This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft File: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft (raw, json) Hash identifier: V+2kIbznk0k3Tp23oRAgX5UfrHR6BK+4DGqsuEmulbM= Subject key identifier: B5:54:36:F8:8D:5D:58:D1:DD:95:6E:75:18:05:65:AB:E3:DC:91:6B Authority key identifier: 40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B Certificate issuer: /CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Certificate serial: 746A01BD964F4DCB19198DA74A2A5F593761DA1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft Manifest number: 66 Signing time: Wed 21 Jan 2026 11:56:41 +0000 Manifest this update: Wed 21 Jan 2026 11:51:41 +0000 Manifest next update: Thu 22 Jan 2026 13:38:41 +0000 Files and hashes: 1: 40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl (hash: LNReG8DvtQobKAZHtYTZM3235L+cguqbmhh1iOL4M58=) 2: AS202939.asa (hash: piv9HPRfqfODpLZuvS6ulSjfQRKT99tRmCEIVNoawzI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6a:01:bd:96:4f:4d:cb:19:19:8d:a7:4a:2a:5f:59:37:61:da:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f02fb7dfe9ac800a1b1b693709c2f03c5ed98b Validity Not Before: Jan 21 11:51:41 2026 GMT Not After : Jan 22 13:38:41 2026 GMT Subject: CN=B55436F88D5D58D1DD956E75180565ABE3DC916B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:85:f8:f9:df:7c:fc:4e:8a:a1:3a:8b:bc: 08:19:fb:ca:51:86:07:51:23:b8:23:45:d8:4c:9f: 1b:a2:b9:d0:1a:fa:3c:99:a9:9f:e4:4e:82:6d:79: 2d:ff:5d:62:a0:75:94:84:be:46:f1:ed:68:02:87: 60:a7:d6:22:e4:f2:27:a1:38:ed:72:9c:1e:17:a0: 03:fc:59:2c:c3:62:df:1c:eb:d5:4d:7d:b5:be:13: d1:c9:09:79:21:83:fc:a1:31:fb:0d:2f:74:f1:49: ee:78:e5:73:4e:9f:36:50:4a:1c:fa:31:0c:f5:84: 89:14:b0:e3:3a:a7:2a:30:f7:11:59:f6:4f:90:63: ad:40:21:e0:7d:13:53:68:15:d4:d9:bc:63:c5:0f: 5c:97:00:c4:b8:94:c7:80:8b:08:fd:0a:fe:33:68: 3e:81:7c:c1:5d:3f:18:f1:b4:57:80:45:e3:d4:1c: 61:a3:6c:97:d5:fe:2f:03:32:cb:87:43:83:31:aa: e3:5c:c2:e9:ab:8c:4d:39:76:95:b0:a9:d5:1b:02: 07:39:d6:55:11:ff:4d:67:e5:59:5e:57:35:ec:00: fd:0a:3a:55:ec:e9:c0:06:a2:2b:ae:ff:b9:3c:a6: 52:ee:47:88:8b:54:05:d1:e5:aa:59:fa:41:9a:bd: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:36:F8:8D:5D:58:D1:DD:95:6E:75:18:05:65:AB:E3:DC:91:6B X509v3 Authority Key Identifier: keyid:40:F0:2F:B7:DF:E9:AC:80:0A:1B:1B:69:37:09:C2:F0:3C:5E:D9:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPAvt9_prIAKGxtpNwnC8Dxe2Ys.