This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: s7MWXWDJ0Jm8JZg/Lu2Fen6fwQ3YUjtMjXPBWXY0qno= Subject key identifier: 28:9D:99:F4:04:18:9B:66:8D:34:13:10:99:9A:E1:78:77:9C:6A:1A Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 15EF1C2A00C12FA76669DF94BCB95ED0AD4BA045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 05A4 Signing time: Wed 03 Dec 2025 15:51:53 +0000 Manifest this update: Wed 03 Dec 2025 15:46:53 +0000 Manifest next update: Thu 04 Dec 2025 16:14:53 +0000 Files and hashes: 1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: cFKJw8Ywe4xNzM8JPxgWp1uzH0cRmGnxSRlGyECb7/Y=) 2: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) 3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 4: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 16:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ef:1c:2a:00:c1:2f:a7:66:69:df:94:bc:b9:5e:d0:ad:4b:a0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Dec 3 15:46:53 2025 GMT Not After : Dec 4 16:14:53 2025 GMT Subject: CN=289D99F404189B668D341310999AE178779C6A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:19:d9:a6:52:3b:e3:61:eb:fe:6a:dc:ba: c3:66:15:7e:ac:36:96:17:4f:ba:35:a8:8b:cb:7b: 88:58:9b:b9:ec:5e:1f:ae:d1:12:ac:7e:95:d8:c3: ba:62:35:4a:ce:ab:23:c0:9f:7f:8f:a0:82:45:43: 17:2a:f4:28:84:ca:b8:eb:6f:ef:42:70:c8:35:13: e6:fd:62:62:a2:0c:31:ae:bf:74:2b:f3:fd:f2:51: 4f:46:aa:da:5f:16:31:83:39:b7:22:1f:99:be:c8: 26:2a:4e:6c:7e:eb:dc:31:3a:c1:bd:97:66:45:b9: dd:d0:c5:ef:80:1f:29:55:9d:33:7f:97:a4:d2:7b: e9:91:d6:5e:78:45:c0:0f:57:d4:c7:5b:f4:6b:29: b0:18:8b:d3:bf:46:09:35:ec:a0:31:a1:47:02:9b: 17:54:8c:35:d5:48:cb:80:5a:31:74:75:36:d9:21: d3:24:37:51:d7:db:be:32:63:c5:22:61:1c:b6:9b: e8:20:aa:cc:84:70:4e:36:72:39:98:84:05:32:dc: 08:34:de:8e:bf:5d:57:e5:0b:27:6e:7b:10:7c:61: 05:4f:dd:a7:55:e0:30:64:f1:a1:02:c3:0e:11:5d: a3:03:49:39:4f:a8:24:4b:64:e8:78:e7:41:68:fa: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9D:99:F4:04:18:9B:66:8D:34:13:10:99:9A:E1:78:77:9C:6A:1A X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:9c:d0:70:b4:4c:6a:42:7f:12:ce:43:52:33:60:fe:70:9f: 9d:0d:c3:7f:01:60:4a:b9:11:b5:9f:b1:3c:47:62:43:8c:14: 31:c0:6f:7b:39:4e:ef:91:75:ce:51:2b:28:36:8a:85:67:46: 11:4b:81:3c:8d:6c:17:2c:fc:02:c6:02:08:e0:8f:ae:76:70: 3a:1f:76:83:09:76:c0:c4:ef:67:0a:36:bd:b1:df:9b:e1:db: 6c:92:17:68:b2:de:87:d9:4a:06:35:d6:31:d9:c4:06:75:06: 3d:5b:af:26:2d:98:16:03:dd:e2:88:a4:19:2c:b2:28:4a:d2: 8d:19:f4:01:02:96:6f:5e:f5:7e:8a:33:51:cd:6a:44:54:ad: db:44:f1:fe:45:03:e1:5c:de:39:92:50:d8:ae:e0:38:3e:fa: 95:5e:74:3e:28:26:74:f5:4f:4c:e1:b1:a0:c9:6e:55:91:48: 71:36:91:03:b7:40:e5:69:76:1e:11:88:b3:12:a6:50:ce:47: da:06:5c:b3:f8:81:49:8c:b2:eb:2a:bd:98:30:d3:56:2f:3c: 54:84:fe:69:13:b3:79:ba:5d:08:a2:23:52:38:9e:cb:e4:72: 2e:fd:b2:b8:58:46:2f:ca:71:4b:0a:a8:7c:89:00:e5:e2:ed: 00:de:6a:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFe8cKgDBL6dmad+UvLle0K1LoEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTEyMDMxNTQ2NTNaFw0yNTEyMDQxNjE0NTNaMDMxMTAvBgNV BAMTKDI4OUQ5OUY0MDQxODlCNjY4RDM0MTMxMDk5OUFFMTc4Nzc5QzZBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaRnZplI742Hr/mrcusNmFX6s NpYXT7o1qIvLe4hYm7nsXh+u0RKsfpXYw7piNUrOqyPAn3+PoIJFQxcq9CiEyrjr b+9CcMg1E+b9YmKiDDGuv3Qr8/3yUU9GqtpfFjGDObciH5m+yCYqTmx+69wxOsG9 l2ZFud3Qxe+AHylVnTN/l6TSe+mR1l54RcAPV9THW/RrKbAYi9O/Rgk17KAxoUcC mxdUjDXVSMuAWjF0dTbZIdMkN1HX274yY8UiYRy2m+ggqsyEcE42cjmYhAUy3Ag0 3o6/XVflCyduexB8YQVP3adV4DBk8aECww4RXaMDSTlPqCRLZOh450Fo+qq5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKJ2Z9AQYm2aNNBMQmZrheHecahowHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpzQcLRMakJ/Es5DUjNg /nCfnQ3DfwFgSrkRtZ+xPEdiQ4wUMcBvezlO75F1zlErKDaKhWdGEUuBPI1sFyz8 AsYCCOCPrnZwOh92gwl2wMTvZwo2vbHfm+HbbJIXaLLeh9lKBjXWMdnEBnUGPVuv Ji2YFgPd4oikGSyyKErSjRn0AQKWb171foozUc1qRFSt20Tx/kUD4VzeOZJQ2K7g OD76lV50PigmdPVPTOGxoMluVZFIcTaRA7dA5Wl2HhGIsxKmUM5H2gZcs/iBSYyy 6yq9mDDTVi88VIT+aROzebpdCKIjUjiey+RyLv2yuFhGL8pxSwqofIkA5eLtAN5q RA== -----END CERTIFICATE-----Generated at Thu Dec 4 06:38:07 2025 by rpki-client