This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json) Hash identifier: Wrv6ekW1tWXjkAByET70b/9efKJS71Vs5SpgOP4v2d0= Subject key identifier: C1:6F:97:99:D0:35:96:02:95:57:A2:BA:67:78:41:25:DA:AB:73:F7 Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82 Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82 Certificate serial: 019AF0F5E234F481EE14B2ECDBCF879CF393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft Manifest number: ED Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: 47xrd+kTQbQCFoOPVEP36h6E2EsPkA7FsF8/B4P2/vQ=) 2: _uXBkuhUshA9qmVceLo2r4NfxjI.roa (hash: eLDt5MUCNFk11wBf0J4j69ReU2zTScT7dm7QbxFh55c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e2:34:f4:81:ee:14:b2:ec:db:cf:87:9c:f3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=c16f9799d03596029557a2ba67784125daab73f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:59:09:71:78:44:65:e6:00:af:f7:b9:ac: e5:e4:90:d0:50:22:5f:64:f4:c3:ed:7f:fe:8e:c7: 38:7e:14:5e:bc:f7:1c:86:c0:d0:a3:df:d4:ff:41: e5:39:ad:e9:f3:82:60:0a:b3:32:d1:b3:48:2f:46: 5e:dc:bd:3c:58:e4:68:26:7b:c1:12:13:de:64:9c: f1:28:c9:a1:ed:68:85:db:72:a2:72:89:b9:ce:cc: f2:e5:7d:21:06:13:b0:b8:1d:69:12:1a:4b:a8:3c: e0:90:b2:8b:10:61:b5:6e:0f:00:4e:f1:01:22:2c: a1:cc:9d:6d:bd:09:01:7d:63:af:f5:69:5d:22:fc: 9b:b9:69:d4:dc:38:4a:59:ca:b6:0c:6a:87:36:d1: 8a:a7:9f:80:d1:ba:b8:e4:1f:ed:86:1f:fc:f5:76: 0d:a7:dc:40:da:c6:6c:2a:37:80:3d:9e:96:07:6c: 76:a2:d2:e6:9e:ab:09:4c:74:43:fe:45:a7:a0:af: b0:d3:61:8b:ac:03:97:2a:4d:44:38:9c:87:bf:c1: 7c:a7:39:c1:dd:0c:f2:53:fc:29:cb:9f:dd:2b:a3: 35:ae:de:a9:b9:6c:15:63:53:48:d8:13:4c:5f:9e: 8c:53:0f:7c:5e:e1:8a:ae:4b:ba:1c:43:c7:aa:54: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:97:99:D0:35:96:02:95:57:A2:BA:67:78:41:25:DA:AB:73:F7 X509v3 Authority Key Identifier: keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:78:b3:4c:72:3c:0e:6d:9f:3d:a5:30:2a:8d:a3:46:27: 4f:16:fb:36:d2:3c:66:72:8a:28:01:53:66:bb:73:d8:e9:ea: a9:6f:b7:d2:0f:d2:b8:ce:b9:51:6d:c8:dc:21:41:e4:ad:a3: be:83:02:dd:3e:4b:6b:4c:71:70:65:a6:d9:09:0d:03:f5:7b: de:d5:7b:f2:c6:c3:8f:78:8a:ee:4b:20:f0:08:cc:ad:a6:ea: f0:1c:08:0e:47:37:fa:fa:bd:b1:bb:f6:2a:fe:fb:a6:05:2f: 97:c1:b4:3d:b7:1e:6c:2d:29:85:4e:64:31:89:ec:4e:9e:9f: 7b:01:ee:69:cc:38:1d:e9:2d:5b:3d:f8:ec:f4:f0:a9:79:0c: 12:0d:ed:de:ab:91:3c:1b:78:d5:39:dd:f9:4e:73:bc:bb:18: 72:28:04:81:3a:da:31:aa:97:b1:82:72:f7:9a:fb:b9:7a:03: 77:4c:88:aa:a4:3d:e0:3f:20:37:c2:c6:f7:0d:5f:85:4d:f5: 92:c7:a4:00:8d:48:10:ff:5e:6b:29:c7:c8:4a:cb:7f:72:6d: 5f:3c:5c:10:5f:e7:1f:48:a8:ba:77:b2:2f:03:2d:d8:11:3b: 6e:13:1b:4c:ec:2a:7d:17:ea:38:39:cd:db:6e:c0:7e:d6:aa: 9e:92:0a:f7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrw9eI09IHuFLLs28+HnPOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiN2YxOTFhOGRiYmYxZjEzMTQ3NDk3NTM1OGYyNDQ0ZDY5 NTBlODIwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EyhjMTZmOTc5OWQwMzU5NjAyOTU1N2EyYmE2Nzc4NDEyNWRhYWI3M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuixZCXF4RGXmAK/3uazl5JDQUCJf ZPTD7X/+jsc4fhRevPcchsDQo9/U/0HlOa3p84JgCrMy0bNIL0Ze3L08WORoJnvB EhPeZJzxKMmh7WiF23Kicom5zszy5X0hBhOwuB1pEhpLqDzgkLKLEGG1bg8ATvEB IiyhzJ1tvQkBfWOv9WldIvybuWnU3DhKWcq2DGqHNtGKp5+A0bq45B/thh/89XYN p9xA2sZsKjeAPZ6WB2x2otLmnqsJTHRD/kWnoK+w02GLrAOXKk1EOJyHv8F8pznB 3QzyU/wpy5/dK6M1rt6puWwVY1NI2BNMX56MUw98XuGKrku6HEPHqlSTSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMFvl5nQNZYClVeiumd4QSXaq3P3MB8GA1UdIwQY MBaAFPt/GRqNu/HxMUdJdTWPJETWlQ6CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zOFpHbzI3OGZFeFIwbDFOWThrUk5hVkRvSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWEx LTg3NDdkYWE1OTNmMi8xLzEtMzhaR28yNzhmRXhSMGwxTlk4a1JOYVZEb0kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNkLzIyZjBhOC1iNmYwLTQ0YjYtOWFhMS04NzQ3ZGFhNTkz ZjIvMS8xLTM4WkdvMjc4ZkV4UjBsMU5ZOGtSTmFWRG9JLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtR4 s0xyPA5tnz2lMCqNo0YnTxb7NtI8ZnKKKAFTZrtz2OnqqW+30g/SuM65UW3I3CFB 5K2jvoMC3T5La0xxcGWm2QkNA/V73tV78sbDj3iK7ksg8AjMrabq8BwIDkc3+vq9 sbv2Kv77pgUvl8G0PbcebC0phU5kMYnsTp6fewHuacw4HektWz347PTwqXkMEg3t 3quRPBt41Tnd+U5zvLsYcigEgTraMaqXsYJy95r7uXoDd0yIqqQ94D8gN8LG9w1f hU31ksekAI1IEP9eaynHyErLf3JtXzxcEF/nH0iouneyLwMt2BE7bhMbTOwqfRfq ODnN227AftaqnpIK9w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:57 2025 by rpki-client