This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: v1gPbpQE6U/eJnVQOVIMsxuF845gzNEIuu8tQZ7v3MQ= Subject key identifier: 69:44:10:95:5F:DC:A4:61:C9:B1:AB:2D:B2:BA:C7:F9:D8:AB:7A:F0 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 6387C84B8C3EF93DEB89F6D7741C1E6CC3286F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0422 Signing time: Sun 28 Dec 2025 04:17:07 +0000 Manifest this update: Sun 28 Dec 2025 04:12:07 +0000 Manifest next update: Mon 29 Dec 2025 07:01:07 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: jTtA+97lpGzf+AbfJvjRbMUFpq4Hck+SuWbMig1Ngcg=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 6: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:87:c8:4b:8c:3e:f9:3d:eb:89:f6:d7:74:1c:1e:6c:c3:28:6f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 28 04:12:07 2025 GMT Not After : Dec 29 07:01:07 2025 GMT Subject: CN=694410955FDCA461C9B1AB2DB2BAC7F9D8AB7AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:1a:70:f8:f2:1a:b6:38:4f:67:26:60:2f: 62:b1:7e:bf:a4:8b:43:49:1b:a4:55:15:2e:62:b7: c6:4e:f7:5b:36:ce:71:b7:fc:b7:cd:e5:26:24:2c: 9e:78:d7:01:da:d8:c1:bf:8d:5b:c9:5e:ed:11:98: a7:1f:d3:f3:b8:99:ee:84:27:d1:88:17:1d:3d:20: 40:f5:a8:a1:5f:bd:e9:73:3c:cb:f8:c6:69:8a:3a: 4a:e8:46:7f:6e:d9:42:d2:23:2d:24:8e:ac:8a:47: a7:ee:92:ec:f2:6e:06:71:5b:3a:bd:0b:94:c7:ec: 89:8b:6c:91:d8:64:a4:69:fe:d9:8d:36:1f:c6:be: 75:3e:63:57:8c:92:13:76:21:68:90:fb:84:ed:84: 02:72:1f:63:2d:94:cf:f8:30:34:f3:71:1b:fe:be: 71:ab:d2:8f:6f:d6:0d:f4:c9:41:7d:f8:57:39:85: eb:56:82:cd:66:35:9e:d4:4c:6b:4a:26:5b:f8:91: 26:5d:c6:ab:da:9c:81:bd:e5:af:67:76:94:84:0e: cf:a2:63:8b:7b:c5:ee:b6:95:5b:4d:0c:02:3f:60: 2b:6b:06:9b:da:76:c5:1c:7c:8b:57:a1:8b:8b:43: f3:29:3a:79:ae:e6:7b:51:2d:59:2e:3c:c1:ff:4b: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:44:10:95:5F:DC:A4:61:C9:B1:AB:2D:B2:BA:C7:F9:D8:AB:7A:F0 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:04:fe:0d:b8:bb:d8:d2:cd:56:de:65:cc:a7:52:8e:cf:8b: c7:a2:d9:ef:88:fc:6e:a4:b0:6e:d8:02:79:df:62:7e:6e:61: 27:7f:58:f0:d1:5f:30:f6:d3:dc:b4:41:a0:bc:c5:6c:d5:4b: 24:aa:1e:5a:56:ac:48:d2:53:86:85:06:4e:41:3a:98:46:80: 52:02:30:6e:82:04:a1:9f:b5:43:68:e3:1c:6f:b0:6c:d3:d1: e8:01:c1:08:2a:6f:66:9c:b3:c2:f1:f7:7a:05:83:5e:28:47: 0d:0d:80:ca:37:65:dd:8d:ab:58:8c:eb:97:72:f2:bb:86:86: 26:14:7b:ee:9b:3d:a8:45:52:4c:df:a0:6f:15:db:e1:31:e1: 4f:42:80:b6:1c:9d:80:90:ac:e7:e9:cb:6b:9d:98:11:24:24: 60:53:32:ca:24:3a:b4:86:dd:44:b1:3e:d7:4c:e2:62:f5:67: ff:30:07:34:49:f9:42:58:82:8c:70:8e:b0:a9:fa:0f:0b:1f: bd:da:5c:65:d7:c3:d2:e9:24:04:fc:7f:e4:42:3d:e7:9e:b7: ba:bc:c1:40:bf:72:6b:f6:5d:5f:2a:d3:c7:67:89:c9:bb:6c: e7:32:fc:84:cf:07:ba:47:2e:c9:f3:eb:d6:90:89:d0:2b:29: 51:ea:d5:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUY4fIS4w++T3rifbXdBwebMMobwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMjgwNDEyMDdaFw0yNTEyMjkwNzAxMDdaMDMxMTAvBgNV BAMTKDY5NDQxMDk1NUZEQ0E0NjFDOUIxQUIyREIyQkFDN0Y5RDhBQjdBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54xpw+PIatjhPZyZgL2Kxfr+k i0NJG6RVFS5it8ZO91s2znG3/LfN5SYkLJ541wHa2MG/jVvJXu0RmKcf0/O4me6E J9GIFx09IED1qKFfvelzPMv4xmmKOkroRn9u2ULSIy0kjqyKR6fukuzybgZxWzq9 C5TH7ImLbJHYZKRp/tmNNh/GvnU+Y1eMkhN2IWiQ+4TthAJyH2MtlM/4MDTzcRv+ vnGr0o9v1g30yUF9+Fc5hetWgs1mNZ7UTGtKJlv4kSZdxqvanIG95a9ndpSEDs+i Y4t7xe62lVtNDAI/YCtrBpvadsUcfItXoYuLQ/MpOnmu5ntRLVkuPMH/S423AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaUQQlV/cpGHJsastsrrH+direvAwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQT+Dbi72NLNVt5lzKdS js+Lx6LZ74j8bqSwbtgCed9ifm5hJ39Y8NFfMPbT3LRBoLzFbNVLJKoeWlasSNJT hoUGTkE6mEaAUgIwboIEoZ+1Q2jjHG+wbNPR6AHBCCpvZpyzwvH3egWDXihHDQ2A yjdl3Y2rWIzrl3Lyu4aGJhR77ps9qEVSTN+gbxXb4THhT0KAthydgJCs5+nLa52Y ESQkYFMyyiQ6tIbdRLE+10ziYvVn/zAHNEn5QliCjHCOsKn6DwsfvdpcZdfD0ukk BPx/5EI95563urzBQL9ya/ZdXyrTx2eJybts5zL8hM8HukcuyfPr1pCJ0CspUerV 4g== -----END CERTIFICATE-----Generated at Sun Dec 28 19:09:33 2025 by rpki-client