This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: HmG57whOAlCkqkW5Oxl7bu/ddKEHJAROx1Ffyv1EhAs= Subject key identifier: 94:5A:17:2C:DE:60:78:A9:56:17:A1:26:01:EF:3E:D9:C5:5E:AA:EE Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 0E73531C59B6CC4158966B5D26E075DF29DDFC59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 03F4 Signing time: Sun 23 Nov 2025 11:25:54 +0000 Manifest this update: Sun 23 Nov 2025 11:20:54 +0000 Manifest next update: Mon 24 Nov 2025 14:34:54 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: DdVIMZarwnLikrXroHj3nkB6u+Hoz1mkBU2x3uwRf2o=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 09:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:73:53:1c:59:b6:cc:41:58:96:6b:5d:26:e0:75:df:29:dd:fc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 23 11:20:54 2025 GMT Not After : Nov 24 14:34:54 2025 GMT Subject: CN=945A172CDE6078A95617A12601EF3ED9C55EAAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:da:dd:0b:96:3a:27:b6:44:a8:cd:b2:7d: 73:98:cd:e9:db:c0:f0:d1:df:62:2d:01:0f:e7:47: 81:ed:40:f3:56:37:98:4f:91:18:97:0b:6e:78:85: 8c:ad:15:24:1b:05:9b:3d:f7:32:84:12:44:2f:80: a2:67:06:ab:08:cf:4c:66:6f:db:63:e4:8d:61:cb: b7:7d:33:72:79:d0:56:b8:19:ea:0c:8b:59:50:5b: c3:69:7a:d4:39:99:5c:0d:97:5d:42:b5:c7:1c:4f: 49:10:32:29:77:1a:64:26:c5:96:23:29:45:70:95: bc:bd:41:5f:b7:62:82:81:66:bd:ca:c0:ce:a1:2c: 01:bc:e1:10:7c:5a:09:1a:8c:9d:de:ee:ca:3f:b6: a3:90:ce:30:85:7c:16:f3:90:91:fe:47:db:f4:6d: 28:63:d3:5e:fe:3c:db:8c:38:cd:b4:86:78:89:2a: b9:8b:b2:a9:ac:6f:bb:26:fc:bc:93:ff:b2:00:a3: 89:b3:a9:ee:5e:a6:25:d2:66:f2:6d:ed:bf:fe:5a: 08:e2:43:ff:e2:07:51:21:e9:95:c2:b5:c6:65:54: 35:dc:d8:41:bf:87:85:73:a3:a9:bf:3e:89:7c:25: 85:7d:1e:4f:e6:8f:43:05:6d:74:94:f0:db:ec:9f: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:17:2C:DE:60:78:A9:56:17:A1:26:01:EF:3E:D9:C5:5E:AA:EE X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9c:31:0f:f5:41:b8:68:35:d5:9f:1e:c0:b3:19:89:74:bd: 0e:63:72:bc:b5:ed:14:af:0a:ee:5c:47:85:49:18:6d:86:b9: 2f:ec:b6:c6:ca:19:33:04:8d:d3:c8:3e:5b:bb:e1:c1:ea:aa: 93:16:bd:9d:4f:ec:76:c7:ba:39:72:60:38:0b:55:a3:8e:65: 9a:dc:3b:a5:9c:e1:f4:5a:f9:eb:7d:d8:3e:54:f1:1e:f4:b7: bc:27:bc:4c:96:02:d4:17:62:1a:b8:9a:0f:02:56:f9:a7:4f: c9:28:f7:cd:c0:ca:2c:70:3e:eb:7d:52:72:96:cf:6d:bb:bf: 26:8b:ff:01:e6:fe:ab:f9:45:34:4c:41:f9:69:8b:e1:71:1f: 6d:46:e4:3e:19:c7:2d:1a:f3:32:b2:c9:0d:6c:f5:b5:41:2d: 53:69:e4:51:e3:f1:b1:75:a6:4e:0a:91:41:7e:44:80:87:ae: f1:f3:3a:31:a2:5f:af:b7:18:6d:58:3c:1e:59:f3:41:39:7f: a5:45:a9:5b:43:16:00:80:df:bc:11:e2:c7:ff:77:33:d5:b2: 01:86:f4:38:99:49:5a:15:bd:ad:03:7a:82:f3:85:b7:0b:08: 9b:81:d9:4f:88:6c:7f:da:b9:8b:48:3f:5a:99:69:99:ef:35: d3:53:c0:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDnNTHFm2zEFYlmtdJuB13ynd/FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTExMjMxMTIwNTRaFw0yNTExMjQxNDM0NTRaMDMxMTAvBgNV BAMTKDk0NUExNzJDREU2MDc4QTk1NjE3QTEyNjAxRUYzRUQ5QzU1RUFBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+NrdC5Y6J7ZEqM2yfXOYzenb wPDR32ItAQ/nR4HtQPNWN5hPkRiXC254hYytFSQbBZs99zKEEkQvgKJnBqsIz0xm b9tj5I1hy7d9M3J50Fa4GeoMi1lQW8NpetQ5mVwNl11CtcccT0kQMil3GmQmxZYj KUVwlby9QV+3YoKBZr3KwM6hLAG84RB8WgkajJ3e7so/tqOQzjCFfBbzkJH+R9v0 bShj017+PNuMOM20hniJKrmLsqmsb7sm/LyT/7IAo4mzqe5epiXSZvJt7b/+Wgji Q//iB1Eh6ZXCtcZlVDXc2EG/h4Vzo6m/Pol8JYV9Hk/mj0MFbXSU8Nvsn2wZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlFoXLN5geKlWF6EmAe8+2cVequ4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5wxD/VBuGg11Z8ewLMZ iXS9DmNyvLXtFK8K7lxHhUkYbYa5L+y2xsoZMwSN08g+W7vhweqqkxa9nU/sdse6 OXJgOAtVo45lmtw7pZzh9Fr5633YPlTxHvS3vCe8TJYC1BdiGriaDwJW+adPySj3 zcDKLHA+631ScpbPbbu/Jov/Aeb+q/lFNExB+WmL4XEfbUbkPhnHLRrzMrLJDWz1 tUEtU2nkUePxsXWmTgqRQX5EgIeu8fM6MaJfr7cYbVg8HlnzQTl/pUWpW0MWAIDf vBHix/93M9WyAYb0OJlJWhW9rQN6gvOFtwsIm4HZT4hsf9q5i0g/Wplpme8101PA Tg== -----END CERTIFICATE-----Generated at Sun Nov 23 17:17:01 2025 by rpki-client