This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier: ZNRzMEn9D+yWXvfWYBLszuDttRYCIjj+RWAWxFTOaVk=
Subject key identifier: 5A:BA:0F:56:D0:98:7A:A9:73:19:7A:BC:95:4E:A1:AF:0E:96:98:CA
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 22F79715969F135038F03DCE4B3ACFAA71782559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number: 01F6
Signing time: Sat 06 Dec 2025 03:36:17 +0000
Manifest this update: Sat 06 Dec 2025 03:31:17 +0000
Manifest next update: Sun 07 Dec 2025 06:36:17 +0000
Files and hashes: 1: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
2: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
3: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
4: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
5: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=)
6: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
7: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
8: 33312e3138352e3130352e302f32342d3234203d3e20343031373736.roa (hash: Wd2EFVccIS+53JZc9dBxMvZJP/AX4kzECnJdx5FY1Nk=)
9: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
10: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
11: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=)
12: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
13: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=)
14: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
15: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
16: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
17: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
18: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
19: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (hash: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I=)
20: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
21: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 87xoU2nuislCp0NQb5D1UlXPx+voq9yXgGXJnlfxNr8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 06:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f7:97:15:96:9f:13:50:38:f0:3d:ce:4b:3a:cf:aa:71:78:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Dec 6 03:31:17 2025 GMT
Not After : Dec 7 06:36:17 2025 GMT
Subject: CN=5ABA0F56D0987AA973197ABC954EA1AF0E9698CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:25:ff:17:56:89:35:00:2a:44:89:e2:5f:
23:c4:70:ea:4b:b6:d7:48:ae:77:a7:f5:5e:d5:e1:
d2:bc:18:b0:01:46:71:1a:1f:86:1e:a6:73:f7:d7:
6f:6b:a5:b7:5e:6c:43:23:0a:d5:19:1d:1e:3b:e7:
d6:7a:ec:77:4f:68:d1:5b:9d:03:71:1d:4b:49:d3:
d0:9e:ab:28:1b:75:6a:93:8f:12:3f:78:f2:86:2f:
11:62:d5:58:85:c2:b1:f3:50:32:b3:3c:50:2c:27:
0b:9e:e7:26:f2:04:85:83:cc:76:64:b2:7c:55:16:
0e:e6:c3:0d:b2:13:df:66:a7:6b:c2:8a:40:1a:17:
b6:e6:8b:5f:9f:86:9e:28:f9:39:8f:66:29:bc:37:
c0:57:ca:88:ec:00:5e:b0:3b:ed:27:47:fa:6f:ba:
4a:77:67:7b:87:8b:66:76:de:4f:78:cc:83:0d:2b:
73:50:f8:09:e7:0c:02:9e:09:3f:d1:31:c5:c6:49:
22:f3:1e:fd:a1:73:79:8b:94:f8:be:b0:37:cf:21:
c2:b9:27:aa:94:5a:24:bf:a3:af:8f:99:71:87:2a:
9f:08:b9:6c:25:7e:20:e0:64:26:7c:62:bc:c6:12:
4e:2d:c7:47:a5:05:f6:98:79:c7:f6:fa:75:92:d3:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BA:0F:56:D0:98:7A:A9:73:19:7A:BC:95:4E:A1:AF:0E:96:98:CA
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6d:be:c9:5a:e3:00:38:8e:38:7e:24:50:70:2a:90:b4:6e:
4e:d3:8f:09:79:e4:1c:1d:99:51:9a:3e:bc:85:fb:81:e2:1b:
0a:76:5a:8d:d6:a6:7a:4d:eb:2e:19:f9:48:f5:19:8a:8f:f6:
b6:a5:c5:5d:ff:8b:c7:a7:5d:2b:39:a1:ed:e1:ce:9c:5a:52:
31:bd:6f:48:14:f7:7c:73:89:ef:c2:4f:3f:d0:4f:c9:81:ed:
04:bc:dc:e4:29:d8:c8:63:d3:32:d0:e8:0a:52:ce:60:cc:f7:
6c:1f:dd:46:39:b7:dc:bd:20:b7:7d:e2:dd:19:3b:73:af:73:
5b:2f:a8:48:a6:69:d7:e3:48:bb:e6:f2:25:b4:50:2d:2e:e9:
68:94:26:1e:cc:ab:88:62:47:de:30:43:2f:08:79:d9:63:02:
3f:46:40:e9:44:90:f0:d6:74:db:3c:c0:13:91:1c:94:c3:4e:
bc:64:5d:30:69:59:6c:ec:56:f9:8d:9f:d2:1e:d8:03:b1:c4:
ed:9d:e5:30:04:e9:32:75:b6:c5:d4:47:56:2a:c1:10:d5:b0:
41:64:8a:a6:d0:66:ed:1a:46:96:27:e6:0a:92:c5:6a:c6:5a:
7c:5f:94:69:44:4e:f8:f4:56:94:43:90:c8:8d:17:47:ee:35:
02:3b:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:48 2025 by rpki-client