This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: TJjv7Y/RWNFW9ZHbNtgFxoYP/yXbvmlZ3xdLAWNBW+U= Subject key identifier: 09:DB:0A:CE:76:BF:1C:47:C1:05:CC:1B:69:22:5F:DE:BB:51:B9:BB Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 03DC3A2E988FB0A9BD0074085566DA189BC81D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0400 Signing time: Tue 02 Dec 2025 14:59:44 +0000 Manifest this update: Tue 02 Dec 2025 14:54:44 +0000 Manifest next update: Wed 03 Dec 2025 16:45:44 +0000 Files and hashes: 1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: PwzVqlsSn7OlgrSuyF2JiDohXCIs3rwmwDAHDLf2AqM=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 12:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:dc:3a:2e:98:8f:b0:a9:bd:00:74:08:55:66:da:18:9b:c8:1d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 2 14:54:44 2025 GMT Not After : Dec 3 16:45:44 2025 GMT Subject: CN=09DB0ACE76BF1C47C105CC1B69225FDEBB51B9BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:13:a7:02:be:3f:e4:89:70:54:ed:a0:c1: 8a:05:3e:b0:13:71:b3:1d:4c:93:83:78:31:b8:15: 90:c1:87:4a:22:94:59:45:6a:6e:fb:1b:46:b6:28: 18:d6:40:20:9b:d6:a1:ef:2e:55:5b:57:47:55:06: e3:58:6c:c6:b5:e9:62:6e:78:20:3a:da:fa:50:e0: 74:ca:13:44:98:d6:c5:df:0b:25:54:0c:b5:10:88: 7c:d1:48:6a:ad:be:a1:33:1e:63:ec:2d:a5:96:57: db:ce:c1:62:dc:5c:66:89:45:fb:f5:4d:92:a7:69: 64:d5:5b:91:10:07:72:d5:af:09:5a:de:a0:d2:f2: 38:b5:76:1a:8a:cd:ab:1a:f9:7c:53:16:d4:a9:58: 1e:0b:b8:36:ac:e3:ca:e5:1c:1b:4d:41:60:93:84: d2:d4:58:70:7b:1f:6c:05:ea:2f:da:8d:76:fa:d2: dc:c2:ac:b5:91:0d:29:6f:ed:46:ed:e4:bf:76:02: 98:fa:2b:14:f3:20:b6:b3:25:19:eb:e7:38:0f:10: 30:fb:1d:c9:72:7b:6d:a6:33:4c:9e:20:9d:a5:e5: 1e:0e:fa:8d:f3:ab:c2:88:9f:37:21:31:73:ff:42: eb:9d:85:d0:ad:87:b2:63:05:7d:b2:c7:20:1c:e7: a8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:0A:CE:76:BF:1C:47:C1:05:CC:1B:69:22:5F:DE:BB:51:B9:BB X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fc:c1:56:44:36:cb:d4:c9:23:04:ba:65:27:a8:30:ca:e0: c2:2b:f5:96:32:d5:b4:ec:d4:e0:14:d5:d9:21:b6:b4:4c:50: 7b:5e:ea:76:5c:18:f7:b2:30:b2:02:f1:1c:70:1d:c9:0b:ef: 77:a2:4f:5f:2e:8b:3a:2a:3d:c6:5e:0d:72:89:d7:73:a7:08: 15:fc:b1:68:49:2c:97:06:40:7e:b0:32:40:2a:ee:f6:34:44: 14:d0:c4:9a:bb:be:5f:5e:c4:6e:29:f4:6d:7d:e9:85:d9:e9: 99:c2:a6:d3:3b:02:36:46:7d:e0:dc:55:0a:4c:7a:ca:2b:26: f7:62:9a:fe:d6:11:57:d5:ef:0c:0f:31:ef:59:5f:b3:c0:01: 8e:02:a5:53:12:1d:ae:9b:4c:6b:fc:76:4c:38:3e:da:e7:1c: 9b:8e:a3:93:ab:06:d9:59:2c:b0:5e:1c:19:2f:56:75:bc:81: 42:80:a7:87:06:ab:59:90:99:6c:fd:62:0e:7e:d0:93:ea:a8: a1:5e:17:9b:f5:2b:f5:7e:12:72:87:66:55:bf:7d:9a:b7:0c: 31:52:87:7f:c3:d5:86:77:0d:dd:b7:ae:73:00:b4:9a:fd:10: 3e:bb:5c:5a:d7:19:52:45:12:7b:0e:62:5a:55:ad:41:69:c7: ce:45:7f:b9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA9w6LpiPsKm9AHQIVWbaGJvIHUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDIxNDU0NDRaFw0yNTEyMDMxNjQ1NDRaMDMxMTAvBgNV BAMTKDA5REIwQUNFNzZCRjFDNDdDMTA1Q0MxQjY5MjI1RkRFQkI1MUI5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97hOnAr4/5IlwVO2gwYoFPrAT cbMdTJODeDG4FZDBh0oilFlFam77G0a2KBjWQCCb1qHvLlVbV0dVBuNYbMa16WJu eCA62vpQ4HTKE0SY1sXfCyVUDLUQiHzRSGqtvqEzHmPsLaWWV9vOwWLcXGaJRfv1 TZKnaWTVW5EQB3LVrwla3qDS8ji1dhqKzasa+XxTFtSpWB4LuDas48rlHBtNQWCT hNLUWHB7H2wF6i/ajXb60tzCrLWRDSlv7Ubt5L92Apj6KxTzILazJRnr5zgPEDD7 Hclye22mM0yeIJ2l5R4O+o3zq8KInzchMXP/QuudhdCth7JjBX2yxyAc56gBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCdsKzna/HEfBBcwbaSJf3rtRubswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/zBVkQ2y9TJIwS6ZSeo MMrgwiv1ljLVtOzU4BTV2SG2tExQe17qdlwY97IwsgLxHHAdyQvvd6JPXy6LOio9 xl4NconXc6cIFfyxaEkslwZAfrAyQCru9jREFNDEmru+X17Ebin0bX3phdnpmcKm 0zsCNkZ94NxVCkx6yism92Ka/tYRV9XvDA8x71lfs8ABjgKlUxIdrptMa/x2TDg+ 2uccm46jk6sG2VkssF4cGS9WdbyBQoCnhwarWZCZbP1iDn7Qk+qooV4Xm/Ur9X4S codmVb99mrcMMVKHf8PVhncN3beucwC0mv0QPrtcWtcZUkUSew5iWlWtQWnHzkV/ uQ== -----END CERTIFICATE-----Generated at Tue Dec 2 17:59:44 2025 by rpki-client