This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json) Hash identifier: lstuuKmgl3rzOYf12Ocwd/ZAohzGpzECZDhURvoCBVg= Subject key identifier: 52:19:61:A1:A4:29:F2:41:3F:C2:62:C3:0E:96:89:3A:FB:87:07:43 Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e Certificate serial: 1BD5931067E1A462EF2AC3690AD31D9E7A46D390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft Manifest number: FC Signing time: Sun 25 Jan 2026 12:19:41 +0000 Manifest this update: Sun 25 Jan 2026 12:14:41 +0000 Manifest next update: Mon 26 Jan 2026 14:37:41 +0000 Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: QvWGekkTdAET8eJpWQc2nXp3Pk0P0dWgSE/2GypafZ4=) 2: AS211575.asa (hash: HGOQYjY8FnmDlA1OVJPNtP4L08SkfuavIEpvVMnQpx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d5:93:10:67:e1:a4:62:ef:2a:c3:69:0a:d3:1d:9e:7a:46:d3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e Validity Not Before: Jan 25 12:14:41 2026 GMT Not After : Jan 26 14:37:41 2026 GMT Subject: CN=521961A1A429F2413FC262C30E96893AFB870743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:df:31:6f:a6:83:95:a7:bd:fe:cf:78:e4: 53:b1:f4:77:1b:f0:7a:b7:99:b7:53:bf:32:93:8c: b7:d8:00:9c:dd:5a:13:ec:d0:2a:72:6d:9f:b3:b7: 83:81:81:8c:13:b2:14:4d:11:df:60:24:fa:23:78: ff:41:27:ce:fb:70:a0:15:3b:1a:35:bf:9b:93:cb: 0d:8b:b1:0a:0a:d8:c8:fe:90:0e:27:06:d5:e3:cd: 7e:3b:ae:1b:08:e7:fe:d9:08:65:8a:7d:b7:4a:a8: fa:28:d4:e6:2c:6e:cc:b1:29:33:b2:4b:e7:33:b2: a2:33:4e:78:b4:08:61:6e:d2:75:8d:4d:c3:5c:66: aa:9e:b6:0f:aa:6c:8e:b9:3d:51:81:d7:a2:ea:d5: 0d:e2:a4:57:7c:6a:9e:c2:4f:e9:72:06:80:8b:41: 7d:0b:23:c1:2c:7c:d1:1b:0d:69:24:d3:81:0b:d7: c9:8e:15:ce:ee:e1:1c:db:66:ee:59:a3:fa:ac:97: 20:aa:ee:c3:87:af:7a:7a:a7:3d:29:dc:bd:34:b0: 77:79:2b:cb:df:67:34:29:e8:9f:69:05:86:ee:c7: 31:ca:55:8e:3b:93:4a:00:c7:04:da:80:6d:6c:9c: 7d:c9:d2:79:b9:24:6f:75:a8:4d:3d:a9:d2:7b:70: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:61:A1:A4:29:F2:41:3F:C2:62:C3:0E:96:89:3A:FB:87:07:43 X509v3 Authority Key Identifier: keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2f:5f:b7:d6:ed:21:10:8b:c9:77:3d:02:ef:99:32:9a:8e: ed:bb:e0:7f:e3:1b:4b:81:b5:85:e2:22:98:4a:ef:a5:9f:59: ae:4e:2e:ea:05:a6:b9:ba:0e:cb:1d:3e:5c:27:80:94:67:30: 75:5d:a3:44:99:1a:ba:b1:ca:fb:e2:39:d6:31:85:ba:df:44: 86:df:dc:68:fe:07:f3:f8:c1:41:9b:ca:ed:aa:50:11:e4:7e: 14:82:28:5b:f6:58:a8:48:5e:3a:d8:ea:54:07:08:36:d2:71: 15:7d:32:ed:64:ab:b0:40:a4:20:d9:fd:31:ab:d2:10:c5:6c: b0:cd:ba:e4:e4:cc:1d:bc:67:2f:31:81:5a:ae:14:ec:40:91: 8d:3d:fa:47:0b:4d:db:21:04:3b:97:51:72:ef:ad:5f:bc:94: da:cf:ed:fd:96:ce:89:b9:8d:d5:e5:26:47:a0:33:cc:d5:19: a9:de:aa:31:a3:ec:5d:a9:e6:5c:cc:90:35:23:67:8f:32:76: f6:c5:68:32:f3:da:fd:cf:28:fc:c3:d8:46:05:e8:fc:ab:25: 87:8f:ee:c4:90:dc:48:b1:c5:a1:d1:01:a6:0a:b0:5b:0f:78: c0:e2:a9:9a:ed:b8:ae:89:a9:69:32:55:48:95:a4:67:b3:57: 67:0b:b7:33 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG9WTEGfhpGLvKsNpCtMdnnpG05AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhlODk1OTM4ZjNiY2VjZDQ4ZDlhYjc4OTZjYTQ0MDlm NmY2YzU5ZTAeFw0yNjAxMjUxMjE0NDFaFw0yNjAxMjYxNDM3NDFaMDMxMTAvBgNV BAMTKDUyMTk2MUExQTQyOUYyNDEzRkMyNjJDMzBFOTY4OTNBRkI4NzA3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtt8xb6aDlae9/s945FOx9Hcb 8Hq3mbdTvzKTjLfYAJzdWhPs0CpybZ+zt4OBgYwTshRNEd9gJPojeP9BJ877cKAV Oxo1v5uTyw2LsQoK2Mj+kA4nBtXjzX47rhsI5/7ZCGWKfbdKqPoo1OYsbsyxKTOy S+czsqIzTni0CGFu0nWNTcNcZqqetg+qbI65PVGB16Lq1Q3ipFd8ap7CT+lyBoCL QX0LI8EsfNEbDWkk04EL18mOFc7u4RzbZu5Zo/qslyCq7sOHr3p6pz0p3L00sHd5 K8vfZzQp6J9pBYbuxzHKVY47k0oAxwTagG1snH3J0nm5JG91qE09qdJ7cHw3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUhlhoaQp8kE/wmLDDpaJOvuHB0MwHwYDVR0j BBgwFoAUOOiVk487zs1I2at4lspECfb2xZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzAvMzhFODk1OTM4RjNCQ0VDRDQ4RDlBQjc4OTZDQTQ0MDlGNkY2QzU5RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09PaVZrNDg3enMxSTJhdDRsc3BFQ2Zi MnhaNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04 OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMC8zOEU4OTU5MzhGM0JDRUNENDhE OUFCNzg5NkNBNDQwOUY2RjZDNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC9ft9btIRCLyXc9Au+Z MpqO7bvgf+MbS4G1heIimErvpZ9Zrk4u6gWmuboOyx0+XCeAlGcwdV2jRJkaurHK ++I51jGFut9Eht/caP4H8/jBQZvK7apQEeR+FIIoW/ZYqEheOtjqVAcINtJxFX0y 7WSrsECkINn9MavSEMVssM265OTMHbxnLzGBWq4U7ECRjT36RwtN2yEEO5dRcu+t X7yU2s/t/ZbOibmN1eUmR6AzzNUZqd6qMaPsXanmXMyQNSNnjzJ29sVoMvPa/c8o /MPYRgXo/Kslh4/uxJDcSLHFodEBpgqwWw94wOKpmu24rompaTJVSJWkZ7NXZwu3 Mw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:36 2026 by rpki-client