This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft File: 407DAF8DC897D3F1C43D866EA945305303AD73ED.mft (raw, json) Hash identifier: ln0XJnvLCOtjjWaaanJGnib2BHPGrf8Pnw+GDYesmI0= Subject key identifier: 9B:BB:B4:09:CD:9E:79:4D:A9:73:7C:96:3C:7A:B3:AD:3E:B0:B7:A8 Authority key identifier: 40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED Certificate issuer: /CN=407daf8dc897d3f1c43d866ea945305303ad73ed Certificate serial: 127968625D4BAF6D10F2FDB42C9E0B5F64D179FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft Manifest number: 1E Signing time: Sat 06 Dec 2025 03:44:27 +0000 Manifest this update: Sat 06 Dec 2025 03:39:27 +0000 Manifest next update: Sun 07 Dec 2025 07:02:27 +0000 Files and hashes: 1: 407DAF8DC897D3F1C43D866EA945305303AD73ED.crl (hash: mH74d1OMKOHBJA5pUmV8PNPOByrr+dCkhPRJC04obbc=) 2: 323030313a3637383a6531303a3a2f34382d3438203d3e20323038393135.roa (hash: Q+rBjBtdmpkMnJJ1scyQFgFf7p0XTL49lt2rh8zsejE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:79:68:62:5d:4b:af:6d:10:f2:fd:b4:2c:9e:0b:5f:64:d1:79:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407daf8dc897d3f1c43d866ea945305303ad73ed Validity Not Before: Dec 6 03:39:27 2025 GMT Not After : Dec 7 07:02:27 2025 GMT Subject: CN=9BBBB409CD9E794DA9737C963C7AB3AD3EB0B7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:b0:21:37:2e:81:64:8c:85:ee:20:ef:21: 94:03:99:e2:da:4b:6a:2f:3c:63:68:7f:de:23:e2: fd:9f:7e:e3:b4:a5:49:75:b6:d3:94:c8:9b:7b:6a: fe:78:2a:26:2b:1d:31:b2:45:7f:4a:ab:84:eb:fe: 1e:bb:fc:3d:2b:10:ca:64:a5:14:99:40:58:0d:dc: 0a:2a:48:7e:8a:3c:80:a7:eb:bc:68:31:5b:73:8f: cf:bb:4d:e1:bd:2f:9d:9c:8d:53:83:63:2b:2e:70: 85:fb:e7:b1:7f:e4:dc:dc:1c:02:dc:69:d1:1b:b1: 91:6d:7b:ea:ba:0b:d4:a4:5e:c6:b8:21:45:fc:4b: f1:29:0c:f7:0b:4e:4a:65:ab:9a:d5:90:41:1d:61: 7c:ca:1c:69:ca:a2:c6:20:56:32:e9:ae:46:3f:65: 12:bd:b6:8b:5d:6e:4a:4c:2d:cd:da:74:28:a7:e2: a2:8d:0f:ac:8f:0f:d6:df:4a:80:fd:43:3d:04:d6: 1f:3f:37:b5:52:e6:67:f9:82:6d:21:f0:52:64:70: 07:31:51:47:e6:e7:8f:b2:5d:d6:c9:9e:ba:85:37: d0:31:5a:84:d5:ec:6f:3c:be:e1:4b:db:85:6d:b7: e4:ec:ed:ee:4c:36:fb:34:eb:37:69:4c:2e:c3:9f: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:B4:09:CD:9E:79:4D:A9:73:7C:96:3C:7A:B3:AD:3E:B0:B7:A8 X509v3 Authority Key Identifier: keyid:40:7D:AF:8D:C8:97:D3:F1:C4:3D:86:6E:A9:45:30:53:03:AD:73:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH2vjciX0_HEPYZuqUUwUwOtc-0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/0/407DAF8DC897D3F1C43D866EA945305303AD73ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a6:15:52:1d:0e:f5:da:34:8d:cc:5a:e0:8a:d7:de:48:9b: c9:43:56:96:17:ba:a4:4e:b0:d7:7f:c8:5c:d9:13:ab:c8:9a: ce:2f:27:82:81:56:b6:9e:37:51:35:82:e6:21:82:e5:dc:37: 34:eb:61:c9:d5:e6:36:1b:e4:ce:cc:9c:5c:9c:5e:f0:47:ba: 64:96:5f:c4:49:95:fc:51:b0:29:f0:51:ca:57:b2:25:14:ba: 43:2e:d0:7a:3e:75:cb:ea:b6:81:0b:56:e3:41:02:2c:aa:7c: 29:c9:4a:bf:c7:d5:95:5f:7b:7f:7c:6d:05:8e:01:21:1f:23: 54:af:10:91:a7:36:4a:ee:e6:6e:18:99:24:5c:19:31:44:a5: 43:04:21:78:bc:27:63:ac:3c:1c:cd:fe:07:20:bc:f7:7d:e4: 91:71:88:62:fd:2e:96:c0:ca:b7:33:ff:2c:6b:e9:58:90:b3: d0:2b:28:1d:f1:10:30:06:be:53:40:fb:bf:96:8a:a5:14:e2: 1d:19:f3:62:0f:26:e2:3f:00:da:ff:e0:c9:01:29:f3:10:77: cc:be:45:35:e1:61:cb:bc:a9:c4:ca:9c:e6:0c:33:85:d2:11: e3:2e:ab:c3:fb:5c:37:f9:4a:60:a2:20:7f:ba:51:6e:fb:38: 18:25:48:39 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEnloYl1Lr20Q8v20LJ4LX2TRef4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3ZGFmOGRjODk3ZDNmMWM0M2Q4NjZlYTk0NTMwNTMw M2FkNzNlZDAeFw0yNTEyMDYwMzM5MjdaFw0yNTEyMDcwNzAyMjdaMDMxMTAvBgNV BAMTKDlCQkJCNDA5Q0Q5RTc5NERBOTczN0M5NjNDN0FCM0FEM0VCMEI3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqrAhNy6BZIyF7iDvIZQDmeLa S2ovPGNof94j4v2ffuO0pUl1ttOUyJt7av54KiYrHTGyRX9Kq4Tr/h67/D0rEMpk pRSZQFgN3AoqSH6KPICn67xoMVtzj8+7TeG9L52cjVODYysucIX757F/5NzcHALc adEbsZFte+q6C9SkXsa4IUX8S/EpDPcLTkplq5rVkEEdYXzKHGnKosYgVjLprkY/ ZRK9totdbkpMLc3adCin4qKND6yPD9bfSoD9Qz0E1h8/N7VS5mf5gm0h8FJkcAcx UUfm54+yXdbJnrqFN9AxWoTV7G88vuFL24Vtt+Ts7e5MNvs06zdpTC7Dn4T9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUm7u0Cc2eeU2pc3yWPHqzrT6wt6gwHwYDVR0j BBgwFoAUQH2vjciX0/HEPYZuqUUwUwOtc+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzAvNDA3REFGOERDODk3RDNGMUM0M0Q4NjZFQTk0NTMwNTMwM0FENzNFRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FIMnZqY2lYMF9IRVBZWnVxVVV3VXdP dGMtMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMC80MDdEQUY4REM4OTdEM0YxQzQz RDg2NkVBOTQ1MzA1MzAzQUQ3M0VELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaYVUh0O9do0jcxa4IrX 3kibyUNWlhe6pE6w13/IXNkTq8iazi8ngoFWtp43UTWC5iGC5dw3NOthydXmNhvk zsycXJxe8Ee6ZJZfxEmV/FGwKfBRyleyJRS6Qy7Qej51y+q2gQtW40ECLKp8KclK v8fVlV97f3xtBY4BIR8jVK8Qkac2Su7mbhiZJFwZMUSlQwQheLwnY6w8HM3+ByC8 933kkXGIYv0ulsDKtzP/LGvpWJCz0CsoHfEQMAa+U0D7v5aKpRTiHRnzYg8m4j8A 2v/gyQEp8xB3zL5FNeFhy7ypxMqc5gwzhdIR4y6rw/tcN/lKYKIgf7pRbvs4GCVI OQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:46 2025 by rpki-client