This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: QgbIn6uO+kDH2FUs0XqooD5oVjmvU5sH9r9KnwjTo78= Subject key identifier: D0:80:11:DD:DE:85:93:32:C4:4C:E3:FB:40:81:E9:69:08:3C:E8:82 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 72A7F016F19542325DEECEEB1FE2D60A90A80780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 05BB Signing time: Sat 20 Dec 2025 15:53:21 +0000 Manifest this update: Sat 20 Dec 2025 15:48:21 +0000 Manifest next update: Sun 21 Dec 2025 19:27:21 +0000 Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) 3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: ikOBKoWfXEGrgT8MGixLvJhRQ0gTbmybcaS5dSfJ/TM=) 4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a7:f0:16:f1:95:42:32:5d:ee:ce:eb:1f:e2:d6:0a:90:a8:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Dec 20 15:48:21 2025 GMT Not After : Dec 21 19:27:21 2025 GMT Subject: CN=D08011DDDE859332C44CE3FB4081E969083CE882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:8c:fa:b7:10:b2:21:fb:84:0c:9d:29:de: 64:f8:c2:3c:6c:2a:2d:0c:8c:9e:0f:72:d6:be:94: 43:6d:89:ce:ce:b6:b1:04:8e:5a:c6:13:32:05:b5: 9b:5d:5d:0a:48:96:e4:29:e6:2d:bc:a0:ad:1c:5f: 36:aa:21:38:81:a5:37:16:bb:1e:2a:26:c1:1f:dc: 8f:c2:01:c5:81:f5:18:42:09:03:c9:ad:a8:fa:77: 04:53:fc:51:d7:8e:1c:9f:a1:fb:a6:6c:0b:52:c7: 3d:3f:52:b0:21:f5:52:00:21:4d:d8:35:90:e3:61: af:aa:29:9d:6c:52:cc:48:34:28:a9:41:7e:7c:ea: ae:45:7c:2f:00:c9:2d:2e:d0:9b:02:22:d7:a3:4c: f0:d3:01:a6:06:cf:3b:e0:cf:5e:e7:7e:d6:a0:45: d2:a2:27:25:e6:37:c7:59:99:08:24:5f:1d:4d:0f: 19:4d:5e:fe:48:90:6f:b8:6c:c7:a0:67:71:4e:25: c9:be:7d:a9:ed:23:d7:dd:7f:f8:01:7b:ae:4f:32: a5:3f:22:f5:73:7e:5c:6e:69:28:f2:57:36:a9:05: c4:23:02:d3:11:4b:3f:3c:e7:9e:42:ce:28:34:69: 89:0b:b1:92:a9:d5:d0:da:2c:9b:48:68:3e:2d:d6: 65:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:80:11:DD:DE:85:93:32:C4:4C:E3:FB:40:81:E9:69:08:3C:E8:82 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1c:3e:7d:17:1d:17:1a:e3:d2:5d:61:b6:40:66:b4:0d:2f: 21:3e:b5:1d:f7:ed:52:8f:81:60:12:fb:63:1e:c5:c8:54:b0: b9:14:68:d8:b3:7e:83:6e:fa:d7:4e:7e:73:f3:c3:5b:4d:f0: b7:4e:37:ca:86:ef:6f:cd:37:09:26:15:0d:e2:e4:39:ad:cb: 20:70:44:00:d7:f5:23:54:4d:ba:ef:b9:dc:11:fc:3d:69:dd: d0:d4:08:c4:3a:45:18:03:d4:c5:3b:39:2a:33:ab:de:d9:7d: ff:28:8e:c7:5c:cd:96:e7:75:a4:11:70:d6:80:e0:90:ff:6d: 76:96:e0:bd:0d:b4:cf:8c:0b:dd:82:12:c9:17:02:85:57:94: cb:86:70:0e:95:d6:c4:f0:b7:57:1b:e6:86:91:5c:5f:ac:58: 13:fb:c5:aa:94:b9:07:6f:69:c7:60:c0:8d:d6:62:54:3c:46: b4:c0:40:4d:81:6e:11:3f:ab:a6:d2:c5:3a:7d:e5:cc:56:5c: 72:fb:e6:f6:7d:db:56:0f:68:fa:d0:0d:85:34:b3:63:59:e6: 6b:4c:3c:8f:b3:99:55:30:25:b8:49:f4:56:b9:0e:64:c3:9b: ad:62:71:e6:8c:34:3c:4c:be:d1:87:c3:c4:c9:cf:bf:92:23: 3e:07:46:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcqfwFvGVQjJd7s7rH+LWCpCoB4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTEyMjAxNTQ4MjFaFw0yNTEyMjExOTI3MjFaMDMxMTAvBgNV BAMTKEQwODAxMUREREU4NTkzMzJDNDRDRTNGQjQwODFFOTY5MDgzQ0U4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsYz6txCyIfuEDJ0p3mT4wjxs Ki0MjJ4Pcta+lENtic7OtrEEjlrGEzIFtZtdXQpIluQp5i28oK0cXzaqITiBpTcW ux4qJsEf3I/CAcWB9RhCCQPJraj6dwRT/FHXjhyfofumbAtSxz0/UrAh9VIAIU3Y NZDjYa+qKZ1sUsxINCipQX586q5FfC8AyS0u0JsCItejTPDTAaYGzzvgz17nftag RdKiJyXmN8dZmQgkXx1NDxlNXv5IkG+4bMegZ3FOJcm+fantI9fdf/gBe65PMqU/ IvVzflxuaSjyVzapBcQjAtMRSz88555Czig0aYkLsZKp1dDaLJtIaD4t1mWdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0IAR3d6FkzLETOP7QIHpaQg86IIwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBw+fRcdFxrj0l1htkBm tA0vIT61HfftUo+BYBL7Yx7FyFSwuRRo2LN+g276105+c/PDW03wt043yobvb803 CSYVDeLkOa3LIHBEANf1I1RNuu+53BH8PWnd0NQIxDpFGAPUxTs5KjOr3tl9/yiO x1zNlud1pBFw1oDgkP9tdpbgvQ20z4wL3YISyRcChVeUy4ZwDpXWxPC3VxvmhpFc X6xYE/vFqpS5B29px2DAjdZiVDxGtMBATYFuET+rptLFOn3lzFZccvvm9n3bVg9o +tANhTSzY1nma0w8j7OZVTAluEn0VrkOZMObrWJx5ow0PEy+0YfDxMnPv5IjPgdG cQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:20 2025 by rpki-client