This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: O8yGG2gfadebwYTfqZuoHheRgmUFxQA3lVfz3rmOVFE= Subject key identifier: A5:EB:7A:B9:BA:F9:B8:D8:93:BD:D1:00:A3:3C:74:39:71:6C:8C:03 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 03017D4B5775F1C6E9E1D15CD6AFF5613DBECD5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 040F Signing time: Sat 13 Dec 2025 18:28:07 +0000 Manifest this update: Sat 13 Dec 2025 18:23:07 +0000 Manifest next update: Sun 14 Dec 2025 20:51:07 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 3: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: CZ1Qwogq16EXGD46/by4KJMZ4dCwiHjLyPsfcwMPYZM=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:01:7d:4b:57:75:f1:c6:e9:e1:d1:5c:d6:af:f5:61:3d:be:cd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 13 18:23:07 2025 GMT Not After : Dec 14 20:51:07 2025 GMT Subject: CN=A5EB7AB9BAF9B8D893BDD100A33C7439716C8C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:ad:b1:e4:f1:b9:46:96:6c:07:ae:8b:e1: 25:f7:35:4c:7f:b4:1d:1d:16:21:92:74:63:ed:14: f4:90:e7:3a:72:8c:34:10:ba:8e:b6:93:1b:96:86: 04:68:02:79:86:25:62:76:bf:dd:5f:06:ed:ae:f7: 75:06:e8:21:34:0e:f8:76:c9:50:54:3f:37:4a:e1: 4c:20:74:94:b8:e6:5d:41:34:c8:23:8c:06:ae:68: da:c1:39:14:6b:ed:7a:76:20:dc:41:4f:5d:e9:ef: d4:22:f1:9e:33:0c:90:45:c8:66:c7:07:2f:78:0c: f0:eb:49:dc:93:ac:de:3e:2c:50:e7:8d:79:fd:a8: ee:bf:a8:bc:fa:62:64:9c:e8:99:32:a9:c9:19:88: d9:c3:2a:38:3c:7c:4d:1c:53:35:30:04:82:bb:36: c5:89:70:8d:f8:ba:0e:35:2b:40:40:95:7e:56:80: 94:dc:ac:f2:b1:26:3b:ba:08:88:14:66:57:73:7a: f0:8f:bb:eb:8a:06:06:67:7d:70:a0:b3:a1:d4:d6: 2f:9e:5e:e8:9a:bc:fd:cf:38:b5:be:01:8a:a3:40: 89:da:64:67:27:64:75:42:29:c4:65:f1:99:ef:0e: fd:ee:ca:43:12:c2:9f:45:e3:ca:62:d5:94:0c:54: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EB:7A:B9:BA:F9:B8:D8:93:BD:D1:00:A3:3C:74:39:71:6C:8C:03 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0a:f3:a9:16:1f:91:cd:bc:1f:a0:1b:b8:4e:eb:21:e0:4a: 2e:a9:2a:7c:ee:44:f5:e2:6a:ce:f6:6f:c9:6a:24:c3:91:ea: 30:2a:c4:21:46:a1:7e:ec:4a:f9:16:92:c3:4f:c3:53:39:11: e0:07:ce:55:cb:35:34:0a:b6:50:19:c5:07:8f:3a:53:64:2a: d6:68:2f:ad:6d:d9:3f:c2:5a:16:c9:69:04:1e:e5:89:73:85: 10:0b:c8:8e:a6:21:e1:fc:60:e3:ff:05:b9:c0:7c:b4:8b:ea: a4:e9:26:ba:f3:ac:7f:1a:ff:ac:43:68:f6:ed:41:0a:c0:41: 15:7f:a0:a3:76:e7:a2:4f:cf:65:40:67:68:56:bc:f6:53:d6: 7f:3c:c0:98:48:13:9b:e4:8d:42:d5:2c:0e:58:bc:3d:2c:25: fc:eb:3e:d9:8d:57:ba:b5:f2:d6:81:0f:f3:19:92:ef:40:01: fa:9b:11:a9:fd:f8:6f:98:bc:3c:b0:cc:d5:6b:07:0d:40:7f: 55:d1:2a:65:bf:5f:ad:91:df:e1:64:0d:b2:0d:42:e0:f0:69: 44:04:d7:e0:03:7f:f3:77:af:15:47:45:1b:5c:c7:ee:6d:01: 1d:7b:45:c1:00:d1:cc:2e:e7:59:1c:20:d2:c8:5a:69:1b:59: 65:8a:7f:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAwF9S1d18cbp4dFc1q/1YT2+zV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTMxODIzMDdaFw0yNTEyMTQyMDUxMDdaMDMxMTAvBgNV BAMTKEE1RUI3QUI5QkFGOUI4RDg5M0JERDEwMEEzM0M3NDM5NzE2QzhDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84q2x5PG5RpZsB66L4SX3NUx/ tB0dFiGSdGPtFPSQ5zpyjDQQuo62kxuWhgRoAnmGJWJ2v91fBu2u93UG6CE0Dvh2 yVBUPzdK4UwgdJS45l1BNMgjjAauaNrBORRr7Xp2INxBT13p79Qi8Z4zDJBFyGbH By94DPDrSdyTrN4+LFDnjXn9qO6/qLz6YmSc6JkyqckZiNnDKjg8fE0cUzUwBIK7 NsWJcI34ug41K0BAlX5WgJTcrPKxJju6CIgUZldzevCPu+uKBgZnfXCgs6HU1i+e XuiavP3POLW+AYqjQInaZGcnZHVCKcRl8ZnvDv3uykMSwp9F48pi1ZQMVE/nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpet6ubr5uNiTvdEAozx0OXFsjAMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQrzqRYfkc28H6AbuE7r IeBKLqkqfO5E9eJqzvZvyWokw5HqMCrEIUahfuxK+RaSw0/DUzkR4AfOVcs1NAq2 UBnFB486U2Qq1mgvrW3ZP8JaFslpBB7liXOFEAvIjqYh4fxg4/8FucB8tIvqpOkm uvOsfxr/rENo9u1BCsBBFX+go3bnok/PZUBnaFa89lPWfzzAmEgTm+SNQtUsDli8 PSwl/Os+2Y1XurXy1oEP8xmS70AB+psRqf34b5i8PLDM1WsHDUB/VdEqZb9frZHf 4WQNsg1C4PBpRATX4AN/83evFUdFG1zH7m0BHXtFwQDRzC7nWRwg0shaaRtZZYp/ Bg== -----END CERTIFICATE-----Generated at Sun Dec 14 08:27:13 2025 by rpki-client