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/308f8b3e-051e-4c44-9cb5-7b8331ef9a04/0/40F02FB7DFE9AC800A1B1B693709C2F03C5ED98B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b3:a6:7f:6f:2b:fa:5e:56:8f:33:a0:d9:09:25:1a:fd:ed: 6a:0f:20:61:33:98:03:c1:1b:6e:67:54:fc:67:1a:63:7b:74: 9c:da:58:bb:8b:bb:75:9a:7d:65:2a:69:3f:7a:cb:c9:89:25: fb:cd:c0:ce:7d:c5:ba:63:20:5a:90:4f:47:ab:13:53:e4:f2: 0d:b5:9f:60:8b:65:68:e4:9b:6f:4d:d8:3a:d8:40:0e:19:51: e9:43:4d:da:73:a2:04:8d:17:07:76:be:06:cc:e1:2b:a1:64: 56:dd:7a:58:09:51:18:41:88:13:19:1a:82:89:81:09:71:d8: d0:ba:b1:2f:c0:14:c1:d1:fe:ad:1d:7a:99:75:b4:6c:7d:54: f4:bf:f4:63:05:b4:5b:64:71:f3:2d:aa:38:00:40:46:4f:cf: ff:86:fc:37:0b:55:6b:bf:32:fe:0d:62:b3:ec:41:ef:38:ea: fe:57:58:4b:f0:38:7e:ac:f8:84:6b:29:ae:fe:d2:3f:f7:e7: d8:07:23:4a:fb:cc:1f:25:f5:dc:e0:63:a7:97:21:59:33:c1: da:5d:7c:af:37:e9:e9:c4:4a:f9:cc:bd:c1:94:b2:78:2a:01: b5:d0:c4:8b:b0:eb:0d:a1:7d:51:77:42:b5:f1:cd:59:71:52: f8:2f:48:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdGoBvZZPTcsZGY2nSipfWTdh2howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBmMDJmYjdkZmU5YWM4MDBhMWIxYjY5MzcwOWMyZjAz YzVlZDk4YjAeFw0yNjAxMjExMTUxNDFaFw0yNjAxMjIxMzM4NDFaMDMxMTAvBgNV BAMTKEI1NTQzNkY4OEQ1RDU4RDFERDk1NkU3NTE4MDU2NUFCRTNEQzkxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01oX4+d98/E6KoTqLvAgZ+8pR hgdRI7gjRdhMnxuiudAa+jyZqZ/kToJteS3/XWKgdZSEvkbx7WgCh2Cn1iLk8ieh OO1ynB4XoAP8WSzDYt8c69VNfbW+E9HJCXkhg/yhMfsNL3TxSe545XNOnzZQShz6 MQz1hIkUsOM6pyow9xFZ9k+QY61AIeB9E1NoFdTZvGPFD1yXAMS4lMeAiwj9Cv4z aD6BfMFdPxjxtFeARePUHGGjbJfV/i8DMsuHQ4MxquNcwumrjE05dpWwqdUbAgc5 1lUR/01n5VleVzXsAP0KOlXs6cAGoiuu/7k8plLuR4iLVAXR5apZ+kGavaM5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtVQ2+I1dWNHdlW51GAVlq+PckWswHwYDVR0j BBgwFoAUQPAvt9/prIAKGxtpNwnC8Dxe2YswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzA4ZjhiM2UtMDUxZS00YzQ0LTljYjUtN2I4MzMxZWY5 YTA0LzAvNDBGMDJGQjdERkU5QUM4MDBBMUIxQjY5MzcwOUMyRjAzQzVFRDk4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FQQXZ0OV9wcklBS0d4dHBOd25DOER4 ZTJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDhmOGIzZS0w NTFlLTRjNDQtOWNiNS03YjgzMzFlZjlhMDQvMC80MEYwMkZCN0RGRTlBQzgwMEEx QjFCNjkzNzA5QzJGMDNDNUVEOThCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbOmf28r+l5WjzOg2Qkl Gv3tag8gYTOYA8EbbmdU/GcaY3t0nNpYu4u7dZp9ZSppP3rLyYkl+83Azn3FumMg WpBPR6sTU+TyDbWfYItlaOSbb03YOthADhlR6UNN2nOiBI0XB3a+BszhK6FkVt16 WAlRGEGIExkagomBCXHY0LqxL8AUwdH+rR16mXW0bH1U9L/0YwW0W2Rx8y2qOABA Rk/P/4b8NwtVa78y/g1is+xB7zjq/ldYS/A4fqz4hGsprv7SP/fn2AcjSvvMHyX1 3OBjp5chWTPB2l18rzfp6cRK+cy9wZSyeCoBtdDEi7DrDaF9UXdCtfHNWXFS+C9I Fw== -----END CERTIFICATE-----Generated at Thu Jan 22 04:44:05 2026 by rpki-client