This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
File:                     381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft (raw, json)
Hash identifier:          9T5nZwX6rT6tBH4vimrq5GmVsVTDhkubWP3FfyRmcAM=
Subject key identifier:   C2:6D:25:09:74:67:BA:D3:2A:D4:51:EB:2A:19:2E:6F:86:76:61:70
Authority key identifier: 38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C
Certificate issuer:       /CN=381f31477a36f187b7d3db8af4d9b349e8486f5c
Certificate serial:       53ACD546FE3E738C07FE7BE117EDBA137CC85CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
Manifest number:          04
Signing time:             Fri 26 Dec 2025 01:29:19 +0000
Manifest this update:     Fri 26 Dec 2025 01:24:19 +0000
Manifest next update:     Sat 27 Dec 2025 04:10:19 +0000
Files and hashes:         1: 381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl (hash: UWDyoWh59hIaBIc6KWJ8vrcgmqwOQ5utBrTdrWmq5wM=)
                          2: AS210773.asa (hash: r6i5G6kjAFc8UY/TRtXWWrHAB0jZ9ypM41IdntCI4kQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 04:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ac:d5:46:fe:3e:73:8c:07:fe:7b:e1:17:ed:ba:13:7c:c8:5c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381f31477a36f187b7d3db8af4d9b349e8486f5c
        Validity
            Not Before: Dec 26 01:24:19 2025 GMT
            Not After : Dec 27 04:10:19 2025 GMT
        Subject: CN=C26D25097467BAD32AD451EB2A192E6F86766170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:32:fd:63:6b:70:cd:d0:ff:66:52:91:00:
                    77:8f:3c:af:41:b2:a9:b1:5b:f3:8c:08:a3:2e:1a:
                    63:91:76:15:87:95:0f:48:0d:97:24:77:48:f2:10:
                    9f:72:53:01:40:e4:78:16:de:83:62:9a:d6:30:18:
                    1e:bb:b6:27:81:6c:88:6d:52:f2:0b:8a:36:da:04:
                    91:5e:58:63:dc:22:3c:72:7c:af:0d:3e:d2:3a:ee:
                    c2:ce:b4:4f:bc:76:a6:57:9b:f3:1e:52:f7:4c:c3:
                    7b:4f:89:ba:54:0d:4e:5e:0b:9b:aa:58:11:03:e8:
                    87:93:8f:3a:4f:97:7d:f6:88:32:03:f8:2e:ac:78:
                    04:2e:7f:4a:29:5d:41:a9:08:54:29:c2:de:93:50:
                    ec:c6:1e:54:aa:68:2b:30:5b:69:86:b1:0d:e0:37:
                    ed:e3:fc:93:b0:11:0c:b6:f6:36:34:01:a9:d6:c5:
                    3a:85:f7:f9:bc:15:30:d9:1d:6b:b6:b1:32:6c:85:
                    31:7e:6a:20:65:2f:11:b5:77:6f:16:6d:06:28:31:
                    2a:05:b4:4d:b6:2e:29:3c:be:f7:bb:bb:5a:51:5c:
                    b8:bf:4a:e1:45:9a:5d:36:43:83:43:35:fe:1c:7c:
                    67:56:aa:4a:fc:90:cf:58:e7:9d:34:dc:6f:09:e1:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:25:09:74:67:BA:D3:2A:D4:51:EB:2A:19:2E:6F:86:76:61:70
            X509v3 Authority Key Identifier:
