This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json) Hash identifier: aj+hrukeNDTsTzdIQCbrFNnL/l0mFZzVEnyIQCVNntY= Subject key identifier: A8:A6:B2:BA:CD:B0:1C:97:6C:7F:B3:35:1F:35:54:FE:FC:86:DF:FD Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Certificate serial: 38B4DA0054A7E717A9B50DA78736A87F2132A943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft Manifest number: 34 Signing time: Tue 16 Dec 2025 05:46:41 +0000 Manifest this update: Tue 16 Dec 2025 05:41:41 +0000 Manifest next update: Wed 17 Dec 2025 08:13:41 +0000 Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: BjUZXuipOBg1IbQBC5pQzGLNi9EDFwsih8OVfKEuhMc=) 2: AS202939.asa (hash: FvC+uVfcvzmqWGVss4EmlGumfYisXasIIp+ZDydRm3A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b4:da:00:54:a7:e7:17:a9:b5:0d:a7:87:36:a8:7f:21:32:a9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Validity Not Before: Dec 16 05:41:41 2025 GMT Not After : Dec 17 08:13:41 2025 GMT Subject: CN=A8A6B2BACDB01C976C7FB3351F3554FEFC86DFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:f3:be:3b:bb:48:5f:6f:97:3d:46:a3:06: b9:bc:32:39:e1:17:28:d6:cc:a4:ab:66:3f:09:64: 10:93:ee:eb:f5:25:90:e0:28:df:25:05:49:8b:ea: 43:c3:62:25:d5:58:e7:01:52:94:2c:26:8b:9a:b7: eb:42:18:21:bd:8c:cc:fc:d5:99:4d:29:23:31:f0: dd:3c:e6:22:4f:32:70:cc:4e:a0:b0:61:a2:22:e1: 3d:b7:14:a4:eb:16:32:49:d2:a5:7a:d5:4f:37:84: 09:1a:d9:7e:fa:e9:9c:a3:00:98:6a:c9:c4:77:a6: fd:52:f2:7f:56:f6:a5:be:b7:d9:57:ab:e8:23:9e: 7e:e5:9d:ef:45:b5:4f:a0:a8:03:b2:c4:44:66:cc: 91:45:24:ef:c9:fa:31:4a:44:2f:c5:95:b2:48:27: 66:b1:7a:a9:fe:d5:88:95:bd:76:da:13:13:d4:bb: 54:3f:a3:25:d1:96:a5:9d:ec:7f:0a:74:28:bf:1c: ec:da:45:2c:43:c0:8d:33:7e:50:26:07:38:2d:c9: bd:81:68:d3:2c:7d:69:4a:c7:18:04:3a:71:f3:6d: c0:04:ec:e2:bb:d7:5c:2b:03:d4:76:d0:a1:dd:69: cd:99:07:c1:ea:bd:ac:50:9d:ec:43:c2:af:9c:0c: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A6:B2:BA:CD:B0:1C:97:6C:7F:B3:35:1F:35:54:FE:FC:86:DF:FD X509v3 Authority Key Identifier: keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a3:34:00:d8:ef:51:57:bc:5c:16:eb:ad:2c:cb:4a:9f:d4: a3:50:2a:ec:e5:38:de:79:9a:ad:20:b9:b6:98:06:e6:1b:4e: cc:fc:5f:76:23:0b:57:aa:e7:df:a5:18:8c:0c:e4:5e:ef:40: 27:c0:6f:20:83:6d:b8:97:09:58:2e:a0:c8:6f:9f:5d:6c:77: 3a:c2:24:69:6c:1e:26:0f:93:17:0c:16:30:7c:2b:9f:db:e7: 42:d1:39:08:cc:32:f5:04:c1:da:ff:33:25:7f:b1:87:69:06: 66:87:91:c5:e5:8a:94:b9:27:43:54:ba:6e:80:16:47:08:97: 44:1f:34:c8:f1:4a:f3:99:f6:b6:33:55:0a:e2:38:c5:f4:e2: ef:fc:d6:c8:06:17:e3:ce:af:3c:b9:f3:5b:7d:1b:7a:f4:e6: ac:e1:2f:d2:9a:73:f6:f5:7e:2b:20:25:a7:95:f2:7b:94:a7: d0:54:d7:bd:ff:28:ea:2b:c5:95:c3:30:8a:7d:65:34:16:74: d0:db:c7:63:58:0c:5f:53:4b:0c:92:93:5b:f1:23:34:c2:a2: 35:69:0c:11:53:7f:2f:96:37:d9:5a:94:26:0c:a1:21:15:7a: 22:8f:cc:d5:31:35:39:28:11:80:31:38:f0:66:58:4c:b9:64: a0:90:27:6b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOLTaAFSn5xeptQ2nhzaofyEyqUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBmMDJmYjdkZmU5YWM4MDBhMWIxYjY5MzcwOWMyZjAz YzVlZDk4YjAeFw0yNTEyMTYwNTQxNDFaFw0yNTEyMTcwODEzNDFaMDMxMTAvBgNV BAMTKEE4QTZCMkJBQ0RCMDFDOTc2QzdGQjMzNTFGMzU1NEZFRkM4NkRGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1/O+O7tIX2+XPUajBrm8Mjnh FyjWzKSrZj8JZBCT7uv1JZDgKN8lBUmL6kPDYiXVWOcBUpQsJouat+tCGCG9jMz8 1ZlNKSMx8N085iJPMnDMTqCwYaIi4T23FKTrFjJJ0qV61U83hAka2X766ZyjAJhq ycR3pv1S8n9W9qW+t9lXq+gjnn7lne9FtU+gqAOyxERmzJFFJO/J+jFKRC/FlbJI J2axeqn+1YiVvXbaExPUu1Q/oyXRlqWd7H8KdCi/HOzaRSxDwI0zflAmBzgtyb2B aNMsfWlKxxgEOnHzbcAE7OK711wrA9R20KHdac2ZB8HqvaxQnexDwq+cDB21AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqKayus2wHJdsf7M1HzVU/vyG3/0wHwYDVR0j BBgwFoAUQPAvt9/prIAKGxtpNwnC8Dxe2YswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzAvNDBGMDJGQjdERkU5QUM4MDBBMUIxQjY5MzcwOUMyRjAzQzVFRDk4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FQQXZ0OV9wcklBS0d4dHBOd25DOER4 ZTJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDhmOGIzZS0w NTFlLTRjNDQtOWNiNS03YjgzMzFlZjlhMDQvMC80MEYwMkZCN0RGRTlBQzgwMEEx QjFCNjkzNzA5QzJGMDNDNUVEOThCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaM0ANjvUVe8XBbrrSzL Sp/Uo1Aq7OU43nmarSC5tpgG5htOzPxfdiMLV6rn36UYjAzkXu9AJ8BvIINtuJcJ WC6gyG+fXWx3OsIkaWweJg+TFwwWMHwrn9vnQtE5CMwy9QTB2v8zJX+xh2kGZoeR xeWKlLknQ1S6boAWRwiXRB80yPFK85n2tjNVCuI4xfTi7/zWyAYX486vPLnzW30b evTmrOEv0ppz9vV+KyAlp5Xye5Sn0FTXvf8o6ivFlcMwin1lNBZ00NvHY1gMX1NL DJKTW/EjNMKiNWkMEVN/L5Y32VqUJgyhIRV6Io/M1TE1OSgRgDE48GZYTLlkoJAn aw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:36:21 2025 by rpki-client