This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: WK/a+60LtgvGRH3ZBXfqBM7JnhGzJhwgHq+aLr6Ycq8= Subject key identifier: 04:D3:10:D0:0E:B8:59:02:B4:FC:72:F8:52:F1:56:11:B9:07:3B:4F Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 181DC747A5E7B9B4EDE74A1744028D3C3717B167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 023A Signing time: Sun 25 Jan 2026 09:15:23 +0000 Manifest this update: Sun 25 Jan 2026 09:10:23 +0000 Manifest next update: Mon 26 Jan 2026 10:49:23 +0000 Files and hashes: 1: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 2: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 3: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 4: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 5: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 6: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: UYaKX44mlNQT8XCq/Bck+gJZRlauG8TmYsvNELrMbF8=) 7: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 8: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 9: 33312e3138352e3130352e302f32342d3234203d3e20343031373736.roa (hash: Wd2EFVccIS+53JZc9dBxMvZJP/AX4kzECnJdx5FY1Nk=) 10: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 11: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 12: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 13: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 14: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 15: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (hash: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I=) 16: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 17: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 18: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 19: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=) 20: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 21: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1d:c7:47:a5:e7:b9:b4:ed:e7:4a:17:44:02:8d:3c:37:17:b1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jan 25 09:10:23 2026 GMT Not After : Jan 26 10:49:23 2026 GMT Subject: CN=04D310D00EB85902B4FC72F852F15611B9073B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:dd:51:1f:c0:ff:8d:cc:d8:a9:7b:a2:e5: 4a:b9:55:fc:c1:76:18:6f:23:89:24:1f:bd:af:c8: be:1f:3e:61:c8:5a:23:a1:a2:96:9f:41:b4:68:e3: d3:41:11:13:81:40:97:50:9a:02:31:db:53:b0:e4: cb:fd:e2:a4:0f:e8:87:8a:76:aa:32:a1:db:55:54: 5f:b1:fa:7d:a9:a3:58:2c:2c:bf:6e:2c:b8:98:e1: d7:77:3f:df:78:97:fa:f8:01:c2:ab:a2:c6:78:b9: 7a:f0:c8:17:14:a3:ae:5b:be:b5:98:71:8a:d4:57: c5:cd:6b:cf:c8:29:a2:13:32:e5:a0:36:88:f8:8b: 22:45:5a:a5:e0:70:a5:2f:ff:0e:21:2e:32:cc:9d: 0f:07:f5:54:02:99:b9:14:68:98:ab:03:db:15:42: dd:17:20:b3:ad:30:6e:e9:81:bc:2b:ea:25:d6:db: 1b:7f:e5:00:c7:9f:b4:30:8d:ee:f1:34:ef:34:ed: 5f:b3:e0:d1:56:27:35:cc:39:f5:66:59:18:5f:22: 4a:52:d2:6a:85:97:28:93:94:ca:78:ab:e6:40:65: 5b:7c:ab:54:05:94:e6:7c:20:3f:ae:ad:0d:60:48: 84:5d:f3:a0:69:c5:49:ca:50:89:91:f6:22:dd:05: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D3:10:D0:0E:B8:59:02:B4:FC:72:F8:52:F1:56:11:B9:07:3B:4F X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2d:c8:7d:89:f4:26:77:99:5d:09:d5:d5:82:77:d6:f1:ea: e2:91:c7:ad:a4:aa:a7:49:e1:06:b5:33:fb:0b:bc:4f:c8:8d: da:7c:2b:40:b4:b1:03:a6:b9:59:91:bc:2e:26:21:d3:88:41: ab:39:fb:66:81:53:e4:2b:d4:c7:6a:46:9c:40:6b:2c:59:d3: aa:18:d3:68:3f:f3:ca:1a:d0:2e:45:0c:7d:d6:c3:70:d3:26: fb:73:e9:81:3b:f1:e7:4e:b7:0d:e4:b6:fc:4e:6f:9e:c7:b5: 21:ce:5a:97:5e:24:3c:c0:de:33:4d:35:bc:3a:8e:f2:8d:7b: 0e:66:b3:7f:38:b1:c8:9a:ba:ba:44:de:ea:eb:8a:50:d1:91: f5:ca:9a:50:f3:f1:61:82:11:db:3e:cb:06:22:1c:c9:31:bb: 8b:2a:23:d7:72:50:4e:fb:3f:dd:9f:01:cb:2d:5c:85:b5:4a: 5f:54:95:74:98:fe:44:b7:dc:a5:cd:b6:23:f7:f1:e6:91:7b: b8:1d:2d:6b:0a:d0:13:84:8d:a4:09:bf:2d:b1:a6:e6:75:f7: 84:ea:c0:26:39:8b:83:7c:e8:0f:40:8d:17:c2:7a:f1:b7:55: 25:b2:53:56:3e:71:80:76:9a:17:93:63:99:77:a6:29:83:a5: c1:13:4d:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGB3HR6XnubTt50oXRAKNPDcXsWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjAxMjUwOTEwMjNaFw0yNjAxMjYxMDQ5MjNaMDMxMTAvBgNV BAMTKDA0RDMxMEQwMEVCODU5MDJCNEZDNzJGODUyRjE1NjExQjkwNzNCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqN1RH8D/jczYqXui5Uq5VfzB dhhvI4kkH72vyL4fPmHIWiOhopafQbRo49NBEROBQJdQmgIx21Ow5Mv94qQP6IeK dqoyodtVVF+x+n2po1gsLL9uLLiY4dd3P994l/r4AcKrosZ4uXrwyBcUo65bvrWY cYrUV8XNa8/IKaITMuWgNoj4iyJFWqXgcKUv/w4hLjLMnQ8H9VQCmbkUaJirA9sV Qt0XILOtMG7pgbwr6iXW2xt/5QDHn7Qwje7xNO807V+z4NFWJzXMOfVmWRhfIkpS 0mqFlyiTlMp4q+ZAZVt8q1QFlOZ8ID+urQ1gSIRd86BpxUnKUImR9iLdBUgdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBNMQ0A64WQK0/HL4UvFWEbkHO08wHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi3IfYn0JneZXQnV1YJ3 1vHq4pHHraSqp0nhBrUz+wu8T8iN2nwrQLSxA6a5WZG8LiYh04hBqzn7ZoFT5CvU x2pGnEBrLFnTqhjTaD/zyhrQLkUMfdbDcNMm+3PpgTvx5063DeS2/E5vnse1Ic5a l14kPMDeM001vDqO8o17DmazfzixyJq6ukTe6uuKUNGR9cqaUPPxYYIR2z7LBiIc yTG7iyoj13JQTvs/3Z8Byy1chbVKX1SVdJj+RLfcpc22I/fx5pF7uB0tawrQE4SN pAm/LbGm5nX3hOrAJjmLg3zoD0CNF8J68bdVJbJTVj5xgHaaF5NjmXemKYOlwRNN /A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:08:15 2026 by rpki-client