This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json) Hash identifier: fuCvwHCc09Mu9R+R9Vz0lBRPfaT/RQ/Yci97SLSi+Sg= Subject key identifier: 92:46:03:43:FA:94:9B:46:1F:C9:A0:87:2D:F3:4B:DF:9D:C0:03:0D Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7 Certificate serial: 019AF1D22655A8B39D1D6314D6767148A01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft Manifest number: 1066 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: 8IaYv3gF+fgsIwN3vlJEr+5gKNbtgzpu3SVbehZpFyg=) 2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=) 3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:26:55:a8:b3:9d:1d:63:14:d6:76:71:48:a0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7 Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=92460343fa949b461fc9a0872df34bdf9dc0030d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:98:32:35:0e:30:5c:a4:01:d5:7e:75:b9: 71:9e:11:78:00:54:1c:ff:a7:d3:65:bc:90:70:dc: cb:9b:bf:2c:be:ee:39:41:07:8f:b3:f3:c2:6a:fa: c0:50:c9:7c:d1:9c:d6:92:96:b1:73:59:2b:06:5e: 82:71:b3:4d:aa:ec:84:9e:cd:2f:eb:0d:2e:e0:9f: 2e:eb:6a:72:7d:f6:29:98:9c:70:45:fe:bf:d0:cc: bd:ca:ac:d1:c1:2c:82:cb:26:d9:3c:44:1c:88:34: 17:f8:50:92:3b:88:35:e1:99:fd:bd:3f:55:b0:f5: 4e:14:21:92:ae:62:fc:9e:63:fb:e5:c6:10:0f:40: 78:32:0d:3c:1e:e5:ff:00:d6:cb:c3:67:03:5b:ef: ce:ca:00:a7:3e:db:d6:fe:fe:e2:b9:61:fc:66:2a: 31:e7:b7:a4:a0:8a:e7:c2:7f:30:53:a9:39:0c:3e: 3d:ec:15:8c:ba:81:f3:36:ff:a3:d5:9b:aa:6b:3f: ef:1c:f5:a0:5d:de:7b:e7:03:40:4a:91:08:40:83: f5:44:28:d2:13:81:c3:6e:a6:8c:5b:ef:bd:22:55: fd:a1:88:6e:a1:2c:35:6d:a4:78:49:98:8a:0e:e0: 6e:27:06:21:d4:b3:3a:18:e3:93:61:02:0b:66:a2: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:03:43:FA:94:9B:46:1F:C9:A0:87:2D:F3:4B:DF:9D:C0:03:0D X509v3 Authority Key Identifier: keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:00:05:cd:75:e6:92:60:6c:74:43:0c:48:f4:3f:12:b0:84: 9f:d3:6b:fd:eb:d2:10:a8:e0:bb:8a:9a:95:b7:34:4c:65:eb: 94:78:bc:d9:c8:4e:9d:e9:12:8d:20:f6:cd:ea:03:75:e5:b4: 37:a9:fc:a5:f6:48:85:04:31:94:99:9a:9e:80:9d:b5:81:20: a5:74:1c:18:c7:3f:eb:e6:80:20:2e:85:74:fa:43:b9:d4:20: 2a:32:18:b2:4e:20:37:71:2d:f3:55:ec:c2:aa:61:c7:3f:d3: cc:67:59:1b:11:de:7c:b4:be:c7:78:50:4e:a4:04:a6:57:b5: 55:58:34:ed:8f:02:d1:04:e7:2f:8b:85:e9:bc:5b:16:1c:12: 9b:d4:80:31:04:40:92:a8:e5:1e:2e:2f:56:fd:87:db:f1:22: 77:94:1a:1b:39:2b:4b:e1:06:9a:44:8f:46:9f:68:88:73:61: 3f:c6:a0:e8:9f:50:5a:5c:6d:07:9a:3f:83:cf:b1:c5:7e:e5: 2f:06:9d:70:73:89:1a:74:75:36:59:87:32:51:b6:36:7c:23: eb:05:b0:bd:e2:31:4a:e5:48:86:7c:91:6f:1f:c9:1b:4b:c2: 34:3a:67:47:89:6f:7a:59:2a:55:0f:28:ce:db:aa:2b:8b:b5: 7c:e1:61:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iZVqLOdHWMU1nZxSKAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh ODAwYzcwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD Eyg5MjQ2MDM0M2ZhOTQ5YjQ2MWZjOWEwODcyZGYzNGJkZjlkYzAwMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVKYMjUOMFykAdV+dblxnhF4AFQc /6fTZbyQcNzLm78svu45QQePs/PCavrAUMl80ZzWkpaxc1krBl6CcbNNquyEns0v 6w0u4J8u62pyffYpmJxwRf6/0My9yqzRwSyCyybZPEQciDQX+FCSO4g14Zn9vT9V sPVOFCGSrmL8nmP75cYQD0B4Mg08HuX/ANbLw2cDW+/OygCnPtvW/v7iuWH8Ziox 57ekoIrnwn8wU6k5DD497BWMuoHzNv+j1Zuqaz/vHPWgXd575wNASpEIQIP1RCjS E4HDbqaMW++9IlX9oYhuoSw1baR4SZiKDuBuJwYh1LM6GOOTYQILZqJsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJGA0P6lJtGH8mghy3zS9+dwAMNMB8GA1UdIwQY MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt YzgzMDA3MzI3NDQ5LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5 LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQAFzXXm kmBsdEMMSPQ/ErCEn9Nr/evSEKjgu4qalbc0TGXrlHi82chOnekSjSD2zeoDdeW0 N6n8pfZIhQQxlJmanoCdtYEgpXQcGMc/6+aAIC6FdPpDudQgKjIYsk4gN3Et81Xs wqphxz/TzGdZGxHefLS+x3hQTqQEple1VVg07Y8C0QTnL4uF6bxbFhwSm9SAMQRA kqjlHi4vVv2H2/Eid5QaGzkrS+EGmkSPRp9oiHNhP8ag6J9QWlxtB5o/g8+xxX7l LwadcHOJGnR1NlmHMlG2Nnwj6wWwveIxSuVIhnyRbx/JG0vCNDpnR4lvelkqVQ8o ztuqK4u1fOFhzg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:11 2025 by rpki-client