This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
File: 381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft (raw, json)
Hash identifier: 9T5nZwX6rT6tBH4vimrq5GmVsVTDhkubWP3FfyRmcAM=
Subject key identifier: C2:6D:25:09:74:67:BA:D3:2A:D4:51:EB:2A:19:2E:6F:86:76:61:70
Authority key identifier: 38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C
Certificate issuer: /CN=381f31477a36f187b7d3db8af4d9b349e8486f5c
Certificate serial: 53ACD546FE3E738C07FE7BE117EDBA137CC85CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
Manifest number: 04
Signing time: Fri 26 Dec 2025 01:29:19 +0000
Manifest this update: Fri 26 Dec 2025 01:24:19 +0000
Manifest next update: Sat 27 Dec 2025 04:10:19 +0000
Files and hashes: 1: 381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl (hash: UWDyoWh59hIaBIc6KWJ8vrcgmqwOQ5utBrTdrWmq5wM=)
2: AS210773.asa (hash: r6i5G6kjAFc8UY/TRtXWWrHAB0jZ9ypM41IdntCI4kQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl
rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 04:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ac:d5:46:fe:3e:73:8c:07:fe:7b:e1:17:ed:ba:13:7c:c8:5c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381f31477a36f187b7d3db8af4d9b349e8486f5c
Validity
Not Before: Dec 26 01:24:19 2025 GMT
Not After : Dec 27 04:10:19 2025 GMT
Subject: CN=C26D25097467BAD32AD451EB2A192E6F86766170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:32:fd:63:6b:70:cd:d0:ff:66:52:91:00:
77:8f:3c:af:41:b2:a9:b1:5b:f3:8c:08:a3:2e:1a:
63:91:76:15:87:95:0f:48:0d:97:24:77:48:f2:10:
9f:72:53:01:40:e4:78:16:de:83:62:9a:d6:30:18:
1e:bb:b6:27:81:6c:88:6d:52:f2:0b:8a:36:da:04:
91:5e:58:63:dc:22:3c:72:7c:af:0d:3e:d2:3a:ee:
c2:ce:b4:4f:bc:76:a6:57:9b:f3:1e:52:f7:4c:c3:
7b:4f:89:ba:54:0d:4e:5e:0b:9b:aa:58:11:03:e8:
87:93:8f:3a:4f:97:7d:f6:88:32:03:f8:2e:ac:78:
04:2e:7f:4a:29:5d:41:a9:08:54:29:c2:de:93:50:
ec:c6:1e:54:aa:68:2b:30:5b:69:86:b1:0d:e0:37:
ed:e3:fc:93:b0:11:0c:b6:f6:36:34:01:a9:d6:c5:
3a:85:f7:f9:bc:15:30:d9:1d:6b:b6:b1:32:6c:85:
31:7e:6a:20:65:2f:11:b5:77:6f:16:6d:06:28:31:
2a:05:b4:4d:b6:2e:29:3c:be:f7:bb:bb:5a:51:5c:
b8:bf:4a:e1:45:9a:5d:36:43:83:43:35:fe:1c:7c:
67:56:aa:4a:fc:90:cf:58:e7:9d:34:dc:6f:09:e1:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:25:09:74:67:BA:D3:2A:D4:51:EB:2A:19:2E:6F:86:76:61:70
X509v3 Authority Key Identifier:
keyid:38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bf:00:92:b9:d5:35:26:78:1f:1c:6c:e8:f4:1a:7d:f7:08:
37:5c:09:f7:e3:23:72:8c:07:44:08:f2:d5:dc:d6:3d:63:f5:
9e:01:89:19:39:6d:99:4a:bd:f1:fb:51:10:e4:6c:3b:60:d7:
27:b1:ec:4e:02:91:92:19:af:bb:11:b7:f5:69:3e:2a:b6:ed:
62:e6:e6:4b:48:9c:ef:19:39:9f:03:30:d1:05:50:21:6c:d4:
bd:51:bd:8b:b1:01:43:34:ab:1e:78:59:b0:6b:9e:6f:02:c3:
e0:ff:8f:3f:1d:91:65:7b:85:59:ed:fa:69:67:f4:98:2f:bd:
14:d3:1b:d3:5a:82:bb:93:c4:26:ae:1d:d4:db:9d:87:f1:95:
dd:53:c4:81:40:59:85:db:4c:a4:33:f2:fa:09:7e:26:9a:77:
81:42:0b:e3:50:be:a8:cc:5e:eb:6d:e4:0a:38:0c:dc:9f:1a:
6e:7b:4b:00:5b:61:af:d5:af:ff:58:f6:cc:d9:8f:ed:6a:96:
5d:ed:50:18:32:98:fe:d3:f4:a4:4f:2b:5b:60:fa:95:e3:75:
77:37:d7:97:dc:e6:7f:4e:40:35:11:f1:14:3a:88:b8:f8:84:
5e:3a:32:ef:76:16:9c:64:4c:ba:30:65:db:ea:98:ce:a1:bf:
ec:9c:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:42:26 2025 by rpki-client