This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json) Hash identifier: yYL4JbrF/bsNnJUVvhlqFwqtRDO/+k/w5n1oydkq2BM= Subject key identifier: B3:27:0A:20:89:CB:63:22:A4:79:DC:BC:D3:CC:1D:93:0D:D4:1C:BB Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Certificate serial: 504EE772BF6C4360FE7A328D303CDAC30F0CBBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft Manifest number: 6B Signing time: Sun 25 Jan 2026 06:41:41 +0000 Manifest this update: Sun 25 Jan 2026 06:36:41 +0000 Manifest next update: Mon 26 Jan 2026 10:40:41 +0000 Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: fRIm9bOrhl1tYuLDXVAMhvxJ7164ftcJiXnHgz8p1o4=) 2: AS202939.asa (hash: piv9HPRfqfODpLZuvS6ulSjfQRKT99tRmCEIVNoawzI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4e:e7:72:bf:6c:43:60:fe:7a:32:8d:30:3c:da:c3:0f:0c:bb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Validity Not Before: Jan 25 06:36:41 2026 GMT Not After : Jan 26 10:40:41 2026 GMT Subject: CN=B3270A2089CB6322A479DCBCD3CC1D930DD41CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:e8:63:00:8a:17:08:13:d2:8d:09:a3:f6: 82:10:b8:41:75:19:5f:e5:87:76:53:43:f0:a1:41: 5d:85:0d:0d:8b:56:1e:ed:4d:15:f6:17:f0:6a:07: 71:24:62:c1:ad:55:59:9f:c7:64:8a:62:5b:3d:a9: 57:23:a4:d9:d2:b3:ce:52:4e:86:bb:be:91:de:d3: f7:0a:88:ea:1b:f4:93:c1:af:20:93:72:7a:3f:d3: 94:fc:96:5a:5f:d1:fd:4a:d6:1d:ce:b9:9e:7a:1a: 3d:4c:07:2a:46:c8:07:b5:95:64:d3:87:61:44:37: a8:a0:89:b1:7d:e8:ba:ff:1f:d0:69:2b:17:0f:64: f5:a5:be:66:2c:33:a0:2a:7c:08:40:b5:5e:c5:3b: 55:1d:c5:e9:24:e8:db:7e:f5:2d:f1:0a:cc:05:44: fa:5f:b5:0b:08:44:ad:f8:68:27:70:c4:ed:37:a6: 29:b8:ca:69:b6:e8:66:2a:5b:50:a4:c1:67:fb:4a: 38:cd:a8:c8:11:f1:43:b4:d4:ac:59:62:81:62:d5: 10:cc:26:78:ee:bf:8b:00:84:7c:3c:d5:75:ad:ea: 17:6f:ce:2a:be:e9:60:e2:82:f8:75:53:95:e1:0c: 3b:33:13:76:2f:4c:aa:cc:2a:3f:6a:a3:92:f3:04: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:27:0A:20:89:CB:63:22:A4:79:DC:BC:D3:CC:1D:93:0D:D4:1C:BB X509v3 Authority Key Identifier: keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0e:23:a1:d7:86:2e:7b:83:5a:a4:65:93:2e:0f:b7:ed:0d: c7:e9:01:17:37:89:08:56:58:1a:a0:89:52:0d:a6:0e:f7:f1: d4:85:dd:77:17:aa:22:2d:e2:e4:d1:74:8a:7d:4a:c4:ca:1f: 19:87:62:2a:fa:e2:a8:51:ec:92:9b:66:6e:a4:2d:e4:14:17: a6:20:1c:06:ac:8a:d6:59:fe:a5:a8:ce:32:e9:c2:85:c3:04: d7:0d:db:c2:7f:3d:f9:ee:b7:a3:1b:d6:a3:ab:2a:be:d2:e6: 12:3c:7e:a1:4b:6a:13:1d:32:e1:45:5e:f1:b8:16:2c:ce:c4: fc:81:af:01:3c:41:71:7f:19:07:56:17:33:68:bf:e1:39:26: 02:08:d4:a8:51:16:a2:56:25:cc:42:16:57:99:75:34:ae:6e: c3:f9:d0:c6:ca:5b:42:f0:dd:f6:d2:66:93:6c:dc:e1:8e:e3: 91:26:6b:1e:a6:b4:05:ec:81:87:d5:ee:55:a9:12:55:87:e3: c4:1f:24:bf:a0:29:12:a4:b6:38:98:e2:46:4b:71:d3:84:26: 1e:35:57:49:6e:d1:b8:02:c0:ff:05:7c:54:ce:f9:c7:4c:1c: 51:2a:6a:52:79:a5:1a:18:88:26:1f:44:8c:24:3f:bf:04:40: f7:7a:21:e1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUE7ncr9sQ2D+ejKNMDzaww8Mu/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBmMDJmYjdkZmU5YWM4MDBhMWIxYjY5MzcwOWMyZjAz YzVlZDk4YjAeFw0yNjAxMjUwNjM2NDFaFw0yNjAxMjYxMDQwNDFaMDMxMTAvBgNV BAMTKEIzMjcwQTIwODlDQjYzMjJBNDc5RENCQ0QzQ0MxRDkzMERENDFDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbD+hjAIoXCBPSjQmj9oIQuEF1 GV/lh3ZTQ/ChQV2FDQ2LVh7tTRX2F/BqB3EkYsGtVVmfx2SKYls9qVcjpNnSs85S Toa7vpHe0/cKiOob9JPBryCTcno/05T8llpf0f1K1h3OuZ56Gj1MBypGyAe1lWTT h2FEN6igibF96Lr/H9BpKxcPZPWlvmYsM6AqfAhAtV7FO1Udxekk6Nt+9S3xCswF RPpftQsIRK34aCdwxO03pim4ymm26GYqW1CkwWf7SjjNqMgR8UO01KxZYoFi1RDM Jnjuv4sAhHw81XWt6hdvziq+6WDigvh1U5XhDDszE3YvTKrMKj9qo5LzBLRTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsycKIInLYyKkedy808wdkw3UHLswHwYDVR0j BBgwFoAUQPAvt9/prIAKGxtpNwnC8Dxe2YswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzAvNDBGMDJGQjdERkU5QUM4MDBBMUIxQjY5MzcwOUMyRjAzQzVFRDk4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FQQXZ0OV9wcklBS0d4dHBOd25DOER4 ZTJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDhmOGIzZS0w NTFlLTRjNDQtOWNiNS03YjgzMzFlZjlhMDQvMC80MEYwMkZCN0RGRTlBQzgwMEEx QjFCNjkzNzA5QzJGMDNDNUVEOThCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ4jodeGLnuDWqRlky4P t+0Nx+kBFzeJCFZYGqCJUg2mDvfx1IXddxeqIi3i5NF0in1KxMofGYdiKvriqFHs kptmbqQt5BQXpiAcBqyK1ln+pajOMunChcME1w3bwn89+e63oxvWo6sqvtLmEjx+ oUtqEx0y4UVe8bgWLM7E/IGvATxBcX8ZB1YXM2i/4TkmAgjUqFEWolYlzEIWV5l1 NK5uw/nQxspbQvDd9tJmk2zc4Y7jkSZrHqa0BeyBh9XuVakSVYfjxB8kv6ApEqS2 OJjiRktx04QmHjVXSW7RuALA/wV8VM75x0wcUSpqUnmlGhiIJh9EjCQ/vwRA93oh 4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:43 2026 by rpki-client