This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: nd8T8XBSfkHnD1RH/iFjmGuS03nWYdHd8yjnSJ6jqFY= Subject key identifier: FB:81:BD:E7:91:D4:03:6E:82:E1:26:2C:64:ED:31:64:19:86:61:EA Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 198D284661993A51E66DAA72C67D821A73729C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 043E Signing time: Sun 18 Jan 2026 00:06:48 +0000 Manifest this update: Sun 18 Jan 2026 00:01:48 +0000 Manifest next update: Mon 19 Jan 2026 00:20:48 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: BhQiMI6zO9PHfTaiSdTfBNSJj12XWNvkgghYnUEJ1YE=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8d:28:46:61:99:3a:51:e6:6d:aa:72:c6:7d:82:1a:73:72:9c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 18 00:01:48 2026 GMT Not After : Jan 19 00:20:48 2026 GMT Subject: CN=FB81BDE791D4036E82E1262C64ED3164198661EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:3e:0d:49:ff:8d:3b:7b:37:13:cb:64:b4: 8f:92:4c:57:c0:28:e1:38:45:84:14:43:17:f3:e1: cf:69:02:74:64:d7:47:07:25:26:18:7b:6d:85:c9: a7:33:1c:66:31:23:b6:87:bf:e2:07:f4:23:89:2c: 25:1a:cb:c9:6b:7d:5a:61:3a:19:4a:3c:d1:15:16: 94:7d:e9:dd:c9:03:23:dc:65:6e:6e:da:b9:b9:f9: 65:48:7f:85:e5:74:a7:fb:fa:66:a3:1b:39:04:cf: 1f:e7:c8:19:30:25:f1:6a:11:28:68:33:87:6d:40: e1:d8:6d:f9:9d:10:15:69:e3:55:14:e0:2b:fa:00: 21:4b:cf:88:d7:67:6e:83:e3:db:02:ba:4f:79:a5: e9:75:85:b8:17:6c:5b:a6:6c:6a:cb:3b:e1:81:f9: 4c:3f:d8:d8:6b:46:86:39:c8:63:12:8a:f7:0b:45: 51:a1:15:52:67:cb:14:9b:cf:e3:53:78:4d:05:00: 30:a8:87:41:f5:65:04:7e:e6:57:b4:41:b6:17:e1: 31:7f:0a:30:eb:0c:67:8b:94:05:74:3d:ad:3f:60: 31:07:03:d0:64:82:8c:e0:19:2f:13:03:52:ef:05: 70:04:22:8e:df:e3:03:f8:65:84:95:6a:74:7b:63: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:81:BD:E7:91:D4:03:6E:82:E1:26:2C:64:ED:31:64:19:86:61:EA X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ec:9e:f2:93:39:06:30:50:82:b0:77:07:49:5c:85:fa:60: a8:91:97:fe:da:c3:14:1c:61:40:c4:2e:26:9d:bb:17:ea:1a: ea:ca:80:29:3f:48:4b:15:d5:dd:a4:72:84:8e:ac:2c:ff:e5: 76:dd:f1:2c:54:4b:d9:27:35:df:ff:69:86:2f:c6:b5:a5:f4: d6:97:ae:48:3d:e5:e3:a0:89:2b:c8:ba:86:68:4b:39:0b:47: 64:32:37:8c:ec:29:da:02:38:35:99:79:f9:3d:48:6c:b6:a2: fc:91:77:60:61:72:64:3c:b3:ec:cc:6a:51:dd:28:bc:7b:30: ae:57:72:a6:70:f8:0b:80:3b:ac:1b:6e:76:f4:ec:2c:1a:67: 74:92:83:28:b0:fa:f9:d3:9c:b2:72:db:40:f8:58:5b:ab:71: 15:72:98:b7:9c:7d:3c:7a:bc:70:b3:5d:dc:82:87:de:10:72: d7:b6:c9:3a:4a:86:0a:f5:45:6d:9a:05:a0:0d:3e:73:76:5a: cb:e3:dc:a7:ee:35:a8:0b:d5:2b:03:c6:8d:2e:84:ca:54:8c: b5:42:87:15:a5:3e:9d:75:c8:ff:26:53:02:cb:fd:f4:77:b5: 85:45:e5:d6:81:d8:18:75:e7:85:ef:5b:8d:e8:be:7e:29:57: ab:c5:6c:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGY0oRmGZOlHmbapyxn2CGnNynFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMTgwMDAxNDhaFw0yNjAxMTkwMDIwNDhaMDMxMTAvBgNV BAMTKEZCODFCREU3OTFENDAzNkU4MkUxMjYyQzY0RUQzMTY0MTk4NjYxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Vj4NSf+NO3s3E8tktI+STFfA KOE4RYQUQxfz4c9pAnRk10cHJSYYe22FyaczHGYxI7aHv+IH9COJLCUay8lrfVph OhlKPNEVFpR96d3JAyPcZW5u2rm5+WVIf4XldKf7+majGzkEzx/nyBkwJfFqESho M4dtQOHYbfmdEBVp41UU4Cv6ACFLz4jXZ26D49sCuk95pel1hbgXbFumbGrLO+GB +Uw/2NhrRoY5yGMSivcLRVGhFVJnyxSbz+NTeE0FADCoh0H1ZQR+5le0QbYX4TF/ CjDrDGeLlAV0Pa0/YDEHA9BkgozgGS8TA1LvBXAEIo7f4wP4ZYSVanR7Y5TzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+4G955HUA26C4SYsZO0xZBmGYeowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOye8pM5BjBQgrB3B0lc hfpgqJGX/trDFBxhQMQuJp27F+oa6sqAKT9ISxXV3aRyhI6sLP/ldt3xLFRL2Sc1 3/9phi/GtaX01peuSD3l46CJK8i6hmhLOQtHZDI3jOwp2gI4NZl5+T1IbLai/JF3 YGFyZDyz7MxqUd0ovHswrldypnD4C4A7rBtudvTsLBpndJKDKLD6+dOcsnLbQPhY W6txFXKYt5x9PHq8cLNd3IKH3hBy17bJOkqGCvVFbZoFoA0+c3Zay+Pcp+41qAvV KwPGjS6EylSMtUKHFaU+nXXI/yZTAsv99He1hUXl1oHYGHXnhe9bjei+filXq8Vs 9w== -----END CERTIFICATE-----Generated at Sun Jan 18 09:53:26 2026 by rpki-client