This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft File: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json) Hash identifier: zwwrdxHPirBGLse00n6ys1PAuZBom5rrxTAH+LX3Jb4= Subject key identifier: E3:93:EC:6F:97:D4:45:C1:98:23:74:D6:A8:71:FB:A8:2C:C6:8B:85 Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Certificate serial: 2FA263ECB3B3122B1DBEB92BD3CAC1E3104111B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft Manifest number: 019A Signing time: Sun 21 Dec 2025 00:17:37 +0000 Manifest this update: Sun 21 Dec 2025 00:12:37 +0000 Manifest next update: Mon 22 Dec 2025 03:22:37 +0000 Files and hashes: 1: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=) 2: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: rUI3HzrxQZG6OsL3tn4pPXuxsTtvy6fWMw1kEhsWBgg=) 3: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=) 4: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=) 5: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=) 6: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=) 7: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=) 8: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=) 9: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=) 10: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=) 11: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=) 12: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=) 13: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=) 14: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=) 15: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=) 16: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=) 17: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=) 18: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=) 19: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=) 20: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=) 21: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=) 22: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=) 23: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=) 24: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=) 25: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=) 26: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=) 27: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=) 28: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a2:63:ec:b3:b3:12:2b:1d:be:b9:2b:d3:ca:c1:e3:10:41:11:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b Validity Not Before: Dec 21 00:12:37 2025 GMT Not After : Dec 22 03:22:37 2025 GMT Subject: CN=E393EC6F97D445C1982374D6A871FBA82CC68B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:a2:a7:0c:7e:67:e3:c7:f3:83:f5:5c:1d: 23:65:79:bf:d2:da:6d:e6:c0:02:2e:f1:d0:65:21: 6f:e6:0f:d8:ae:2f:df:98:47:de:45:3b:b1:72:0e: 11:86:c2:7c:a1:d8:49:96:5f:ab:7f:70:4d:60:52: 91:08:77:03:f2:3f:9c:36:1b:af:13:de:47:48:12: ab:4d:7a:6d:f4:a5:fc:c7:aa:9c:75:8d:0d:d0:12: 0c:78:05:b1:11:6b:23:4d:7c:32:99:53:d5:f8:57: 51:cb:73:f9:8f:54:af:ee:f5:36:e9:60:ef:ed:d1: 67:6c:d3:fe:c9:24:df:55:38:e0:7b:82:58:a4:1f: 6d:19:53:ff:17:c4:46:78:dc:bf:c1:f6:74:a5:c1: 18:dc:9e:09:f5:90:a3:08:28:cc:a3:06:8a:f2:b0: 4d:90:45:6f:a3:3a:5b:e5:16:57:83:26:30:58:21: 2d:79:4d:7b:00:59:b0:b4:c6:df:f5:c7:c7:7d:23: 77:14:18:c9:01:a5:9c:f0:ba:c9:c8:c6:a8:e3:61: a4:0c:36:46:63:6e:8e:e7:7f:9d:22:89:19:9a:34: c3:fa:75:05:87:81:5f:d1:0a:8d:45:1b:1c:43:34: b0:3d:31:40:1b:1f:43:f2:56:7b:a5:20:9a:8f:d2: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:93:EC:6F:97:D4:45:C1:98:23:74:D6:A8:71:FB:A8:2C:C6:8B:85 X509v3 Authority Key Identifier: keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3a:18:9e:b5:da:7b:20:d7:c4:ab:00:d3:0f:3a:a8:7d:7a: df:0f:00:4f:e4:07:02:ed:0d:6c:3c:76:06:83:2d:ee:44:d4: 4c:c5:ca:b7:44:9f:87:1c:d2:17:58:45:ac:89:d0:40:2b:de: f0:97:f0:94:f3:1f:ba:f7:6d:46:3a:98:2a:30:4a:21:62:17: 48:5b:e2:0f:ed:7f:cc:34:a5:37:45:f3:44:9b:dc:7e:1f:f5: d0:e6:99:47:7e:58:36:3a:ad:e2:34:a2:59:fd:a1:df:f9:8b: a1:08:44:f2:f5:e1:59:75:f4:d9:93:1f:b4:48:f9:5b:48:0b: 8e:22:8c:ba:c6:c3:1e:e9:9a:4f:77:f5:1c:36:83:27:dc:59: 94:ec:6e:6f:b5:31:fa:91:4c:68:39:98:8c:e7:fd:2d:44:6e: 60:97:cc:a5:45:97:cf:4b:3c:2c:d6:dc:a5:8a:7a:05:e3:e5: 2e:73:ee:42:99:fa:06:6d:5e:62:f0:2e:87:f0:e5:0d:ca:68: a1:cc:2c:cb:a4:f2:b3:e6:14:7b:68:8a:94:57:b5:d2:92:b1: 9a:06:5b:7a:8d:87:11:32:ec:0e:bd:24:2e:40:fd:ed:68:cf: 6d:da:99:40:48:6a:91:9b:57:c8:39:d2:2f:68:5a:66:9f:81: da:ee:1b:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUL6Jj7LOzEisdvrkr08rB4xBBEbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0 ZTQzYWUxYjAeFw0yNTEyMjEwMDEyMzdaFw0yNTEyMjIwMzIyMzdaMDMxMTAvBgNV BAMTKEUzOTNFQzZGOTdENDQ1QzE5ODIzNzRENkE4NzFGQkE4MkNDNjhCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSKKnDH5n48fzg/VcHSNleb/S 2m3mwAIu8dBlIW/mD9iuL9+YR95FO7FyDhGGwnyh2EmWX6t/cE1gUpEIdwPyP5w2 G68T3kdIEqtNem30pfzHqpx1jQ3QEgx4BbERayNNfDKZU9X4V1HLc/mPVK/u9Tbp YO/t0Wds0/7JJN9VOOB7glikH20ZU/8XxEZ43L/B9nSlwRjcngn1kKMIKMyjBory sE2QRW+jOlvlFleDJjBYIS15TXsAWbC0xt/1x8d9I3cUGMkBpZzwusnIxqjjYaQM NkZjbo7nf50iiRmaNMP6dQWHgV/RCo1FGxxDNLA9MUAbH0PyVnulIJqP0sbBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU45Psb5fURcGYI3TWqHH7qCzGi4UwHwYDVR0j BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1 RHJocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85MzNiMmZkNy0z MWMxLTQ1MWMtODI4OC1jMWFhMGFhMTI3NTAvMC80NUU4NjQ4RTQ0NURDQ0QwRDhF RTY5OUY1MTQwQkI4MTRFNDNBRTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzoYnrXaeyDXxKsA0w86 qH163w8AT+QHAu0NbDx2BoMt7kTUTMXKt0SfhxzSF1hFrInQQCve8JfwlPMfuvdt RjqYKjBKIWIXSFviD+1/zDSlN0XzRJvcfh/10OaZR35YNjqt4jSiWf2h3/mLoQhE 8vXhWXX02ZMftEj5W0gLjiKMusbDHumaT3f1HDaDJ9xZlOxub7Ux+pFMaDmYjOf9 LURuYJfMpUWXz0s8LNbcpYp6BePlLnPuQpn6Bm1eYvAuh/DlDcpoocwsy6Tys+YU e2iKlFe10pKxmgZbeo2HETLsDr0kLkD97WjPbdqZQEhqkZtXyDnSL2haZp+B2u4b aA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:09 2025 by rpki-client