This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json) Hash identifier: oOKGp7mK7AJFXPyV6zXbSM51bDV4SpBXwdqHI/0vVog= Subject key identifier: 54:76:6A:E7:84:16:0E:BC:10:00:75:18:8E:E8:B6:E0:D6:A6:FD:50 Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Certificate serial: 4E9E747E9B04A731B9DC4CE07F19297C06B6CA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft Manifest number: 24 Signing time: Fri 05 Dec 2025 17:41:41 +0000 Manifest this update: Fri 05 Dec 2025 17:36:41 +0000 Manifest next update: Sat 06 Dec 2025 19:43:41 +0000 Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: vQSlT3pFPkUBwJRpjaX7+0xt8QgLBR9NXeWIYw+3zNk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9e:74:7e:9b:04:a7:31:b9:dc:4c:e0:7f:19:29:7c:06:b6:ca:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Validity Not Before: Dec 5 17:36:41 2025 GMT Not After : Dec 6 19:43:41 2025 GMT Subject: CN=54766AE784160EBC100075188EE8B6E0D6A6FD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:33:5a:91:7f:36:d0:89:97:65:0b:ae:f7: 71:55:15:80:1d:b9:f3:2f:36:93:82:b6:90:d6:ff: d8:3d:0d:6f:3a:5d:d2:3b:bd:83:20:66:1a:37:12: 18:a5:45:2d:c1:a9:17:e9:94:6c:e3:01:c8:f9:1d: 9d:69:eb:65:77:d6:0f:5e:64:e8:f0:6f:86:9d:be: fb:87:c0:48:61:c3:ca:b5:e7:79:99:28:7e:31:92: 2b:52:52:57:a6:da:02:67:e0:ad:bc:92:73:21:4b: 20:9e:64:4a:a7:25:57:cb:f0:d9:a5:a6:c9:11:31: af:82:0c:c6:7a:d7:7a:bf:81:89:42:4e:f8:55:b5: f9:88:2e:6c:46:15:bf:48:a6:bd:6e:4f:56:fc:65: 48:dc:03:4a:fe:37:97:d9:45:e9:cf:ec:0d:72:e5: a2:c3:f2:7f:06:cd:79:9e:80:c9:ae:fa:b2:72:2d: 2c:ce:db:dc:0f:33:8f:db:62:91:11:60:99:f9:09: 3f:eb:71:4a:98:6e:04:50:f9:fc:52:1c:30:1e:27: ff:2a:58:77:1e:eb:e2:fe:94:1d:24:81:f1:5f:ea: ca:45:9b:a8:2b:75:6f:72:18:45:4f:30:ba:c9:fe: be:41:e5:3e:94:6b:b3:e2:aa:f2:ca:02:7d:c3:b6: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:76:6A:E7:84:16:0E:BC:10:00:75:18:8E:E8:B6:E0:D6:A6:FD:50 X509v3 Authority Key Identifier: keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ff:4c:08:30:87:31:e6:0a:3a:f8:e3:aa:95:d7:2c:fb:6e: 28:f9:94:9c:60:5e:40:a9:b1:6f:0c:3e:72:84:d0:34:56:05: 1e:64:55:45:8d:e7:72:8f:0d:5a:73:8d:bc:62:d6:8c:e3:28: 3a:87:a1:a8:43:67:c9:6f:0f:81:df:42:94:7b:8f:22:b2:2f: 32:45:dc:0c:53:53:9a:2b:14:07:8c:61:77:c8:26:2b:d1:43: 7d:0c:c5:0c:30:43:bc:5e:e5:03:94:26:b8:69:0b:8a:a3:33: 65:e1:74:99:fb:65:b4:75:3a:86:c7:64:ac:e6:d3:90:fd:11: f2:c0:d4:68:6e:8d:b8:93:e8:29:58:9a:f7:a9:f7:5c:d9:de: e4:a7:98:31:73:95:b0:ee:7f:54:ea:66:61:bd:a6:a8:52:63: 06:67:b9:4c:e4:a9:3f:8b:da:7d:d6:22:05:23:82:75:bf:b2: 3a:02:1c:ee:26:65:7c:d6:80:07:08:ae:fa:71:d6:14:f7:21: fc:2a:9b:0a:18:ab:fe:81:8d:9b:c1:99:f5:27:2e:81:85:30: c9:dd:83:13:23:19:70:1e:9c:4b:74:4c:f5:06:04:d9:9d:31: 79:47:ec:71:cf:87:37:fe:72:30:d5:54:9f:4b:5d:f0:65:ab: 97:fc:07:45 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTp50fpsEpzG53EzgfxkpfAa2yiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBmMDJmYjdkZmU5YWM4MDBhMWIxYjY5MzcwOWMyZjAz YzVlZDk4YjAeFw0yNTEyMDUxNzM2NDFaFw0yNTEyMDYxOTQzNDFaMDMxMTAvBgNV BAMTKDU0NzY2QUU3ODQxNjBFQkMxMDAwNzUxODhFRThCNkUwRDZBNkZENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtTNakX820ImXZQuu93FVFYAd ufMvNpOCtpDW/9g9DW86XdI7vYMgZho3EhilRS3BqRfplGzjAcj5HZ1p62V31g9e ZOjwb4advvuHwEhhw8q153mZKH4xkitSUlem2gJn4K28knMhSyCeZEqnJVfL8Nml pskRMa+CDMZ613q/gYlCTvhVtfmILmxGFb9Ipr1uT1b8ZUjcA0r+N5fZRenP7A1y 5aLD8n8GzXmegMmu+rJyLSzO29wPM4/bYpERYJn5CT/rcUqYbgRQ+fxSHDAeJ/8q WHce6+L+lB0kgfFf6spFm6grdW9yGEVPMLrJ/r5B5T6Ua7PiqvLKAn3DtglpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVHZq54QWDrwQAHUYjui24Nam/VAwHwYDVR0j BBgwFoAUQPAvt9/prIAKGxtpNwnC8Dxe2YswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzAvNDBGMDJGQjdERkU5QUM4MDBBMUIxQjY5MzcwOUMyRjAzQzVFRDk4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FQQXZ0OV9wcklBS0d4dHBOd25DOER4 ZTJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDhmOGIzZS0w NTFlLTRjNDQtOWNiNS03YjgzMzFlZjlhMDQvMC80MEYwMkZCN0RGRTlBQzgwMEEx QjFCNjkzNzA5QzJGMDNDNUVEOThCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf9MCDCHMeYKOvjjqpXX LPtuKPmUnGBeQKmxbww+coTQNFYFHmRVRY3nco8NWnONvGLWjOMoOoehqENnyW8P gd9ClHuPIrIvMkXcDFNTmisUB4xhd8gmK9FDfQzFDDBDvF7lA5QmuGkLiqMzZeF0 mftltHU6hsdkrObTkP0R8sDUaG6NuJPoKVia96n3XNne5KeYMXOVsO5/VOpmYb2m qFJjBme5TOSpP4vafdYiBSOCdb+yOgIc7iZlfNaABwiu+nHWFPch/CqbChir/oGN m8GZ9ScugYUwyd2DEyMZcB6cS3RM9QYE2Z0xeUfscc+HN/5yMNVUn0td8GWrl/wH RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:31 2025 by rpki-client