This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: dBYlTSPHafjidFi/xHtHaVKaSjA050W+N4qZnLGuedI= Subject key identifier: 7D:B6:35:19:0F:1F:47:A5:57:83:30:C8:40:36:E4:41:50:D1:20:6A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 24A1677BCFED9C351FA5DDEEDA6EA3921720C7A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 042B Signing time: Sat 03 Jan 2026 19:18:50 +0000 Manifest this update: Sat 03 Jan 2026 19:13:50 +0000 Manifest next update: Sun 04 Jan 2026 21:20:50 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: HsBp9f1/aouafHdx13w6ldC5HbqlYBA5C346tUyncg0=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 21:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a1:67:7b:cf:ed:9c:35:1f:a5:dd:ee:da:6e:a3:92:17:20:c7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 3 19:13:50 2026 GMT Not After : Jan 4 21:20:50 2026 GMT Subject: CN=7DB635190F1F47A5578330C84036E44150D1206A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:06:ce:43:f1:cd:e3:b6:53:76:ae:be:39: 4f:73:c8:06:8e:53:0c:67:fb:75:62:84:68:fc:39: e9:44:73:cf:b7:4d:78:a4:1f:ea:51:98:81:a7:8a: 7b:46:ce:ce:41:8b:6d:de:e7:31:18:8c:43:3d:ca: 33:23:2b:91:9d:6c:8f:f2:e1:ce:9e:4e:ee:c8:5f: e9:d6:b8:b9:ed:bd:a7:e9:9b:83:34:33:ba:e1:c8: 37:a0:f2:0d:54:7a:c5:59:cd:82:4b:9e:67:0d:dc: 03:bc:15:9c:b1:97:8d:17:bc:f1:27:c4:37:2f:c5: 0b:31:ba:9b:24:c8:1d:99:46:0c:49:93:5b:3d:62: d6:a3:5d:3c:63:0f:5f:9c:be:c4:36:09:0f:e3:a5: 56:5c:17:97:bd:55:43:b9:6c:79:45:04:a6:e7:49: 23:b1:8e:9c:1b:a3:98:a3:35:1f:42:48:0f:24:dd: 1c:58:7a:48:32:a1:ef:8c:e8:39:e8:ba:97:c6:60: c5:51:1c:ae:75:f6:fa:94:8e:88:b6:c6:6e:0f:18: 9b:5d:ec:e6:93:5b:da:0d:85:78:6f:08:57:c1:db: d9:04:db:b8:5d:2d:c7:ad:19:07:2f:49:17:c3:71: 73:67:64:b7:21:2b:f0:80:62:cc:df:2a:d9:f0:0c: 66:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:35:19:0F:1F:47:A5:57:83:30:C8:40:36:E4:41:50:D1:20:6A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3c:1b:b9:04:ba:cc:9d:03:e0:2b:1f:26:c1:d4:22:e1:93: 3a:46:72:5b:00:49:d6:60:00:6b:da:8c:1d:03:74:e0:34:81: 6d:ea:54:7f:66:b2:f4:a6:53:36:93:34:e4:e3:79:b3:fb:b7: a7:73:e9:ab:03:3c:19:d2:bc:77:36:f0:99:85:d3:a2:03:a4: 70:83:02:37:e1:95:38:f3:fb:72:a8:c0:bc:4f:4b:36:6c:6b: 30:c7:29:2a:c9:5f:a6:72:32:e0:7a:1e:1d:25:05:6e:4c:2d: ca:d5:3b:8f:66:a5:f4:51:8e:18:33:0a:f9:77:04:21:03:30: 17:5e:95:96:1b:a7:e0:40:b0:c5:53:43:bb:2d:d1:d7:25:77: 2a:38:ec:37:3b:12:08:52:71:00:30:c2:e5:37:ec:b0:38:db: 07:20:2e:cc:8b:ae:20:53:1a:49:25:01:77:78:37:15:94:57: 47:f0:ac:70:ae:46:91:23:72:47:0b:0e:fa:a2:53:ec:f9:88: 1a:6a:27:e7:69:0b:af:e3:c2:98:4d:cd:b0:c2:77:64:84:08: 51:92:08:e1:43:11:76:7a:93:d0:7d:84:bc:bf:83:18:c7:71: aa:03:17:9a:74:1e:ff:60:1b:49:0b:48:ab:ef:0e:ba:fc:dd: 50:96:e0:02 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJKFne8/tnDUfpd3u2m6jkhcgx6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMDMxOTEzNTBaFw0yNjAxMDQyMTIwNTBaMDMxMTAvBgNV BAMTKDdEQjYzNTE5MEYxRjQ3QTU1NzgzMzBDODQwMzZFNDQxNTBEMTIwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBwbOQ/HN47ZTdq6+OU9zyAaO Uwxn+3VihGj8OelEc8+3TXikH+pRmIGnintGzs5Bi23e5zEYjEM9yjMjK5GdbI/y 4c6eTu7IX+nWuLntvafpm4M0M7rhyDeg8g1UesVZzYJLnmcN3AO8FZyxl40XvPEn xDcvxQsxupskyB2ZRgxJk1s9YtajXTxjD1+cvsQ2CQ/jpVZcF5e9VUO5bHlFBKbn SSOxjpwbo5ijNR9CSA8k3RxYekgyoe+M6DnoupfGYMVRHK519vqUjoi2xm4PGJtd 7OaTW9oNhXhvCFfB29kE27hdLcetGQcvSRfDcXNnZLchK/CAYszfKtnwDGbVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfbY1GQ8fR6VXgzDIQDbkQVDRIGowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezwbuQS6zJ0D4CsfJsHU IuGTOkZyWwBJ1mAAa9qMHQN04DSBbepUf2ay9KZTNpM05ON5s/u3p3PpqwM8GdK8 dzbwmYXTogOkcIMCN+GVOPP7cqjAvE9LNmxrMMcpKslfpnIy4HoeHSUFbkwtytU7 j2al9FGOGDMK+XcEIQMwF16Vlhun4ECwxVNDuy3R1yV3KjjsNzsSCFJxADDC5Tfs sDjbByAuzIuuIFMaSSUBd3g3FZRXR/CscK5GkSNyRwsO+qJT7PmIGmon52kLr+PC mE3NsMJ3ZIQIUZII4UMRdnqT0H2EvL+DGMdxqgMXmnQe/2AbSQtIq+8OuvzdUJbg Ag== -----END CERTIFICATE-----Generated at Sun Jan 4 10:50:18 2026 by rpki-client