This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json) Hash identifier: aWM2qKs/nQE9si4JitmDRkPW4KegwjTRL5N3W2BVLx0= Subject key identifier: EE:07:49:B4:B3:93:B3:57:F8:B9:C9:20:F1:63:AA:A5:0E:69:CC:4E Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed Certificate serial: 7FEA62EBD25627CD36EBCDBFCDE82D453070CA80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft Manifest number: 61 Signing time: Sun 25 Jan 2026 01:07:47 +0000 Manifest this update: Sun 25 Jan 2026 01:02:47 +0000 Manifest next update: Mon 26 Jan 2026 04:56:47 +0000 Files and hashes: 1: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=) 2: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: B4wl1q1u2+3IGird0cBxRFErwCjV8bMKQXyEzrv96p8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ea:62:eb:d2:56:27:cd:36:eb:cd:bf:cd:e8:2d:45:30:70:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed Validity Not Before: Jan 25 01:02:47 2026 GMT Not After : Jan 26 04:56:47 2026 GMT Subject: CN=EE0749B4B393B357F8B9C920F163AAA50E69CC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:2f:83:d0:c3:f4:6e:25:17:70:20:fc:f5: 61:d9:92:e6:d5:0f:91:fe:51:2b:6c:03:06:71:23: 07:13:11:23:7a:ee:36:f0:6c:d4:9f:11:f2:ec:ac: 1a:5e:fc:65:27:8a:db:7c:41:b4:4b:29:83:0d:fd: 85:17:68:f8:ea:96:4c:6e:08:c6:f1:35:a5:95:68: 23:e3:86:36:b3:1f:54:5a:97:44:3e:db:e7:70:a7: ac:5b:66:2f:36:1c:6f:3f:78:c9:91:71:44:d1:17: 82:a9:3a:40:2e:17:aa:e8:9f:a5:bc:2a:34:e0:cc: 9b:92:7e:e7:a7:eb:1b:17:58:96:79:7e:87:af:8b: 01:5e:8a:89:fe:ba:14:7f:7c:45:de:42:d6:9b:5f: 78:87:67:30:db:ad:95:a5:81:e2:d1:55:13:3f:96: 97:5f:18:7a:40:ef:aa:6c:a1:57:02:8f:11:da:ad: 1a:60:63:05:d6:4e:9f:c9:2b:e7:63:a5:79:7d:d5: 32:69:3e:c8:6b:4a:bb:23:86:d1:6c:b8:e1:e3:69: cc:23:95:60:32:07:6f:cc:aa:90:36:06:10:2b:da: 1e:29:b5:62:40:80:ae:24:27:09:8e:82:95:9a:ea: d6:f1:eb:1b:26:a2:46:6c:b5:75:e1:50:dc:d4:c3: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:07:49:B4:B3:93:B3:57:F8:B9:C9:20:F1:63:AA:A5:0E:69:CC:4E X509v3 Authority Key Identifier: keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:84:0e:06:75:d3:2f:be:ba:ca:ae:77:55:9c:6d:a2:38: 4a:ae:b8:c3:b3:29:fa:bd:01:17:1c:5e:b3:00:70:fc:86:33: 39:39:73:59:06:9d:bf:da:a9:e2:c2:50:d9:47:59:73:3c:4c: ec:b1:66:dd:d6:23:14:63:9f:55:94:eb:d5:61:87:51:96:04: 2a:17:f1:15:d7:ae:d3:5e:49:41:e5:53:61:e4:88:d3:09:03: c4:e1:5c:44:da:98:e9:86:0b:56:5c:70:6d:1e:9b:88:55:84: 9f:2c:81:86:52:19:66:3a:da:cd:18:82:56:a4:dc:79:6d:9e: 44:96:91:36:23:a9:f4:85:ef:c3:a0:31:7f:95:90:4f:7a:c6: 56:1c:87:f9:58:3b:7f:1b:25:ad:ab:2d:35:ed:20:cb:32:e4: 01:76:df:38:11:7d:c6:7f:27:01:75:43:2c:28:ad:35:2c:0f: d9:4f:01:e5:fa:6c:d6:ca:ae:fd:7a:06:d7:83:1e:e4:57:5f: c1:dd:28:13:bd:cf:7d:3d:c9:71:b6:61:9d:b7:40:33:ea:ce: 82:c8:96:83:bc:82:83:36:d6:95:c7:88:7e:7f:cd:ed:6d:3d: 1b:ce:e2:6f:d2:96:1c:0c:6d:a7:7b:7c:27:a4:be:5f:78:0a: a1:40:5b:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf+pi69JWJ802682/zegtRTBwyoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3ZGFmOGRjODk3ZDNmMWM0M2Q4NjZlYTk0NTMwNTMw M2FkNzNlZDAeFw0yNjAxMjUwMTAyNDdaFw0yNjAxMjYwNDU2NDdaMDMxMTAvBgNV BAMTKEVFMDc0OUI0QjM5M0IzNTdGOEI5QzkyMEYxNjNBQUE1MEU2OUNDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS7y+D0MP0biUXcCD89WHZkubV D5H+UStsAwZxIwcTESN67jbwbNSfEfLsrBpe/GUnitt8QbRLKYMN/YUXaPjqlkxu CMbxNaWVaCPjhjazH1Ral0Q+2+dwp6xbZi82HG8/eMmRcUTRF4KpOkAuF6ron6W8 KjTgzJuSfuen6xsXWJZ5foeviwFeion+uhR/fEXeQtabX3iHZzDbrZWlgeLRVRM/ lpdfGHpA76psoVcCjxHarRpgYwXWTp/JK+djpXl91TJpPshrSrsjhtFsuOHjacwj lWAyB2/MqpA2BhAr2h4ptWJAgK4kJwmOgpWa6tbx6xsmokZstXXhUNzUwwR7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7gdJtLOTs1f4uckg8WOqpQ5pzE4wHwYDVR0j BBgwFoAUQH2vjciX0/HEPYZuqUUwUwOtc+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzAvNDA3REFGOERDODk3RDNGMUM0M0Q4NjZFQTk0NTMwNTMwM0FENzNFRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FIMnZqY2lYMF9IRVBZWnVxVVV3VXdP dGMtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMC80MDdEQUY4REM4OTdEM0YxQzQz RDg2NkVBOTQ1MzA1MzAzQUQ3M0VELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU+EDgZ10y++usqud1Wc baI4Sq64w7Mp+r0BFxxeswBw/IYzOTlzWQadv9qp4sJQ2UdZczxM7LFm3dYjFGOf VZTr1WGHUZYEKhfxFdeu015JQeVTYeSI0wkDxOFcRNqY6YYLVlxwbR6biFWEnyyB hlIZZjrazRiCVqTceW2eRJaRNiOp9IXvw6Axf5WQT3rGVhyH+Vg7fxslrastNe0g yzLkAXbfOBF9xn8nAXVDLCitNSwP2U8B5fps1squ/XoG14Me5Fdfwd0oE73PfT3J cbZhnbdAM+rOgsiWg7yCgzbWlceIfn/N7W09G87ib9KWHAxtp3t8J6S+X3gKoUBb /w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:39 2026 by rpki-client