                keyid:38:1F:31:47:7A:36:F1:87:B7:D3:DB:8A:F4:D9:B3:49:E8:48:6F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OB8xR3o28Ye309uK9NmzSehIb1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38fda7c1-9fb5-4551-b6ca-f957eb0742df/1/381F31477A36F187B7D3DB8AF4D9B349E8486F5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:00:92:b9:d5:35:26:78:1f:1c:6c:e8:f4:1a:7d:f7:08:
         37:5c:09:f7:e3:23:72:8c:07:44:08:f2:d5:dc:d6:3d:63:f5:
         9e:01:89:19:39:6d:99:4a:bd:f1:fb:51:10:e4:6c:3b:60:d7:
         27:b1:ec:4e:02:91:92:19:af:bb:11:b7:f5:69:3e:2a:b6:ed:
         62:e6:e6:4b:48:9c:ef:19:39:9f:03:30:d1:05:50:21:6c:d4:
         bd:51:bd:8b:b1:01:43:34:ab:1e:78:59:b0:6b:9e:6f:02:c3:
         e0:ff:8f:3f:1d:91:65:7b:85:59:ed:fa:69:67:f4:98:2f:bd:
         14:d3:1b:d3:5a:82:bb:93:c4:26:ae:1d:d4:db:9d:87:f1:95:
         dd:53:c4:81:40:59:85:db:4c:a4:33:f2:fa:09:7e:26:9a:77:
         81:42:0b:e3:50:be:a8:cc:5e:eb:6d:e4:0a:38:0c:dc:9f:1a:
         6e:7b:4b:00:5b:61:af:d5:af:ff:58:f6:cc:d9:8f:ed:6a:96:
         5d:ed:50:18:32:98:fe:d3:f4:a4:4f:2b:5b:60:fa:95:e3:75:
         77:37:d7:97:dc:e6:7f:4e:40:35:11:f1:14:3a:88:b8:f8:84:
         5e:3a:32:ef:76:16:9c:64:4c:ba:30:65:db:ea:98:ce:a1:bf:
         ec:9c:ca:b7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUU6zVRv4+c4wH/nvhF+26E3zIXK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgxZjMxNDc3YTM2ZjE4N2I3ZDNkYjhhZjRkOWIzNDll
ODQ4NmY1YzAeFw0yNTEyMjYwMTI0MTlaFw0yNTEyMjcwNDEwMTlaMDMxMTAvBgNV
BAMTKEMyNkQyNTA5NzQ2N0JBRDMyQUQ0NTFFQjJBMTkyRTZGODY3NjYxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViTL9Y2twzdD/ZlKRAHePPK9B
sqmxW/OMCKMuGmORdhWHlQ9IDZckd0jyEJ9yUwFA5HgW3oNimtYwGB67tieBbIht
UvILijbaBJFeWGPcIjxyfK8NPtI67sLOtE+8dqZXm/MeUvdMw3tPibpUDU5eC5uq
WBED6IeTjzpPl332iDID+C6seAQuf0opXUGpCFQpwt6TUOzGHlSqaCswW2mGsQ3g
N+3j/JOwEQy29jY0AanWxTqF9/m8FTDZHWu2sTJshTF+aiBlLxG1d28WbQYoMSoF
tE22Lik8vve7u1pRXLi/SuFFml02Q4NDNf4cfGdWqkr8kM9Y55003G8J4TulAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwm0lCXRnutMq1FHrKhkub4Z2YXAwHwYDVR0j
BBgwFoAUOB8xR3o28Ye309uK9NmzSehIb1wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzhmZGE3YzEtOWZiNS00NTUxLWI2Y2EtZjk1N2ViMDc0
MmRmLzEvMzgxRjMxNDc3QTM2RjE4N0I3RDNEQjhBRjREOUIzNDlFODQ4NkY1Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09COHhSM28yOFllMzA5dUs5Tm16U2Vo
SWIxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zOGZkYTdjMS05
ZmI1LTQ1NTEtYjZjYS1mOTU3ZWIwNzQyZGYvMS8zODFGMzE0NzdBMzZGMTg3QjdE
M0RCOEFGNEQ5QjM0OUU4NDg2RjVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL8AkrnVNSZ4Hxxs6PQa
ffcIN1wJ9+MjcowHRAjy1dzWPWP1ngGJGTltmUq98ftREORsO2DXJ7HsTgKRkhmv
uxG39Wk+KrbtYubmS0ic7xk5nwMw0QVQIWzUvVG9i7EBQzSrHnhZsGuebwLD4P+P
Px2RZXuFWe36aWf0mC+9FNMb01qCu5PEJq4d1Nudh/GV3VPEgUBZhdtMpDPy+gl+
Jpp3gUIL41C+qMxe623kCjgM3J8abntLAFthr9Wv/1j2zNmP7WqWXe1QGDKY/tP0
pE8rW2D6leN1dzfXl9zmf05ANRHxFDqIuPiEXjoy73YWnGRMujBl2+qYzqG/7JzK
tw==
-----END CERTIFICATE-----
Generated at Fri Dec 26 15:42:26 2025 by rpki-client