This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json) Hash identifier: W805b8YAJamnlqpC9Zehgd9zHQiESam4+Kd8rr5F6JU= Subject key identifier: 42:43:90:0E:95:5D:FB:ED:E4:58:BD:0D:32:C0:08:98:C1:4D:E2:F6 Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7 Certificate serial: 019B2F9EA1037F3C723108EAFB09B2097FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft Manifest number: 1086 Signing time: Thu 18 Dec 2025 04:01:23 +0000 Manifest this update: Thu 18 Dec 2025 04:01:23 +0000 Manifest next update: Fri 19 Dec 2025 04:01:23 +0000 Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: lthAEL0AAP7hwGKIi2aZrOxT9iQfqgh3ZpB5boldwVw=) 2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=) 3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:a1:03:7f:3c:72:31:08:ea:fb:09:b2:09:7f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7 Validity Not Before: Dec 18 04:01:23 2025 GMT Not After : Dec 19 04:01:23 2025 GMT Subject: CN=4243900e955dfbede458bd0d32c00898c14de2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:47:29:71:bb:3a:98:d6:d8:0e:57:cf:03:48: a4:6a:2f:ea:18:c6:7c:0c:f2:ee:c0:ec:6b:26:c5: 8a:18:8b:af:a6:aa:e3:fa:aa:34:7f:67:05:74:41: 1a:85:6b:b2:6f:5a:0b:e9:38:1c:f3:03:1e:cc:65: d2:4f:02:fe:c0:a5:9d:56:12:0d:24:61:dc:05:87: 5d:cc:0b:90:81:4d:a0:6e:75:72:eb:98:b1:9b:85: 40:e0:5c:dd:cd:06:3a:25:78:f4:fe:bc:cd:9a:d4: ac:ab:d0:1b:ad:ea:0b:e9:d6:e7:58:1f:e8:c7:d1: 30:5d:56:43:1b:ec:22:d9:fb:e5:e1:f0:f0:b6:d3: 62:b0:3a:5d:dc:7c:97:e3:79:b5:5c:73:0d:37:b5: 3a:3b:4d:48:79:ef:f8:1b:66:00:24:25:d1:41:19: 0e:04:5a:64:1a:bf:5e:47:c3:b0:fd:2a:d4:a1:f1: 4d:0d:3e:7a:ea:f2:0a:ec:13:9b:c7:30:54:aa:50: cb:2e:d4:64:1e:42:b3:f7:32:8b:d5:c6:1b:b7:8c: 12:0c:e9:3d:36:10:a6:3c:1f:62:64:46:44:24:c8: d6:79:ba:1c:4c:79:19:d3:60:7f:7f:25:7a:c6:3d: c5:91:40:3f:39:bf:b5:74:06:ad:e9:00:d6:7b:9d: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:43:90:0E:95:5D:FB:ED:E4:58:BD:0D:32:C0:08:98:C1:4D:E2:F6 X509v3 Authority Key Identifier: keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d8:b4:47:d3:b3:40:3c:25:c6:e1:79:25:6e:1e:75:45:6b: db:c1:87:52:5c:02:f9:f3:97:b1:ee:9f:7a:f9:1e:c0:c4:aa: 29:b5:35:0e:de:99:11:c5:46:b6:f9:1a:7a:5c:33:0f:49:a6: 85:7f:89:18:e3:fb:ea:bb:62:99:75:75:0a:85:10:36:2d:67: 48:1e:11:47:e2:6c:fb:60:50:4b:d2:3b:5f:b1:9f:2a:e4:a6: c0:9e:29:e0:e4:6b:92:6e:00:1e:c6:47:15:d8:1b:6d:fe:46: 1b:85:4a:91:0e:c1:de:13:01:47:44:3f:b2:45:60:1d:c7:68: 55:37:0b:7e:90:a7:b1:4e:bc:35:7d:9a:7d:50:2c:ce:d9:9b: a9:03:49:44:99:1f:1b:13:54:a5:08:68:f5:8b:f8:0d:c2:8d: 6e:f9:e1:95:26:2a:e0:2d:d5:1c:3c:ec:4f:51:23:67:6d:61: 8a:dc:a8:84:70:7b:24:90:e9:73:6d:7e:68:74:21:78:0b:18: c4:66:a0:bb:e2:3a:16:b1:a5:51:1e:eb:f3:9f:08:f1:5b:c4: 20:6e:ca:9f:fd:0c:4b:29:c3:94:d7:a4:4b:35:22:d2:9e:54: e0:7d:90:e9:92:2d:e7:8a:95:73:71:c5:42:78:08:32:d9:72: fd:69:b1:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqEDfzxyMQjq+wmyCX+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh ODAwYzcwHhcNMjUxMjE4MDQwMTIzWhcNMjUxMjE5MDQwMTIzWjAzMTEwLwYDVQQD Eyg0MjQzOTAwZTk1NWRmYmVkZTQ1OGJkMGQzMmMwMDg5OGMxNGRlMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ucpcbs6mNbYDlfPA0ikai/qGMZ8 DPLuwOxrJsWKGIuvpqrj+qo0f2cFdEEahWuyb1oL6Tgc8wMezGXSTwL+wKWdVhIN JGHcBYddzAuQgU2gbnVy65ixm4VA4FzdzQY6JXj0/rzNmtSsq9AbreoL6dbnWB/o x9EwXVZDG+wi2fvl4fDwttNisDpd3HyX43m1XHMNN7U6O01Iee/4G2YAJCXRQRkO BFpkGr9eR8Ow/SrUofFNDT566vIK7BObxzBUqlDLLtRkHkKz9zKL1cYbt4wSDOk9 NhCmPB9iZEZEJMjWebocTHkZ02B/fyV6xj3FkUA/Ob+1dAat6QDWe5209wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJDkA6VXfvt5Fi9DTLACJjBTeL2MB8GA1UdIwQY MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt YzgzMDA3MzI3NDQ5LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5 LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdi0R9Oz QDwlxuF5JW4edUVr28GHUlwC+fOXse6fevkewMSqKbU1Dt6ZEcVGtvkaelwzD0mm hX+JGOP76rtimXV1CoUQNi1nSB4RR+Js+2BQS9I7X7GfKuSmwJ4p4ORrkm4AHsZH Fdgbbf5GG4VKkQ7B3hMBR0Q/skVgHcdoVTcLfpCnsU68NX2afVAsztmbqQNJRJkf GxNUpQho9Yv4DcKNbvnhlSYq4C3VHDzsT1EjZ21hityohHB7JJDpc21+aHQheAsY xGagu+I6FrGlUR7r858I8VvEIG7Kn/0MSynDlNekSzUi0p5U4H2Q6ZIt54qVc3HF QngIMtly/WmxdA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:18 2025 by rpki-client