8ZHRm5PSnPqdQDax1hciJg0akguvQa0K7B21m/rFCJrs87yVajuMXh1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+Dn0SKblT7lZqZhrtyV/1MiDOc4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGEj2tF+jTkC0MSF/MwQ k1pyHeV7TAjRXhaAuuFjNzgU3KhbPQ0zSRcWgjW+oBLBJgHCi+W4F051A9Zpu+Am QVYD91eVJmt8wX8dqt2iaYTPD7Q7BWgorBRYXl5WONegJfuIKW9nOBbQVVW8S53P PCEkD/yWcczEQ3NFLt8aLCl45WHxuYmYkIh0LQn+oVXKN1ityn/iKXNbEHDFU1NV D4ag+lKyTNH2RCUpslcyoDW2WdknZzpPo06EbeKJeZYtKFhHedxaPM6YpbePyW4Y gD1nHqUH2KlXcqiAYf9bGSaqmQPRUwvarXKZLDaN/HjK4U8MIQKhF6RDFEdYZGLz gw== -----END CERTIFICATE-----Generated at Mon Jan 5 09:15:11 2026 by rpki-client