This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: J8eH0azKV0ZFgpk6POKP9qERww3xDEaYC876g5PlqeA= Subject key identifier: B9:82:0D:99:2F:0C:58:4B:1B:8C:93:2B:42:FB:8C:44:50:27:21:4E Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 629A12A2DFEA4F650FFB14D33C045B0BD556DD8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0405 Signing time: Sat 06 Dec 2025 06:47:16 +0000 Manifest this update: Sat 06 Dec 2025 06:42:16 +0000 Manifest next update: Sun 07 Dec 2025 09:42:16 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: Z5E08R7zVKfUbyh/SmldxUj835ZULQEnm59rmX32f5g=) 5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 8: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9a:12:a2:df:ea:4f:65:0f:fb:14:d3:3c:04:5b:0b:d5:56:dd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 6 06:42:16 2025 GMT Not After : Dec 7 09:42:16 2025 GMT Subject: CN=B9820D992F0C584B1B8C932B42FB8C445027214E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:d8:0b:84:93:37:fc:b0:74:bb:76:a1:11: 89:86:6a:55:d6:ed:4c:43:a2:7a:bb:ba:db:fb:04: 23:8c:13:38:ab:5d:64:d5:0c:e8:c2:c3:00:48:f4: e2:a7:d3:61:7f:33:fd:02:4f:c5:b5:95:69:1a:b6: 9a:09:c8:ec:08:4e:16:a6:9f:79:8f:88:03:f7:ad: 57:58:0b:65:74:ac:22:bf:df:10:f2:6b:b6:24:56: 07:f7:39:98:ba:70:40:26:fe:f0:26:99:e0:d6:13: c0:b3:c7:09:ea:30:c8:0a:7c:fe:4f:2d:ec:1c:53: fe:6f:c3:23:81:99:33:1a:63:98:9f:96:c1:5f:33: 60:e3:a8:fe:2d:db:df:a6:ec:8b:f2:bf:06:6f:10: ed:1a:15:de:2a:aa:f4:1f:fc:ce:aa:58:12:fb:e2: fd:3e:94:29:de:f2:36:36:c5:20:fc:bd:27:eb:73: d2:90:f9:6c:7c:28:ac:73:0f:9f:9a:66:e6:7a:03: 73:1e:e6:7d:0e:61:8e:bb:80:a0:37:e7:97:8d:26: 65:09:4b:c0:85:14:7a:1a:ec:58:60:a9:24:c6:e7: a6:ce:7b:ba:10:4f:2b:b3:68:92:d9:b4:60:0b:ea: 6d:e8:d6:51:66:e9:f2:c2:e2:3a:83:7b:44:3e:ab: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:82:0D:99:2F:0C:58:4B:1B:8C:93:2B:42:FB:8C:44:50:27:21:4E X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6e:a6:af:a1:89:3f:48:c7:ca:b8:de:67:f6:5c:69:f6:18: cd:cf:37:13:85:29:7b:ae:94:64:ee:1c:30:1d:ce:55:9e:60: b4:f6:fb:fa:cb:d1:d7:84:78:a8:fa:84:41:50:28:dd:19:6a: 15:1a:d4:ba:57:36:4b:b4:ae:ad:58:b6:ac:ce:e8:67:24:38: f4:ec:dc:66:72:3d:a9:59:58:cd:2c:3c:5f:ca:6b:09:e4:22: 10:6f:ef:9f:df:ca:5a:a7:d4:c4:0c:91:7f:d9:40:68:4e:d1: 3d:0a:fe:2a:d8:40:80:ec:2f:f7:ef:6d:76:87:8f:15:8c:4e: 56:cb:84:ca:6b:78:bc:a8:c7:2a:ad:85:41:67:1f:c6:73:6e: 44:79:92:94:3f:a3:c4:4a:c5:dd:ef:af:e9:ee:09:b2:e0:dd: 3c:9d:81:6e:be:7b:45:be:8c:a5:dc:51:a6:38:28:3c:83:8f: 07:96:27:be:62:d4:98:9b:d7:4a:54:0c:0e:32:9a:0f:34:a7: ca:0f:a1:78:3b:ca:f6:db:59:f7:1e:8d:f8:02:4a:9a:91:0a: 0f:1d:4d:76:ae:48:74:89:14:90:4b:8f:b8:3c:0d:06:7a:77: 06:e4:79:6d:77:3c:c7:58:11:c6:cd:57:c0:e8:d6:3d:3d:0e: f9:b5:04:36 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYpoSot/qT2UP+xTTPARbC9VW3Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMDYwNjQyMTZaFw0yNTEyMDcwOTQyMTZaMDMxMTAvBgNV BAMTKEI5ODIwRDk5MkYwQzU4NEIxQjhDOTMyQjQyRkI4QzQ0NTAyNzIxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgNgLhJM3/LB0u3ahEYmGalXW 7UxDonq7utv7BCOMEzirXWTVDOjCwwBI9OKn02F/M/0CT8W1lWkatpoJyOwITham n3mPiAP3rVdYC2V0rCK/3xDya7YkVgf3OZi6cEAm/vAmmeDWE8CzxwnqMMgKfP5P LewcU/5vwyOBmTMaY5iflsFfM2DjqP4t29+m7IvyvwZvEO0aFd4qqvQf/M6qWBL7 4v0+lCne8jY2xSD8vSfrc9KQ+Wx8KKxzD5+aZuZ6A3Me5n0OYY67gKA355eNJmUJ S8CFFHoa7FhgqSTG56bOe7oQTyuzaJLZtGAL6m3o1lFm6fLC4jqDe0Q+q4zjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuYINmS8MWEsbjJMrQvuMRFAnIU4wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm6mr6GJP0jHyrjeZ/Zc afYYzc83E4Upe66UZO4cMB3OVZ5gtPb7+svR14R4qPqEQVAo3RlqFRrUulc2S7Su rVi2rM7oZyQ49OzcZnI9qVlYzSw8X8prCeQiEG/vn9/KWqfUxAyRf9lAaE7RPQr+ KthAgOwv9+9tdoePFYxOVsuEymt4vKjHKq2FQWcfxnNuRHmSlD+jxErF3e+v6e4J suDdPJ2Bbr57Rb6MpdxRpjgoPIOPB5YnvmLUmJvXSlQMDjKaDzSnyg+heDvK9ttZ 9x6N+AJKmpEKDx1Ndq5IdIkUkEuPuDwNBnp3BuR5bXc8x1gRxs1XwOjWPT0O+bUE Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:53 2025 by rpki-client