This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: aAwywQAZdl5IfKVI5pMV8+T5cQT0WCKfyvq/BQ4hkl4= Subject key identifier: 44:01:00:BD:22:CF:24:A1:57:AA:83:34:6E:F5:36:87:22:03:CC:D4 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 716CCC2EDF43FFC12AB045904B44B178C85F088E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0447 Signing time: Sat 24 Jan 2026 18:09:07 +0000 Manifest this update: Sat 24 Jan 2026 18:04:07 +0000 Manifest next update: Sun 25 Jan 2026 21:07:07 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: t/5HCH610S9+jWwgjANYON/qf+iURDUZFjUpbrlLQIY=) 2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 5: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6c:cc:2e:df:43:ff:c1:2a:b0:45:90:4b:44:b1:78:c8:5f:08:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jan 24 18:04:07 2026 GMT Not After : Jan 25 21:07:07 2026 GMT Subject: CN=440100BD22CF24A157AA83346EF536872203CCD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:7d:02:9f:51:a6:e5:97:9c:17:8c:8c:c0: 67:a2:bd:04:5a:1a:fb:50:e0:ea:60:52:37:34:a3: d1:e0:d8:49:50:0a:da:49:08:4f:b2:2c:67:a3:3c: cb:8d:8f:86:d5:a0:12:6a:97:7e:d7:5e:5f:d0:ca: 43:7d:c0:50:4d:8f:03:51:13:3f:90:67:b0:83:13: 3e:3e:c9:d0:76:f9:81:46:ea:dd:0c:2f:8b:c8:54: 3a:04:de:b2:d1:21:7a:10:83:07:ba:a0:5a:c6:ad: 86:8a:14:32:ef:b0:ed:4b:4c:38:c2:3f:8f:46:c0: 51:e4:53:cd:4d:ac:07:71:62:d4:70:74:dd:e8:ee: 39:26:5b:4a:ed:2f:51:fa:e8:92:cb:b2:b6:fd:2a: 00:b6:3e:9b:ba:14:57:82:a1:f1:93:40:87:d3:8b: 98:7f:29:8f:cd:5b:30:b0:d2:a0:75:e1:37:35:5d: e1:a1:66:7d:ff:e1:e2:87:17:d4:5d:f5:90:36:47: fd:2d:ad:28:4f:bc:6e:6c:76:65:7b:24:8f:e3:03: e3:4f:fc:a5:5d:9c:e0:7f:68:fd:80:4f:b6:13:4d: 42:f6:d1:44:07:43:e4:ce:ca:64:00:4f:2c:32:28: 10:3c:c6:b5:4d:8d:a7:bc:30:d0:9a:aa:3b:aa:ea: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:01:00:BD:22:CF:24:A1:57:AA:83:34:6E:F5:36:87:22:03:CC:D4 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:81:fc:a1:6b:7c:44:53:e6:28:af:21:bb:6b:06:41:f5: 0c:c0:ba:8f:91:c1:51:60:4e:c3:ad:ea:9b:c0:7a:2e:cf:ef: 1e:22:e2:d1:84:e0:0f:eb:0f:ba:ac:7a:5b:e3:25:01:60:78: 7b:ac:41:91:5c:8e:9f:ac:9e:bc:68:60:19:af:b4:79:08:15: cd:ec:15:57:49:f8:f9:92:01:a6:fb:b4:4a:02:9f:5a:56:9e: 15:e5:9e:71:80:99:aa:8a:9a:54:8e:ca:f7:da:bf:67:b1:e3: d5:86:31:33:cf:64:fe:03:a4:0c:6b:7d:25:d3:13:44:74:67: 88:8d:cf:c6:68:17:ae:bd:19:2a:86:aa:13:2f:87:b6:27:ed: ba:98:cf:44:fb:91:08:cc:20:bc:ed:f9:b8:09:1b:12:70:2c: 05:e2:97:b4:c0:9b:9b:05:a8:c2:42:a9:61:28:7d:e8:78:c1: c9:7c:3a:13:fc:56:54:86:eb:c7:98:fd:0d:25:86:1b:d3:a8: 9f:fc:a2:2a:b3:f5:d4:72:5b:08:20:01:06:9f:0a:9b:16:df: 64:8c:dd:aa:1e:93:be:11:9f:3f:a5:65:4b:80:32:76:21:5d: 0f:c4:2b:29:9f:a1:29:20:f4:0c:4d:f4:9a:e1:4d:90:2e:b3: 18:a5:b7:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcWzMLt9D/8EqsEWQS0SxeMhfCI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNjAxMjQxODA0MDdaFw0yNjAxMjUyMTA3MDdaMDMxMTAvBgNV BAMTKDQ0MDEwMEJEMjJDRjI0QTE1N0FBODMzNDZFRjUzNjg3MjIwM0NDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKn0Cn1Gm5ZecF4yMwGeivQRa GvtQ4OpgUjc0o9Hg2ElQCtpJCE+yLGejPMuNj4bVoBJql37XXl/QykN9wFBNjwNR Ez+QZ7CDEz4+ydB2+YFG6t0ML4vIVDoE3rLRIXoQgwe6oFrGrYaKFDLvsO1LTDjC P49GwFHkU81NrAdxYtRwdN3o7jkmW0rtL1H66JLLsrb9KgC2Ppu6FFeCofGTQIfT i5h/KY/NWzCw0qB14Tc1XeGhZn3/4eKHF9Rd9ZA2R/0trShPvG5sdmV7JI/jA+NP /KVdnOB/aP2AT7YTTUL20UQHQ+TOymQATywyKBA8xrVNjae8MNCaqjuq6g71AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQURAEAvSLPJKFXqoM0bvU2hyIDzNQwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCGB/KFrfERT5iivIbtr BkH1DMC6j5HBUWBOw63qm8B6Ls/vHiLi0YTgD+sPuqx6W+MlAWB4e6xBkVyOn6ye vGhgGa+0eQgVzewVV0n4+ZIBpvu0SgKfWlaeFeWecYCZqoqaVI7K99q/Z7Hj1YYx M89k/gOkDGt9JdMTRHRniI3PxmgXrr0ZKoaqEy+HtiftupjPRPuRCMwgvO35uAkb EnAsBeKXtMCbmwWowkKpYSh96HjByXw6E/xWVIbrx5j9DSWGG9Oon/yiKrP11HJb CCABBp8KmxbfZIzdqh6TvhGfP6VlS4AydiFdD8QrKZ+hKSD0DE30muFNkC6zGKW3 tw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:30 2026 by rpki-client