This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: GR4cOCLi2IKn1//8PA3FIG7OC3ydoQ0WHIqQ7G7+f7A= Subject key identifier: 51:F3:E4:0C:EB:49:12:94:90:33:83:9F:65:82:0C:49:8B:D3:06:59 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 682C3C61728EFE02A95549B066BC0B87C9F49701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0417 Signing time: Fri 19 Dec 2025 20:07:10 +0000 Manifest this update: Fri 19 Dec 2025 20:02:10 +0000 Manifest next update: Sat 20 Dec 2025 23:15:10 +0000 Files and hashes: 1: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=) 4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=) 6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: OaoGZ0ND8wK4ZJQWd5AE3mt3ggqX5OWbppv60GfqRPY=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2c:3c:61:72:8e:fe:02:a9:55:49:b0:66:bc:0b:87:c9:f4:97:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Dec 19 20:02:10 2025 GMT Not After : Dec 20 23:15:10 2025 GMT Subject: CN=51F3E40CEB4912949033839F65820C498BD30659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:3f:b3:a7:84:20:63:41:f7:1d:7d:70:9f: 28:9b:2d:3e:7e:1c:c4:8e:56:7b:59:f9:53:df:0a: 4d:88:e9:ef:63:de:63:23:2e:19:c6:77:b1:a4:fc: 77:0f:c9:0b:1f:14:0b:09:a3:2a:1e:80:4a:e2:2f: c7:05:c3:cf:23:ab:89:1c:c3:50:d3:70:b6:06:39: 28:3a:09:e6:c0:06:5a:cc:8d:b7:08:f9:7c:4d:7a: 43:5d:57:21:86:43:6b:94:a8:2f:15:f4:8c:b2:70: b8:a9:c1:92:de:4b:8e:d1:f9:29:30:cd:58:4d:50: 0d:06:65:fe:04:97:81:a0:98:98:79:0d:e4:66:04: 66:2a:2d:a5:f0:05:b7:1a:63:00:2c:e2:d0:15:75: 9a:45:a1:12:3d:d6:f9:28:0b:4d:0e:fb:10:3f:26: 68:8f:d0:78:12:eb:1e:98:d6:1e:af:b2:f0:de:b4: 43:e1:f1:a2:12:29:d6:aa:b0:0c:89:18:bb:db:3b: e2:e4:86:36:84:b4:eb:9d:58:39:c1:a4:23:b3:59: 88:1a:cc:c2:43:91:b9:7d:0e:1b:92:a0:d6:24:1a: 5c:55:b3:b6:34:95:65:c2:b1:06:a5:14:ba:38:70: e8:36:88:51:ec:e7:ad:7f:41:4d:7b:a9:f2:a7:9e: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:E4:0C:EB:49:12:94:90:33:83:9F:65:82:0C:49:8B:D3:06:59 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4b:b0:da:7c:8b:4c:b3:23:da:15:f3:a6:1c:99:2f:eb:c8: 36:75:f6:fb:a6:b7:c9:fb:aa:f8:5e:cb:8a:df:70:a7:71:98: 83:99:b9:2c:cc:8c:ac:89:4b:f7:71:f4:01:cd:7e:b7:3e:32: ac:6b:ce:74:0b:4c:7b:4a:bc:62:56:9a:ae:22:67:62:10:14: 3f:65:ac:34:49:5b:fd:1e:76:04:4d:95:a3:0a:8d:41:ea:eb: 04:bc:d5:00:39:63:d2:fe:27:d5:88:db:0d:21:34:88:69:08: ea:ea:82:a1:45:31:6e:bd:b8:c0:dc:b6:35:d1:80:c1:37:9d: 23:23:f7:67:a5:8a:df:af:b8:2d:f3:15:b3:03:41:40:28:ec: 90:b5:df:2a:59:40:12:bf:ae:e0:c9:87:01:d5:bf:5f:19:76: 43:34:36:2b:20:ae:50:5b:87:79:62:ca:b0:39:c3:6d:60:f9: 43:55:fd:9f:83:89:75:7f:77:e1:d1:96:bc:b4:2c:91:3e:33: 60:6d:82:da:28:85:92:6b:8a:26:1f:3c:5d:7d:79:40:21:f2: fd:d5:89:2c:b8:80:d0:99:ff:c4:61:22:e6:14:9b:23:bf:70: d4:20:a9:8e:8e:38:6f:e4:b3:77:d6:b3:29:52:68:27:c1:9f: 22:ed:0a:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaCw8YXKO/gKpVUmwZrwLh8n0lwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTEyMTkyMDAyMTBaFw0yNTEyMjAyMzE1MTBaMDMxMTAvBgNV BAMTKDUxRjNFNDBDRUI0OTEyOTQ5MDMzODM5RjY1ODIwQzQ5OEJEMzA2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/z+zp4QgY0H3HX1wnyibLT5+ HMSOVntZ+VPfCk2I6e9j3mMjLhnGd7Gk/HcPyQsfFAsJoyoegEriL8cFw88jq4kc w1DTcLYGOSg6CebABlrMjbcI+XxNekNdVyGGQ2uUqC8V9IyycLipwZLeS47R+Skw zVhNUA0GZf4El4GgmJh5DeRmBGYqLaXwBbcaYwAs4tAVdZpFoRI91vkoC00O+xA/ JmiP0HgS6x6Y1h6vsvDetEPh8aISKdaqsAyJGLvbO+LkhjaEtOudWDnBpCOzWYga zMJDkbl9DhuSoNYkGlxVs7Y0lWXCsQalFLo4cOg2iFHs561/QU17qfKnnvphAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUfPkDOtJEpSQM4OfZYIMSYvTBlkwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEuw2nyLTLMj2hXzphyZ L+vINnX2+6a3yfuq+F7Lit9wp3GYg5m5LMyMrIlL93H0Ac1+tz4yrGvOdAtMe0q8 YlaariJnYhAUP2WsNElb/R52BE2VowqNQerrBLzVADlj0v4n1YjbDSE0iGkI6uqC oUUxbr24wNy2NdGAwTedIyP3Z6WK36+4LfMVswNBQCjskLXfKllAEr+u4MmHAdW/ Xxl2QzQ2KyCuUFuHeWLKsDnDbWD5Q1X9n4OJdX934dGWvLQskT4zYG2C2iiFkmuK Jh88XX15QCHy/dWJLLiA0Jn/xGEi5hSbI79w1CCpjo44b+Szd9azKVJoJ8GfIu0K IA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:02:05 2025 by rpki-client