This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: hJsA7+IFalRTxf0DMUaZvdcOvXAwa8GYtbXz7JjwUIs= Subject key identifier: 22:1D:B0:B3:B2:A3:6E:4C:EF:E7:51:13:B0:98:7B:72:6B:C8:62:4B Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 5481D3A0053BBA8A93B94250E1467C1B7BD95532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F5 Signing time: Mon 24 Nov 2025 06:39:44 +0000 Manifest this update: Mon 24 Nov 2025 06:34:44 +0000 Manifest next update: Tue 25 Nov 2025 08:42:44 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 5YkSCJuazANa3+G3Pw5fpFMw27HnD1l0p+VShT3KDjc=) 4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 08:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:81:d3:a0:05:3b:ba:8a:93:b9:42:50:e1:46:7c:1b:7b:d9:55:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 24 06:34:44 2025 GMT Not After : Nov 25 08:42:44 2025 GMT Subject: CN=221DB0B3B2A36E4CEFE75113B0987B726BC8624B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:bc:78:40:6a:aa:bb:fc:0d:c0:dc:bf:2a: 48:6b:e6:43:0c:31:af:be:09:81:54:b3:34:fa:59: d4:6d:4a:22:c2:e9:79:8e:c0:b5:64:67:a9:d9:c0: 0c:20:3b:54:ea:80:21:47:af:74:2f:8f:de:a8:83: f7:83:55:85:67:aa:99:69:c3:67:fc:6e:d6:27:bf: d2:ba:65:8f:cb:99:73:f9:58:9f:ae:ed:c1:4d:eb: d5:72:a1:c4:ff:fd:36:17:79:0f:15:36:03:8b:81: b1:ac:cf:3b:17:29:6c:29:b2:1d:e6:76:3b:ac:c0: df:8c:1b:1e:37:61:ef:5c:ef:15:95:94:47:3c:17: 81:dc:76:8e:82:da:61:39:0f:3f:48:25:d2:cc:df: 70:4e:d5:7c:f9:ca:3b:8a:8b:30:70:10:5f:1e:8f: 09:80:30:f1:53:9f:e4:6d:99:e1:00:69:ee:d9:66: e9:bd:08:5d:66:4d:86:ca:a7:aa:92:3d:dc:59:d6: 5d:86:8f:b5:2b:f9:dd:26:a5:3c:2d:b3:58:0c:d6: b9:d6:37:60:13:3d:88:05:98:77:af:fa:3d:3b:a8: 5a:92:42:e0:4e:be:e0:a7:7c:ec:04:e9:01:b1:db: bf:86:8a:b0:e9:20:7e:a6:4b:5a:61:65:de:15:f3: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1D:B0:B3:B2:A3:6E:4C:EF:E7:51:13:B0:98:7B:72:6B:C8:62:4B X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:9a:cc:ce:18:45:16:8e:40:ca:2a:1b:01:5f:74:d9:7d: 25:55:14:00:6d:bf:6f:b3:d8:a0:49:51:d7:3b:98:3b:56:0d: 4b:ec:78:b5:80:6b:40:bf:3c:c8:53:81:53:35:61:54:63:21: e4:bc:2e:f4:93:ac:01:c7:e4:f6:2a:66:1f:c4:b3:c6:6b:8f: bf:f7:ec:7c:09:eb:97:64:b0:ab:af:71:79:c7:1a:50:6d:be: 9a:c3:82:0c:c0:c1:66:ac:d6:cf:58:46:3c:bc:c9:9d:7d:34: c3:79:80:d8:0a:3d:43:d1:9b:e8:95:cc:db:84:ac:65:bc:07: 49:04:45:83:4d:ee:ea:3a:35:b4:d2:69:99:f1:ba:e6:70:1f: 21:a9:90:ce:15:d2:34:2c:69:ae:04:7b:b3:0d:84:ad:d0:13: 11:0d:b0:ce:36:6f:3c:bc:cb:86:de:3c:1f:02:1e:d0:95:1d: 34:d5:fe:75:31:57:25:77:88:fa:85:15:18:a8:dc:3c:e7:e6: c5:6e:48:25:de:2e:0e:05:43:c1:d1:cf:90:75:28:c6:43:3c: 5d:ab:de:d9:37:13:d7:98:b9:35:7a:29:c3:07:84:c0:7d:18: 13:76:76:aa:56:1c:0b:aa:f4:91:1d:c6:62:07:7b:7e:73:ac: 4c:8e:5e:23 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVIHToAU7uoqTuUJQ4UZ8G3vZVTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjQwNjM0NDRaFw0yNTExMjUwODQyNDRaMDMxMTAvBgNV BAMTKDIyMURCMEIzQjJBMzZFNENFRkU3NTExM0IwOTg3QjcyNkJDODYyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWv7x4QGqqu/wNwNy/Kkhr5kMM Ma++CYFUszT6WdRtSiLC6XmOwLVkZ6nZwAwgO1TqgCFHr3Qvj96og/eDVYVnqplp w2f8btYnv9K6ZY/LmXP5WJ+u7cFN69VyocT//TYXeQ8VNgOLgbGszzsXKWwpsh3m djuswN+MGx43Ye9c7xWVlEc8F4Hcdo6C2mE5Dz9IJdLM33BO1Xz5yjuKizBwEF8e jwmAMPFTn+RtmeEAae7ZZum9CF1mTYbKp6qSPdxZ1l2Gj7Ur+d0mpTwts1gM1rnW N2ATPYgFmHev+j07qFqSQuBOvuCnfOwE6QGx27+GirDpIH6mS1phZd4V816RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIh2ws7Kjbkzv51ETsJh7cmvIYkswHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFGazM4YRRaOQMoqGwFf dNl9JVUUAG2/b7PYoElR1zuYO1YNS+x4tYBrQL88yFOBUzVhVGMh5Lwu9JOsAcfk 9ipmH8SzxmuPv/fsfAnrl2Swq69xeccaUG2+msOCDMDBZqzWz1hGPLzJnX00w3mA 2Ao9Q9Gb6JXM24SsZbwHSQRFg03u6jo1tNJpmfG65nAfIamQzhXSNCxprgR7sw2E rdATEQ2wzjZvPLzLht48HwIe0JUdNNX+dTFXJXeI+oUVGKjcPOfmxW5IJd4uDgVD wdHPkHUoxkM8Xave2TcT15i5NXopwweEwH0YE3Z2qlYcC6r0kR3GYgd7fnOsTI5e Iw== -----END CERTIFICATE-----Generated at Mon Nov 24 18:51:19 2025 by rpki-client