This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json) Hash identifier: eUbs1CXA09ENcCF86oC84vsRTdaGY74KxdUWZWr0KvA= Subject key identifier: A6:EB:3E:48:63:85:BC:A4:C1:84:2F:52:30:B2:DE:B6:C1:0A:77:43 Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e Certificate serial: 24BBB77A386D73280EBB76D3BF4397210D60F190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft Manifest number: B6 Signing time: Sun 07 Dec 2025 08:53:18 +0000 Manifest this update: Sun 07 Dec 2025 08:48:18 +0000 Manifest next update: Mon 08 Dec 2025 12:31:18 +0000 Files and hashes: 1: AS211575.asa (hash: nPJ1LprS9/u9GgaDNqu2HsXaB9B+xrAoBi5odzSyQpQ=) 2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: hMalCO+ZmukM74siOJBkIJ2yp9mtYgxCYo3XBXNNVXc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bb:b7:7a:38:6d:73:28:0e:bb:76:d3:bf:43:97:21:0d:60:f1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e Validity Not Before: Dec 7 08:48:18 2025 GMT Not After : Dec 8 12:31:18 2025 GMT Subject: CN=A6EB3E486385BCA4C1842F5230B2DEB6C10A7743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:a2:cf:c5:7f:bd:ca:2a:73:95:f4:02:14: 17:54:fa:7b:e5:f4:d6:2d:b5:0e:0e:7f:22:9d:ce: 67:09:55:18:8c:b8:ae:52:ab:d7:96:a9:52:9a:8a: 6d:78:1f:65:79:ee:04:04:33:42:0b:54:51:5f:3b: 00:8d:8a:ae:80:a3:01:80:ba:7d:7f:62:3c:9a:e7: d6:82:4b:f5:be:e5:cd:de:06:30:b8:67:33:86:56: 84:82:dd:5d:6f:17:dc:2e:b0:e4:85:56:01:11:74: 54:11:1e:43:45:f0:fe:69:49:92:93:f4:a2:42:76: 16:45:5f:ef:29:67:25:0d:aa:8f:6d:89:94:bc:61: 58:e2:e1:99:61:96:17:a7:0a:52:ad:75:1d:62:fe: 6c:03:ea:52:41:09:0f:ec:b8:c0:32:a1:0a:2b:0b: 7f:3a:34:10:8c:83:cf:0a:bf:f9:ee:56:d0:40:39: 8c:d4:25:fe:2e:47:28:33:0b:c6:8c:cf:30:d6:95: 88:83:f3:6f:84:93:ac:d1:66:4b:cc:a5:ff:88:c8: c9:2a:d9:18:3f:df:6e:3d:22:13:14:86:f4:0b:0c: da:52:dc:bf:f7:00:bd:e6:88:c5:3a:f3:f9:f1:2a: ba:de:7c:10:24:40:06:42:96:9e:3f:29:c7:7e:78: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:3E:48:63:85:BC:A4:C1:84:2F:52:30:B2:DE:B6:C1:0A:77:43 X509v3 Authority Key Identifier: keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:29:c4:57:3c:12:3d:4d:7a:3d:30:e5:9b:24:d4:5c:9c:fe: 61:2e:f3:3c:b4:b8:07:dc:75:b3:1d:fb:82:84:9a:e4:98:c3: 42:11:bf:3e:a1:03:69:9f:ab:9e:7d:0f:4f:d2:a2:2a:9f:04: b4:21:87:61:d7:1c:d1:f5:2b:08:32:d6:53:45:8a:d7:08:0d: d3:4d:4c:df:29:09:98:f4:90:78:cb:60:fa:c8:21:ea:16:6b: e9:53:14:b1:be:6d:98:d5:c1:cd:b5:ec:38:9a:33:2b:08:75: cd:20:53:3c:42:b6:47:4c:a1:82:6b:a1:0f:be:3b:e3:cf:51: d1:3f:64:a9:2b:fa:10:92:4e:90:04:ca:3d:5a:bd:f5:15:cf: 46:a6:75:c5:0f:e4:fa:34:42:35:59:60:dd:b4:dc:0c:b9:1c: 97:24:69:1e:8a:8d:a8:fc:34:34:90:47:87:58:9c:61:9e:0a: b2:a8:c6:da:05:28:84:c7:76:b9:ed:6e:2f:3d:d1:91:0e:38: fe:5d:b2:7d:e0:52:bb:2a:2e:52:d1:73:42:e8:35:56:a5:b0: c5:d5:57:4f:f7:3d:06:b2:c5:3e:08:6b:88:50:22:c0:be:f8: 07:3a:b5:ba:a1:cb:42:7e:98:f1:16:a1:e5:d5:f7:6f:65:8d: 3e:75:a4:80 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJLu3ejhtcygOu3bTv0OXIQ1g8ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhlODk1OTM4ZjNiY2VjZDQ4ZDlhYjc4OTZjYTQ0MDlm NmY2YzU5ZTAeFw0yNTEyMDcwODQ4MThaFw0yNTEyMDgxMjMxMThaMDMxMTAvBgNV BAMTKEE2RUIzRTQ4NjM4NUJDQTRDMTg0MkY1MjMwQjJERUI2QzEwQTc3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQxaLPxX+9yipzlfQCFBdU+nvl 9NYttQ4OfyKdzmcJVRiMuK5Sq9eWqVKaim14H2V57gQEM0ILVFFfOwCNiq6AowGA un1/Yjya59aCS/W+5c3eBjC4ZzOGVoSC3V1vF9wusOSFVgERdFQRHkNF8P5pSZKT 9KJCdhZFX+8pZyUNqo9tiZS8YVji4ZlhlhenClKtdR1i/mwD6lJBCQ/suMAyoQor C386NBCMg88Kv/nuVtBAOYzUJf4uRygzC8aMzzDWlYiD82+Ek6zRZkvMpf+IyMkq 2Rg/3249IhMUhvQLDNpS3L/3AL3miMU68/nxKrrefBAkQAZClp4/Kcd+eAdpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpus+SGOFvKTBhC9SMLLetsEKd0MwHwYDVR0j BBgwFoAUOOiVk487zs1I2at4lspECfb2xZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzAvMzhFODk1OTM4RjNCQ0VDRDQ4RDlBQjc4OTZDQTQ0MDlGNkY2QzU5RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09PaVZrNDg3enMxSTJhdDRsc3BFQ2Zi MnhaNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04 OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMC8zOEU4OTU5MzhGM0JDRUNENDhE OUFCNzg5NkNBNDQwOUY2RjZDNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCnEVzwSPU16PTDlmyTU XJz+YS7zPLS4B9x1sx37goSa5JjDQhG/PqEDaZ+rnn0PT9KiKp8EtCGHYdcc0fUr CDLWU0WK1wgN001M3ykJmPSQeMtg+sgh6hZr6VMUsb5tmNXBzbXsOJozKwh1zSBT PEK2R0yhgmuhD747489R0T9kqSv6EJJOkATKPVq99RXPRqZ1xQ/k+jRCNVlg3bTc DLkclyRpHoqNqPw0NJBHh1icYZ4KsqjG2gUohMd2ue1uLz3RkQ44/l2yfeBSuyou UtFzQug1VqWwxdVXT/c9BrLFPghriFAiwL74Bzq1uqHLQn6Y8Rah5dX3b2WNPnWk gA== -----END CERTIFICATE-----Generated at Sun Dec 7 14:42:51 2025 by rpki-client