This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: A97JiI3FY5+4ul3dsBVOSzeV97Fg/LgpprqjgkwoslU= Subject key identifier: DD:8C:BB:81:A0:94:16:ED:C1:8C:F1:02:6B:E7:90:0D:22:1C:49:65 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 1C3F14B0FC4BE3CF22F8BBF912C4EA8947C03FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 05A8 Signing time: Sat 06 Dec 2025 12:35:38 +0000 Manifest this update: Sat 06 Dec 2025 12:30:38 +0000 Manifest next update: Sun 07 Dec 2025 12:49:38 +0000 Files and hashes: 1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) 2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: 7P20RPFbtqQi6HZuk3hQ3CPnhHIV/hx9fgB+0iLMwcs=) 3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 4: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3f:14:b0:fc:4b:e3:cf:22:f8:bb:f9:12:c4:ea:89:47:c0:3f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Dec 6 12:30:38 2025 GMT Not After : Dec 7 12:49:38 2025 GMT Subject: CN=DD8CBB81A09416EDC18CF1026BE7900D221C4965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:50:b1:d1:5a:a4:ee:89:81:d7:29:37:f9: 7d:c9:6a:db:a2:8b:57:a4:cb:d6:01:07:f2:e0:ab: 9d:b4:46:83:d5:a1:f2:37:3b:5c:3d:9f:76:38:7d: a4:ae:48:32:3a:3e:89:96:62:19:ca:f0:49:58:0c: 5a:39:49:43:cd:af:19:eb:02:47:81:c2:d1:7f:76: fe:cf:a3:a2:a5:fe:1e:26:c4:b2:f3:14:63:c1:12: 81:5c:d8:f5:66:e1:ab:22:15:8f:6c:b2:0e:b0:31: 13:e3:3b:72:7c:c6:26:a8:31:e2:26:07:0b:88:26: e7:e3:60:74:2a:cf:79:66:a9:9f:f4:7f:8f:07:0c: ef:cd:93:f5:b5:2d:cb:cd:be:e5:21:e9:27:21:ac: 28:fb:02:1c:d8:41:9d:73:1d:2f:c0:4a:c6:c7:39: 2d:37:cc:1a:f2:a7:2e:ca:e7:f3:8c:ef:e2:5a:12: 03:37:c4:53:d2:65:97:c1:74:44:52:3d:83:2c:c0: 02:56:a3:86:b8:1c:4c:f1:48:ef:c3:77:0a:80:73: 39:ea:2a:96:21:3a:cf:f1:5d:04:dd:c4:e2:89:5c: 83:89:36:65:aa:45:17:50:9d:5e:0e:96:e6:84:ad: f7:2e:3f:7c:8d:03:8f:60:4a:3a:d3:7b:6d:2b:ed: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8C:BB:81:A0:94:16:ED:C1:8C:F1:02:6B:E7:90:0D:22:1C:49:65 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9f:3c:7b:73:54:d3:e9:6c:28:e3:ec:09:75:5d:94:78:33: 8d:1a:8c:57:12:8b:b7:b4:35:81:6a:7f:c5:2d:a9:82:a3:52: fc:c0:bb:a9:8e:1d:b7:a0:10:79:04:ea:fe:12:7b:8a:d6:71: 18:6d:8f:91:97:62:7b:d9:c7:ed:0e:a5:53:31:ee:83:e8:b9: bf:9f:c9:36:51:89:87:ad:ab:35:34:9a:86:79:f7:17:85:b0: ec:31:9d:47:92:63:bf:2b:b2:c9:bc:07:83:dc:40:26:a0:cf: ab:dc:9b:98:5c:33:15:5c:ce:72:80:6c:3d:de:02:20:b6:f3: ca:91:88:0b:21:b7:7d:8e:5b:cf:79:4d:56:56:99:c1:96:e4: 2e:a6:57:58:38:84:99:57:54:a6:d2:22:ff:e9:7c:8b:07:b8: ee:a8:cd:2f:4e:40:a0:04:60:91:6e:d8:5f:d0:ba:4f:41:a1: c2:31:15:bf:5e:65:2d:38:2d:81:30:5f:80:35:13:c5:a1:7c: 7f:47:aa:c9:b1:1e:b6:26:c3:6d:0d:e7:b7:5e:5d:00:ea:8c: 12:a3:51:32:a0:2c:87:dd:01:fa:b8:de:41:49:1d:d4:95:ef: ba:68:69:5a:ba:b7:d3:15:1f:2a:6b:d6:3c:24:6e:2b:c0:64: dc:23:d8:3e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHD8UsPxL488i+Lv5EsTqiUfAP6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTEyMDYxMjMwMzhaFw0yNTEyMDcxMjQ5MzhaMDMxMTAvBgNV BAMTKEREOENCQjgxQTA5NDE2RURDMThDRjEwMjZCRTc5MDBEMjIxQzQ5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwFCx0Vqk7omB1yk3+X3Jatui i1eky9YBB/Lgq520RoPVofI3O1w9n3Y4faSuSDI6PomWYhnK8ElYDFo5SUPNrxnr AkeBwtF/dv7Po6Kl/h4mxLLzFGPBEoFc2PVm4asiFY9ssg6wMRPjO3J8xiaoMeIm BwuIJufjYHQqz3lmqZ/0f48HDO/Nk/W1LcvNvuUh6SchrCj7AhzYQZ1zHS/ASsbH OS03zBrypy7K5/OM7+JaEgM3xFPSZZfBdERSPYMswAJWo4a4HEzxSO/DdwqAcznq KpYhOs/xXQTdxOKJXIOJNmWqRRdQnV4OluaErfcuP3yNA49gSjrTe20r7Q03AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3Yy7gaCUFu3BjPECa+eQDSIcSWUwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp88e3NU0+lsKOPsCXVd lHgzjRqMVxKLt7Q1gWp/xS2pgqNS/MC7qY4dt6AQeQTq/hJ7itZxGG2PkZdie9nH 7Q6lUzHug+i5v5/JNlGJh62rNTSahnn3F4Ww7DGdR5JjvyuyybwHg9xAJqDPq9yb mFwzFVzOcoBsPd4CILbzypGICyG3fY5bz3lNVlaZwZbkLqZXWDiEmVdUptIi/+l8 iwe47qjNL05AoARgkW7YX9C6T0GhwjEVv15lLTgtgTBfgDUTxaF8f0eqybEetibD bQ3nt15dAOqMEqNRMqAsh90B+rjeQUkd1JXvumhpWrq30xUfKmvWPCRuK8Bk3CPY Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:55 2025 by rpki-client