This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: eOhuQEL082KWgmGu9k5WSpTNhDsXnPLI9T7TBa4w9js= Subject key identifier: B2:2B:9C:DE:16:FD:51:BE:FC:B6:FD:78:13:2F:F2:14:92:7D:C7:E8 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 18E1880889427DAFA56F7389D5C4FB75FAF3B879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 043C Signing time: Fri 16 Jan 2026 10:59:24 +0000 Manifest this update: Fri 16 Jan 2026 10:54:24 +0000 Manifest next update: Sat 17 Jan 2026 14:20:24 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: jQOBXM6DwJkhM9lznOXarj5CMmbIFrGa8Lx9EFRCD2A=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e1:88:08:89:42:7d:af:a5:6f:73:89:d5:c4:fb:75:fa:f3:b8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 16 10:54:24 2026 GMT Not After : Jan 17 14:20:24 2026 GMT Subject: CN=B22B9CDE16FD51BEFCB6FD78132FF214927DC7E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:56:fc:c1:bf:ca:44:a4:d2:e8:1a:12:dd:c0: e4:09:1a:24:ec:93:70:59:37:28:be:ac:dc:83:e7: 44:ab:22:76:4c:4e:dd:59:ab:ac:dd:fc:e1:25:28: a2:7b:eb:3a:99:91:df:c8:43:6a:42:e2:54:1d:77: 31:4c:2e:82:ae:09:62:ee:55:82:ab:21:ec:04:04: 16:24:6f:36:89:4a:c0:e6:55:78:70:1b:eb:ce:9f: 7d:ae:e4:99:cd:44:99:18:8f:f2:68:87:3d:98:c7: 2f:82:91:a3:41:ca:a9:0b:68:70:99:7a:91:7e:02: e4:be:94:e8:b1:9b:ef:05:6f:54:49:b2:1f:cc:8b: 8e:8e:62:a8:0c:52:4e:e8:d7:92:e6:e7:5b:5c:96: 19:98:a0:dd:1d:6b:40:36:1a:02:3d:39:db:68:47: ac:49:c5:83:f9:c1:8f:de:6e:6f:f3:56:8b:95:f4: f5:34:d3:2c:16:59:14:da:35:f5:c6:94:e2:b7:84: 32:60:82:c9:83:3d:01:dd:77:67:42:1b:3d:99:fe: 00:a8:e0:b7:41:45:d0:da:70:25:76:1e:1c:98:cd: bf:ca:97:50:5a:70:ae:96:75:6d:bd:ff:f0:d0:cb: 17:b0:83:a0:4e:37:b3:39:4d:a8:76:93:a8:1c:03: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:9C:DE:16:FD:51:BE:FC:B6:FD:78:13:2F:F2:14:92:7D:C7:E8 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2c:a5:e0:cb:cc:01:0f:42:8d:19:11:55:ee:12:1f:9f:67: 02:74:5c:ef:5c:f8:41:dd:86:d1:51:21:83:7c:09:b3:5f:4c: 16:d6:6f:0f:f2:73:b5:b2:50:dd:20:82:4f:20:32:43:a4:77: 9c:ab:c8:ef:25:75:5e:63:70:cd:7c:1d:97:23:1d:5f:95:fa: 4e:b4:72:91:3d:70:50:d7:21:12:c9:56:c5:c8:cc:fe:a2:fc: f9:f3:dc:b8:4c:67:5b:0d:0d:a1:ac:fb:6c:22:38:e7:6f:37: 1e:8c:20:a0:3a:66:46:db:f6:a7:83:d4:2a:80:a3:8a:1f:b9: 93:e6:c1:b5:80:a6:3a:92:4d:5b:f9:e5:d5:39:a0:a2:37:a9: b6:dc:08:23:e8:dc:1c:74:11:1b:89:0f:d4:6e:6d:f1:59:a6: b6:84:7d:97:35:b6:56:2a:09:fc:a3:51:81:21:d4:4b:c8:e1: f7:a6:83:4b:23:75:45:73:08:84:e7:7d:e3:68:a0:da:ef:a0: 00:f4:13:21:07:db:31:0e:c9:83:3f:3a:9a:70:28:00:75:9e: 4d:3e:9d:17:09:d4:a5:48:63:52:19:9c:8d:bf:5d:65:1f:4d: b0:7c:a0:5b:9b:b2:a7:5e:ca:90:22:3e:da:db:b3:9e:0c:c0: 25:9f:30:8e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGOGICIlCfa+lb3OJ1cT7dfrzuHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMTYxMDU0MjRaFw0yNjAxMTcxNDIwMjRaMDMxMTAvBgNV BAMTKEIyMkI5Q0RFMTZGRDUxQkVGQ0I2RkQ3ODEzMkZGMjE0OTI3REM3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzVvzBv8pEpNLoGhLdwOQJGiTs k3BZNyi+rNyD50SrInZMTt1Zq6zd/OElKKJ76zqZkd/IQ2pC4lQddzFMLoKuCWLu VYKrIewEBBYkbzaJSsDmVXhwG+vOn32u5JnNRJkYj/Johz2Yxy+CkaNByqkLaHCZ epF+AuS+lOixm+8Fb1RJsh/Mi46OYqgMUk7o15Lm51tclhmYoN0da0A2GgI9Odto R6xJxYP5wY/ebm/zVouV9PU00ywWWRTaNfXGlOK3hDJggsmDPQHdd2dCGz2Z/gCo 4LdBRdDacCV2HhyYzb/Kl1BacK6WdW29//DQyxewg6BON7M5Tah2k6gcA007AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsiuc3hb9Ub78tv14Ey/yFJJ9x+gwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyyl4MvMAQ9CjRkRVe4S H59nAnRc71z4Qd2G0VEhg3wJs19MFtZvD/JztbJQ3SCCTyAyQ6R3nKvI7yV1XmNw zXwdlyMdX5X6TrRykT1wUNchEslWxcjM/qL8+fPcuExnWw0Noaz7bCI45283Howg oDpmRtv2p4PUKoCjih+5k+bBtYCmOpJNW/nl1TmgojepttwII+jcHHQRG4kP1G5t 8VmmtoR9lzW2VioJ/KNRgSHUS8jh96aDSyN1RXMIhOd942ig2u+gAPQTIQfbMQ7J gz86mnAoAHWeTT6dFwnUpUhjUhmcjb9dZR9NsHygW5uyp17KkCI+2tuzngzAJZ8w jg== -----END CERTIFICATE-----Generated at Fri Jan 16 21:18:24 2026 by rpki-client