This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: 4mGseLl/qD/Nfyhu7zlIneYGhJcWfNHTNXjwLLkEV7o= Subject key identifier: 2F:22:C2:05:EE:6F:2D:FB:B2:4D:0E:FC:F4:AC:A5:87:9C:8C:3A:DB Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 45688AD39DD5F626DB719C29BA1DC3C9DA73A1F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 0186 Signing time: Sat 06 Dec 2025 05:26:17 +0000 Manifest this update: Sat 06 Dec 2025 05:21:17 +0000 Manifest next update: Sun 07 Dec 2025 06:23:17 +0000 Files and hashes: 1: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=) 2: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 3: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 4: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 5: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 6: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 7: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 8: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=) 9: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=) 10: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 11: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 12: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 13: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 14: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) 15: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 16: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=) 17: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=) 18: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 19: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 20: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=) 21: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 22: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 23: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 24: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 25: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 26: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 27: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 28: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: UHoj4aA+kv/j28Tz4KVaHTMUCSx48VzTNs0sHnd4B9s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:68:8a:d3:9d:d5:f6:26:db:71:9c:29:ba:1d:c3:c9:da:73:a1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Dec 6 05:21:17 2025 GMT Not After : Dec 7 06:23:17 2025 GMT Subject: CN=2F22C205EE6F2DFBB24D0EFCF4ACA5879C8C3ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:73:36:29:ef:fb:de:01:03:e7:5f:66:97:8d: 2f:1a:d6:1c:d4:af:98:f6:e0:e2:25:bf:c1:f1:7c: 6c:71:6a:07:6b:d4:9a:39:32:64:24:03:f5:24:d9: f2:df:fd:51:0e:5f:d5:26:fa:c8:1c:7b:43:1b:fb: 15:55:88:c1:54:5c:51:fe:85:71:24:97:cc:01:03: 58:ce:b7:00:45:2e:11:81:31:ee:77:c3:b7:04:f4: 50:1f:cb:e3:06:d4:5a:e8:e0:12:8d:8d:5a:c3:43: c0:7c:db:cb:e8:4e:9d:27:d4:12:03:30:2b:5c:92: 6a:72:56:e8:08:9c:0d:1b:37:7a:54:f2:fd:7b:c6: 82:3f:cd:ac:03:dd:43:ec:6b:49:a3:c4:76:ee:66: 08:35:e9:ef:db:10:12:62:b9:ac:f5:57:8e:77:30: 9d:f3:9a:8f:5b:92:15:06:a5:f6:28:bf:fa:0f:9b: a2:c0:df:01:8e:97:db:f2:f8:f0:de:05:7a:d3:1d: 4f:9e:44:7a:98:45:70:70:6c:80:f7:5a:5f:1e:0a: 33:0b:0a:f8:08:f8:87:2f:a1:c0:75:d9:a0:85:f3: b2:3a:38:66:d5:10:21:3d:38:bb:15:b2:f6:25:96: 5a:f2:02:39:d3:9d:ea:04:8f:ef:56:73:ec:8c:bd: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:C2:05:EE:6F:2D:FB:B2:4D:0E:FC:F4:AC:A5:87:9C:8C:3A:DB X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1f:8f:83:90:91:74:3e:8f:36:7d:bf:7a:9a:a8:86:9d:60: f8:e9:ad:0e:20:77:3a:cc:7c:a5:b2:f7:50:fd:3a:83:26:14: d7:84:4c:52:1f:6c:f3:c5:bb:e8:44:40:6b:3d:be:b5:ca:b2: 8f:cf:43:3e:92:50:11:c5:ec:03:1f:4e:fd:0c:3e:7d:8d:58: 89:80:52:58:fd:ac:be:a7:a3:cf:32:76:5f:f5:ae:c9:ed:52: 8a:c2:d4:13:61:99:7d:b6:b4:b0:fd:13:03:0c:16:f4:c2:02: 27:85:16:1d:c6:07:30:cb:6f:9e:6c:fb:b5:6c:99:29:86:03: 7d:1d:88:4a:ab:31:86:26:ee:30:26:99:33:2b:ba:a0:24:88: 03:fb:5b:54:a6:f4:c7:90:f9:20:02:96:c3:da:76:f0:ed:9e: 62:7f:3d:ea:b7:21:97:57:84:21:40:ae:80:3e:b1:30:9d:52: 5f:6a:99:5b:a5:bc:33:44:d7:17:97:0a:ed:9e:6d:86:6d:ca: 27:76:05:eb:16:8d:12:78:9d:91:9e:a9:3f:93:94:ff:e7:7b: 1a:39:87:64:90:3e:05:1b:ed:5a:c8:0b:9e:8c:c2:af:12:3c: 2a:76:75:e2:9f:27:91:0b:7d:58:f8:f2:2d:f0:3e:5a:53:bf: e5:84:45:54 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURWiK053V9ibbcZwpuh3DydpzofQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTEyMDYwNTIxMTdaFw0yNTEyMDcwNjIzMTdaMDMxMTAvBgNV BAMTKDJGMjJDMjA1RUU2RjJERkJCMjREMEVGQ0Y0QUNBNTg3OUM4QzNBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsczYp7/veAQPnX2aXjS8a1hzU r5j24OIlv8HxfGxxagdr1Jo5MmQkA/Uk2fLf/VEOX9Um+sgce0Mb+xVViMFUXFH+ hXEkl8wBA1jOtwBFLhGBMe53w7cE9FAfy+MG1Fro4BKNjVrDQ8B828voTp0n1BID MCtckmpyVugInA0bN3pU8v17xoI/zawD3UPsa0mjxHbuZgg16e/bEBJiuaz1V453 MJ3zmo9bkhUGpfYov/oPm6LA3wGOl9vy+PDeBXrTHU+eRHqYRXBwbID3Wl8eCjML CvgI+IcvocB12aCF87I6OGbVECE9OLsVsvYlllryAjnTneoEj+9Wc+yMvQyRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULyLCBe5vLfuyTQ789Kylh5yMOtswHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB+Pg5CRdD6PNn2/epqo hp1g+OmtDiB3Osx8pbL3UP06gyYU14RMUh9s88W76ERAaz2+tcqyj89DPpJQEcXs Ax9O/Qw+fY1YiYBSWP2svqejzzJ2X/Wuye1SisLUE2GZfba0sP0TAwwW9MICJ4UW HcYHMMtvnmz7tWyZKYYDfR2ISqsxhibuMCaZMyu6oCSIA/tbVKb0x5D5IAKWw9p2 8O2eYn896rchl1eEIUCugD6xMJ1SX2qZW6W8M0TXF5cK7Z5thm3KJ3YF6xaNEnid kZ6pP5OU/+d7GjmHZJA+BRvtWsgLnozCrxI8KnZ14p8nkQt9WPjyLfA+WlO/5YRF VA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:14 2025 by rpki-client