This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: qgdpICqPv+ejTkh275HId+YSpmSgUOYc71o4ihnri+M= Subject key identifier: C1:C2:69:52:11:B6:49:12:E5:5F:1B:6C:2D:11:F1:C4:8D:57:E0:2E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 3B3ED660B03915D18D396AD1A47BB0725B7A58BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0427 Signing time: Thu 01 Jan 2026 00:30:31 +0000 Manifest this update: Thu 01 Jan 2026 00:25:31 +0000 Manifest next update: Fri 02 Jan 2026 03:57:31 +0000 Files and hashes: 1: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 1r4Tui60YqjVAFa6WmfGGQ24gmTy29yBSirB9R+E6eg=) 7: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3e:d6:60:b0:39:15:d1:8d:39:6a:d1:a4:7b:b0:72:5b:7a:58:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 1 00:25:31 2026 GMT Not After : Jan 2 03:57:31 2026 GMT Subject: CN=C1C2695211B64912E55F1B6C2D11F1C48D57E02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:35:75:51:7a:75:7a:7e:bd:f0:b0:33:20: 70:23:30:cc:10:77:d1:f9:35:43:d8:4b:16:d9:6d: 5a:ef:e3:5a:11:04:15:de:bb:14:97:8d:f9:5f:91: 51:63:0d:99:9d:6e:d7:47:a0:4c:f8:d1:8b:c5:14: 3e:43:19:33:49:3f:db:8d:f9:ac:f0:d0:0d:05:18: 3b:5e:ec:34:11:e3:b0:54:a8:86:2e:94:1b:09:82: 91:5b:96:40:ab:4f:f0:7d:34:cc:65:3e:fa:cb:22: c3:e1:e9:5e:82:e2:90:b2:b1:59:ba:51:99:f2:97: a0:cf:33:e3:16:cd:b3:23:a7:ce:8b:cf:09:1f:15: 32:1a:61:f5:41:f3:30:98:5f:6e:99:92:d9:79:c6: bd:a8:41:b1:e0:e7:49:83:78:6a:04:d2:18:f9:f7: 4e:c4:f3:55:ef:b7:41:e9:dd:a7:7e:e5:85:77:d6: f1:e8:bd:3b:f6:ec:52:37:02:25:40:f9:4f:5b:9d: 6b:9d:32:ff:10:fd:7d:1c:68:cf:f1:a7:76:38:4f: 07:ab:a4:0b:71:6b:88:4a:55:ce:d9:ff:27:c4:e2: 94:f8:cf:76:18:e3:57:d3:73:45:33:f2:1b:76:71: aa:07:9d:55:9e:c6:60:ad:02:4e:cb:28:38:fb:b1: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:69:52:11:B6:49:12:E5:5F:1B:6C:2D:11:F1:C4:8D:57:E0:2E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f5:f9:b2:04:d6:6f:41:12:91:4d:4f:1b:77:28:34:7f:0c: 7b:f6:fa:17:ce:d5:63:82:10:51:00:67:34:8a:77:98:6f:9e: 59:29:ff:99:d6:49:93:3e:41:73:0e:7b:b6:28:e5:3c:df:ad: 95:9c:92:be:6d:29:88:66:41:a7:d4:66:46:bf:6c:ca:00:56: 93:f9:a0:8d:55:63:3e:fb:87:3f:f6:42:eb:de:4b:35:88:92: a9:28:ac:83:67:8d:76:c7:72:e8:57:1c:b5:33:7e:1a:42:81: d6:d0:27:6d:6a:b8:29:91:59:b8:cc:81:9a:ce:bf:0a:65:a8: f3:69:57:60:fd:88:e2:ad:79:3a:47:ac:c3:37:f8:d1:c3:ff: cc:ba:b4:ca:92:f7:bb:f9:82:55:47:a7:28:40:0f:d6:c1:5d: f4:c9:c8:f0:e2:88:c1:5b:6b:54:7d:b9:20:20:38:a4:78:7d: 85:e6:42:32:ea:1f:01:3c:38:b9:9c:69:4b:54:80:25:d5:8a: bd:64:16:95:7c:7a:44:5f:2c:cb:75:2f:62:a8:b2:3a:04:1a: 90:c8:81:29:cb:af:e0:a8:9c:12:2e:9e:01:95:1a:2c:46:48: 05:07:69:f9:d3:56:7b:ee:d6:cd:bc:22:12:a4:8c:6f:50:10: f5:c6:b4:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOz7WYLA5FdGNOWrRpHuwclt6WL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDEwMDI1MzFaFw0yNjAxMDIwMzU3MzFaMDMxMTAvBgNV BAMTKEMxQzI2OTUyMTFCNjQ5MTJFNTVGMUI2QzJEMTFGMUM0OEQ1N0UwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpjV1UXp1en698LAzIHAjMMwQ d9H5NUPYSxbZbVrv41oRBBXeuxSXjflfkVFjDZmdbtdHoEz40YvFFD5DGTNJP9uN +azw0A0FGDte7DQR47BUqIYulBsJgpFblkCrT/B9NMxlPvrLIsPh6V6C4pCysVm6 UZnyl6DPM+MWzbMjp86LzwkfFTIaYfVB8zCYX26Zktl5xr2oQbHg50mDeGoE0hj5 907E81Xvt0Hp3ad+5YV31vHovTv27FI3AiVA+U9bnWudMv8Q/X0caM/xp3Y4Twer pAtxa4hKVc7Z/yfE4pT4z3YY41fTc0Uz8ht2caoHnVWexmCtAk7LKDj7sZjnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwcJpUhG2SRLlXxtsLRHxxI1X4C4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/X5sgTWb0ESkU1PG3co NH8Me/b6F87VY4IQUQBnNIp3mG+eWSn/mdZJkz5Bcw57tijlPN+tlZySvm0piGZB p9RmRr9sygBWk/mgjVVjPvuHP/ZC695LNYiSqSisg2eNdsdy6FcctTN+GkKB1tAn bWq4KZFZuMyBms6/CmWo82lXYP2I4q15Okeswzf40cP/zLq0ypL3u/mCVUenKEAP 1sFd9MnI8OKIwVtrVH25ICA4pHh9heZCMuofATw4uZxpS1SAJdWKvWQWlXx6RF8s y3UvYqiyOgQakMiBKcuv4KicEi6eAZUaLEZIBQdp+dNWe+7WzbwiEqSMb1AQ9ca0 tg== -----END CERTIFICATE-----Generated at Thu Jan 1 03:24:19 2026 by rpki-client