This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json) Hash identifier: 2+AZ+8wZt30oc3rYZQSjD9hb2AhaNDTYGsVeFiVGGOQ= Subject key identifier: 43:D3:12:8B:66:5C:A5:D8:90:92:FE:5F:54:B4:9F:10:74:FC:63:A3 Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e Certificate serial: 32D60B3AEADD388AA5A99D4A8658F48E94D9322E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft Manifest number: B4 Signing time: Fri 05 Dec 2025 20:38:18 +0000 Manifest this update: Fri 05 Dec 2025 20:33:18 +0000 Manifest next update: Sat 06 Dec 2025 21:43:18 +0000 Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: IGp9v2sPAsSNmB9Yca4Sn2x2bO+hkVsupuQbbsZ67D8=) 2: AS211575.asa (hash: nPJ1LprS9/u9GgaDNqu2HsXaB9B+xrAoBi5odzSyQpQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:0b:3a:ea:dd:38:8a:a5:a9:9d:4a:86:58:f4:8e:94:d9:32:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e Validity Not Before: Dec 5 20:33:18 2025 GMT Not After : Dec 6 21:43:18 2025 GMT Subject: CN=43D3128B665CA5D89092FE5F54B49F1074FC63A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:25:4a:28:c1:c3:1e:6d:a1:92:0e:21:a3: eb:bb:b4:ab:a0:df:14:c6:8b:be:b4:44:1f:67:25: 64:7b:5a:6c:78:ca:52:09:a9:b5:7a:60:95:e6:93: 20:1e:b6:aa:2d:1c:70:07:a3:de:29:48:bb:11:8e: 2f:67:c8:73:b5:ea:65:b0:12:e4:3a:ff:97:3a:a7: 4d:93:3f:6f:5c:06:08:a5:95:6b:cf:91:57:bc:37: ce:a6:73:4a:86:3b:c1:bd:07:32:bc:d6:12:d0:19: 56:66:ea:0d:d1:52:f9:dd:cc:f1:f8:06:a0:31:6f: ae:b6:7e:91:32:1e:67:1a:69:d8:a2:f3:85:2e:23: 4d:28:f4:80:79:e3:10:3f:b5:0b:f5:bb:8b:1b:fa: 83:45:5e:28:79:ef:69:82:6c:54:2a:76:5a:7e:a0: 3a:ad:6f:e8:ec:01:61:c1:30:3f:1b:eb:5f:6e:7f: 56:42:5b:a7:28:22:96:e1:86:7e:13:83:0f:ec:1e: 9f:0b:ee:7c:f7:a4:7d:93:a5:52:31:03:88:76:a1: 80:e0:d6:0c:65:c0:84:3d:a0:0d:b5:69:27:1d:33: 12:31:6d:51:c8:42:ad:25:f9:49:4b:63:73:63:ea: c8:a7:47:14:5c:4e:07:3b:f0:ce:15:5f:3d:bf:d0: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:12:8B:66:5C:A5:D8:90:92:FE:5F:54:B4:9F:10:74:FC:63:A3 X509v3 Authority Key Identifier: keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f7:1f:67:85:f4:c1:78:e0:fd:a2:9d:55:7f:53:42:3e:3e: 53:94:9a:22:a6:c6:13:9a:ed:7d:0b:8c:b3:af:d3:16:b5:76: b1:b5:6e:10:7b:78:a7:0a:5a:1a:9f:80:2d:5f:78:d5:f1:81: 79:c3:e7:d0:69:29:1d:ac:55:de:26:58:5e:6c:4e:03:da:c0: 5a:d7:af:2a:df:e7:72:18:02:ab:7f:51:5d:7e:79:17:0e:21: 5c:2c:b3:2e:7e:6b:00:4e:2b:b2:93:ea:d8:28:2f:51:ef:2b: d3:c2:cf:41:48:f3:f7:11:01:dd:19:aa:7a:3c:86:38:34:ff: c2:82:ee:94:09:ab:be:29:fa:93:4e:76:71:1f:99:4e:21:45: e9:d8:9d:99:7d:cd:6a:ee:37:ea:9d:01:27:15:e1:aa:b8:bc: ab:76:b7:b0:8b:d6:b4:c0:83:8e:58:d6:a3:02:5e:04:e0:05: 32:ed:82:4f:b8:a2:f2:70:ea:da:e5:5d:d1:4e:1c:c6:33:c2: e5:42:bf:58:a0:72:d8:aa:83:eb:89:ba:14:55:cf:05:63:30: 86:9b:46:bb:d3:5c:bd:5f:e2:fc:b8:38:b8:00:c6:ba:e3:0d: 91:4d:29:9b:21:b4:a6:34:40:9a:d8:cb:1a:6a:d1:cb:c0:49: 6a:59:f1:ea -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMtYLOurdOIqlqZ1Khlj0jpTZMi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhlODk1OTM4ZjNiY2VjZDQ4ZDlhYjc4OTZjYTQ0MDlm NmY2YzU5ZTAeFw0yNTEyMDUyMDMzMThaFw0yNTEyMDYyMTQzMThaMDMxMTAvBgNV BAMTKDQzRDMxMjhCNjY1Q0E1RDg5MDkyRkU1RjU0QjQ5RjEwNzRGQzYzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMSVKKMHDHm2hkg4ho+u7tKug 3xTGi760RB9nJWR7Wmx4ylIJqbV6YJXmkyAetqotHHAHo94pSLsRji9nyHO16mWw EuQ6/5c6p02TP29cBgillWvPkVe8N86mc0qGO8G9BzK81hLQGVZm6g3RUvndzPH4 BqAxb662fpEyHmcaadii84UuI00o9IB54xA/tQv1u4sb+oNFXih572mCbFQqdlp+ oDqtb+jsAWHBMD8b619uf1ZCW6coIpbhhn4Tgw/sHp8L7nz3pH2TpVIxA4h2oYDg 1gxlwIQ9oA21aScdMxIxbVHIQq0l+UlLY3Nj6sinRxRcTgc78M4VXz2/0GZdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQ9MSi2ZcpdiQkv5fVLSfEHT8Y6MwHwYDVR0j BBgwFoAUOOiVk487zs1I2at4lspECfb2xZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzAvMzhFODk1OTM4RjNCQ0VDRDQ4RDlBQjc4OTZDQTQ0MDlGNkY2QzU5RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09PaVZrNDg3enMxSTJhdDRsc3BFQ2Zi MnhaNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04 OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMC8zOEU4OTU5MzhGM0JDRUNENDhE OUFCNzg5NkNBNDQwOUY2RjZDNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/cfZ4X0wXjg/aKdVX9T Qj4+U5SaIqbGE5rtfQuMs6/TFrV2sbVuEHt4pwpaGp+ALV941fGBecPn0GkpHaxV 3iZYXmxOA9rAWtevKt/nchgCq39RXX55Fw4hXCyzLn5rAE4rspPq2CgvUe8r08LP QUjz9xEB3RmqejyGODT/woLulAmrvin6k052cR+ZTiFF6didmX3Nau436p0BJxXh qri8q3a3sIvWtMCDjljWowJeBOAFMu2CT7ii8nDq2uVd0U4cxjPC5UK/WKBy2KqD 64m6FFXPBWMwhptGu9NcvV/i/Lg4uADGuuMNkU0pmyG0pjRAmtjLGmrRy8BJalnx 6g== -----END CERTIFICATE-----Generated at Sat Dec 6 04:58:44 2025 by rpki-client