This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: t75jbUWfczGllAzlLvF/KTFEEjE5IyXsuqtB8gJLlC4= Subject key identifier: 3A:5A:BD:CB:AD:FC:B4:96:04:14:28:A0:15:19:19:45:69:72:9D:26 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 1E10AFCFE00E086EF949B267968A30F0DE6A9993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 05EB Signing time: Sun 25 Jan 2026 11:49:56 +0000 Manifest this update: Sun 25 Jan 2026 11:44:56 +0000 Manifest next update: Mon 26 Jan 2026 14:57:56 +0000 Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) 3: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) 4: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: WERz/ed6TWk0S0uJ8E1t1KwqG4FS9UolLDF3NboZ4/c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:10:af:cf:e0:0e:08:6e:f9:49:b2:67:96:8a:30:f0:de:6a:99:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Jan 25 11:44:56 2026 GMT Not After : Jan 26 14:57:56 2026 GMT Subject: CN=3A5ABDCBADFCB496041428A01519194569729D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:37:40:37:22:ec:9b:a3:8d:16:31:5d:82:cc: 7a:8e:83:46:52:17:c6:c7:20:00:73:42:82:92:e6: 81:34:42:53:ba:89:10:55:52:d5:ba:43:36:08:64: a0:27:89:ba:80:d5:6c:9b:7d:d1:1f:30:ca:85:d7: 69:7c:d8:f8:4d:6e:05:8e:19:5f:02:df:25:4c:95: f7:49:b6:05:d2:e6:d7:9a:6e:a6:7c:14:34:c5:52: 90:8b:95:c9:99:fe:bc:c7:1b:33:62:c0:54:26:46: 42:ee:f1:25:5b:a7:d7:19:d2:be:1f:10:28:f7:fb: 67:d8:90:ed:13:de:a4:35:58:4e:8a:ef:1b:88:b7: af:11:a6:56:9b:51:d1:79:71:e2:b8:f7:2d:a4:03: 19:2e:72:da:9f:c9:81:96:83:9e:4a:b5:07:75:73: 32:59:65:07:b6:42:82:83:7c:38:4a:7d:a3:75:12: 2c:48:ea:5e:39:bb:ca:25:80:f3:61:76:95:fe:aa: a6:7e:e7:5c:80:8f:47:7f:7c:cc:4e:51:18:62:f2: bb:db:d5:1e:3b:b3:dd:1f:8d:c0:98:f6:3a:1d:1e: d3:9a:d6:23:da:1b:23:b0:fb:86:7c:6e:d3:30:31: 07:7f:c1:54:ba:35:c0:21:a4:b5:e4:49:4d:d3:c5: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5A:BD:CB:AD:FC:B4:96:04:14:28:A0:15:19:19:45:69:72:9D:26 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1b:31:d0:86:bf:d7:a5:3c:59:df:91:3f:a6:8f:23:1e:49: c0:df:da:50:3a:de:5a:2f:93:c0:0f:7b:6e:34:47:4f:c8:19: 7a:db:48:28:4f:be:d6:b7:45:da:ba:57:54:10:1d:25:77:3d: 8f:8d:75:98:1e:fe:a4:73:c2:16:ae:51:be:14:c2:15:29:f7: bd:8d:cd:cd:b0:33:d0:81:ca:f6:9a:69:d7:88:b0:b8:e7:47: 24:8d:af:b7:8e:72:af:39:7e:a7:61:3a:61:48:f4:ad:1c:5c: ec:19:71:6b:c7:12:a3:44:43:48:29:4c:7d:1e:bb:0e:99:d9: d1:4a:68:c2:51:b1:c7:b3:88:5b:1d:60:3a:87:ba:36:91:0a: d5:20:1a:c1:f6:f3:81:13:c9:90:5d:01:a3:4b:78:9f:a6:6e: ee:d8:c5:20:6d:cc:0d:c7:e4:00:15:f8:f2:0b:c0:16:f4:9b: fa:29:9a:50:b0:0f:81:f4:ef:96:e6:7f:a7:2a:d1:e6:aa:b4: 5b:0c:b7:e1:46:55:4f:1a:5b:bf:8e:79:e4:62:ec:22:f6:7c: 46:34:ba:8c:1b:11:13:c7:05:1a:c0:42:5d:03:88:7d:22:fd: 5d:86:6f:4f:23:10:6a:93:bc:77:bc:a7:f1:d9:2c:48:b4:a4: 42:1f:1e:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHhCvz+AOCG75SbJnloow8N5qmZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNjAxMjUxMTQ0NTZaFw0yNjAxMjYxNDU3NTZaMDMxMTAvBgNV BAMTKDNBNUFCRENCQURGQ0I0OTYwNDE0MjhBMDE1MTkxOTQ1Njk3MjlEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrN0A3Iuybo40WMV2CzHqOg0ZS F8bHIABzQoKS5oE0QlO6iRBVUtW6QzYIZKAnibqA1WybfdEfMMqF12l82PhNbgWO GV8C3yVMlfdJtgXS5teabqZ8FDTFUpCLlcmZ/rzHGzNiwFQmRkLu8SVbp9cZ0r4f ECj3+2fYkO0T3qQ1WE6K7xuIt68RplabUdF5ceK49y2kAxkuctqfyYGWg55KtQd1 czJZZQe2QoKDfDhKfaN1EixI6l45u8olgPNhdpX+qqZ+51yAj0d/fMxOURhi8rvb 1R47s90fjcCY9jodHtOa1iPaGyOw+4Z8btMwMQd/wVS6NcAhpLXkSU3TxcU3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOlq9y638tJYEFCigFRkZRWlynSYwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRsx0Ia/16U8Wd+RP6aP Ix5JwN/aUDreWi+TwA97bjRHT8gZettIKE++1rdF2rpXVBAdJXc9j411mB7+pHPC Fq5RvhTCFSn3vY3NzbAz0IHK9ppp14iwuOdHJI2vt45yrzl+p2E6YUj0rRxc7Blx a8cSo0RDSClMfR67DpnZ0UpowlGxx7OIWx1gOoe6NpEK1SAawfbzgRPJkF0Bo0t4 n6Zu7tjFIG3MDcfkABX48gvAFvSb+imaULAPgfTvluZ/pyrR5qq0Wwy34UZVTxpb v4555GLsIvZ8RjS6jBsRE8cFGsBCXQOIfSL9XYZvTyMQapO8d7yn8dksSLSkQh8e YQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:59:25 2026 by rpki-client