This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: QizzRuGCOen2D1LvKQnp+GxD0YxEmikIGOfxhoKRONE= Subject key identifier: 50:8C:DC:E1:E0:E0:80:94:B5:74:42:0F:78:0E:19:6D:C9:CB:BF:7B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 04ACF38A9C5A2C00E1CA71E326DAA8FC6BB15AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F7 Signing time: Tue 25 Nov 2025 18:41:58 +0000 Manifest this update: Tue 25 Nov 2025 18:36:58 +0000 Manifest next update: Wed 26 Nov 2025 18:53:58 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7X5QIjcS8nsQseHZa2E44tyeG31XH4YqzAnNaWsCE9c=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 18:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ac:f3:8a:9c:5a:2c:00:e1:ca:71:e3:26:da:a8:fc:6b:b1:5a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 25 18:36:58 2025 GMT Not After : Nov 26 18:53:58 2025 GMT Subject: CN=508CDCE1E0E08094B574420F780E196DC9CBBF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:26:da:69:9c:c2:f5:2e:6d:8b:00:c2:0f: 09:52:e6:0a:42:ce:b0:ef:ee:82:c7:53:43:70:0e: ea:35:ad:80:1c:ca:80:3f:21:bb:a8:c0:2e:6f:08: 70:e0:84:65:f1:49:0f:78:16:07:77:3e:ed:06:98: 1f:38:80:63:b4:74:a6:a1:f9:63:eb:b0:ab:9f:7d: e3:2b:bd:28:f9:fc:73:1b:00:bc:8a:8c:d2:f2:8a: 25:26:0e:a8:1c:bf:97:0f:8b:b2:8f:52:4b:a7:3c: 2d:11:96:6b:e7:3c:c8:66:02:4a:61:3b:12:cd:7d: 85:b2:97:32:e2:58:91:f3:fc:30:9d:cd:de:0b:5c: 9e:aa:f4:57:a4:3c:8e:26:19:4b:7e:0c:7e:ea:24: 23:3f:c3:c7:74:99:f0:b3:a2:c2:de:4b:b5:25:31: 74:b8:ae:f6:c5:4a:f6:9e:02:3b:f5:aa:fa:aa:ba: 42:eb:5c:30:a8:5e:42:2d:87:b4:50:2b:22:0c:22: 9a:09:89:d1:7a:00:ac:62:41:9b:71:d2:71:5f:f6: 70:90:66:df:01:0e:bc:a7:41:c8:4e:cd:b5:37:b3: 47:fb:d5:1a:80:88:d3:f7:46:c8:22:4a:38:f8:ff: ad:a2:39:45:e7:6b:2a:17:a0:d3:4d:0d:40:0e:73: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8C:DC:E1:E0:E0:80:94:B5:74:42:0F:78:0E:19:6D:C9:CB:BF:7B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d7:24:1d:bc:76:37:e5:e0:6b:4a:a6:a4:28:97:52:74:de: da:fa:c2:10:e3:6f:45:08:bb:c4:9d:11:c2:8c:99:0c:08:43: 6f:dc:81:2c:dc:93:99:93:90:0b:df:15:1c:d6:73:3c:2d:dc: 4d:3b:cb:76:76:46:9b:d7:a2:5b:80:1c:e5:ae:3a:ee:bf:5b: 1b:05:74:11:61:4a:d8:3a:51:0e:f7:28:20:99:4f:15:77:8a: 85:00:9c:13:3d:9b:3b:02:9e:81:89:04:00:84:03:a8:80:d5: e0:6b:7c:11:61:b9:09:c6:1f:c5:82:f1:79:5f:03:d5:72:6e: 7a:0e:85:81:33:a0:5d:9f:c3:fa:af:f9:65:1f:ff:87:75:65: 85:03:98:24:5f:a0:c6:63:7b:fc:cb:f7:4e:47:7f:d5:46:6a: e0:7b:7f:68:4a:50:6c:fd:36:96:cd:4a:fc:cf:08:a5:b3:09: 60:7d:d0:b0:08:a2:d2:6d:41:5b:48:33:90:23:b1:46:29:89: 7b:f9:9e:29:6c:c1:0d:1d:45:0f:eb:a9:36:39:af:78:52:04: 0e:87:bf:64:d5:00:dc:8e:54:8a:7f:3c:1d:ba:bb:0a:c8:5d: 82:3f:15:4e:4e:b9:d8:19:a2:e8:5f:b0:1f:fa:0d:64:2e:7a: 4b:50:56:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBKzzipxaLADhynHjJtqo/GuxWvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjUxODM2NThaFw0yNTExMjYxODUzNThaMDMxMTAvBgNV BAMTKDUwOENEQ0UxRTBFMDgwOTRCNTc0NDIwRjc4MEUxOTZEQzlDQkJGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZybaaZzC9S5tiwDCDwlS5gpC zrDv7oLHU0NwDuo1rYAcyoA/IbuowC5vCHDghGXxSQ94Fgd3Pu0GmB84gGO0dKah +WPrsKuffeMrvSj5/HMbALyKjNLyiiUmDqgcv5cPi7KPUkunPC0RlmvnPMhmAkph OxLNfYWylzLiWJHz/DCdzd4LXJ6q9FekPI4mGUt+DH7qJCM/w8d0mfCzosLeS7Ul MXS4rvbFSvaeAjv1qvqqukLrXDCoXkIth7RQKyIMIpoJidF6AKxiQZtx0nFf9nCQ Zt8BDrynQchOzbU3s0f71RqAiNP3RsgiSjj4/62iOUXnayoXoNNNDUAOc0G/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUIzc4eDggJS1dEIPeA4ZbcnLv3swHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNckHbx2N+Xga0qmpCiX UnTe2vrCEONvRQi7xJ0RwoyZDAhDb9yBLNyTmZOQC98VHNZzPC3cTTvLdnZGm9ei W4Ac5a467r9bGwV0EWFK2DpRDvcoIJlPFXeKhQCcEz2bOwKegYkEAIQDqIDV4Gt8 EWG5CcYfxYLxeV8D1XJueg6FgTOgXZ/D+q/5ZR//h3VlhQOYJF+gxmN7/Mv3Tkd/ 1UZq4Ht/aEpQbP02ls1K/M8IpbMJYH3QsAii0m1BW0gzkCOxRimJe/meKWzBDR1F D+upNjmveFIEDoe/ZNUA3I5Uin88Hbq7Cshdgj8VTk652Bmi6F+wH/oNZC56S1BW mA== -----END CERTIFICATE-----Generated at Wed Nov 26 09:04:26 2025 by rpki-client