This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: ZSZcpc/My0wDgZq27rAfv1HbNwnRqGHv7cIZqANPjaQ=
Subject key identifier: 32:6A:40:79:6B:3D:F2:FB:B4:42:3E:D8:F9:F9:89:1B:4F:D9:A9:9D
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 24182ECC7530F32240CDBC9DF791456D20C9ADD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: FD
Signing time: Mon 26 Jan 2026 06:39:53 +0000
Manifest this update: Mon 26 Jan 2026 06:34:53 +0000
Manifest next update: Tue 27 Jan 2026 06:54:53 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: dNvGgDSgN6JBc7D3xZpWTVKjrVpUXg83mBcuPwAPZEo=)
2: AS211575.asa (hash: HGOQYjY8FnmDlA1OVJPNtP4L08SkfuavIEpvVMnQpx8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:18:2e:cc:75:30:f3:22:40:cd:bc:9d:f7:91:45:6d:20:c9:ad:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Jan 26 06:34:53 2026 GMT
Not After : Jan 27 06:54:53 2026 GMT
Subject: CN=326A40796B3DF2FBB4423ED8F9F9891B4FD9A99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:86:8d:a1:43:68:07:5f:53:13:20:15:af:
1a:0b:72:46:38:04:9a:42:7f:4b:e7:71:42:58:dc:
74:14:8c:02:be:b4:03:bf:1c:22:bf:8d:f9:f8:92:
13:94:fa:29:dd:31:ea:62:17:95:0e:c9:9d:bb:7c:
3c:7c:cd:2e:6f:76:e4:4f:13:00:49:21:4e:d2:ed:
a2:0c:ad:cb:bc:b3:0d:cd:7f:59:97:ac:65:b8:02:
2e:81:91:e0:49:67:c6:10:69:6d:2f:85:19:b2:fb:
ad:49:7f:35:c7:20:53:ad:08:1e:1f:34:25:05:77:
02:8e:ba:26:3a:2f:c6:78:38:85:13:0d:dd:b6:4d:
f3:71:ed:5b:8e:0f:78:45:8d:4e:92:a7:59:ec:2f:
45:37:15:75:73:eb:30:d2:6f:33:bb:14:f0:15:eb:
99:13:d8:8a:c5:bb:58:f8:d6:74:fa:c9:c5:7a:08:
f7:43:bb:02:d1:a6:35:f0:74:44:43:d8:d7:75:8f:
82:7e:77:c9:28:09:0e:6a:45:03:7b:ce:63:6e:94:
09:b9:7a:f2:ac:c6:2d:a5:a4:5a:35:8a:99:28:45:
e8:e6:31:69:9e:de:49:d4:51:99:5b:f6:fc:c9:d5:
ff:89:00:fe:56:81:04:59:0d:53:86:b1:34:71:ce:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:40:79:6B:3D:F2:FB:B4:42:3E:D8:F9:F9:89:1B:4F:D9:A9:9D
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7d:e1:e6:4b:28:92:cb:b6:a2:77:9d:b4:76:1d:1a:e1:bf:
24:6c:d8:a2:6c:a5:6d:d2:3d:cd:4e:5f:63:e0:5f:f2:1b:29:
9b:64:57:80:42:3f:83:58:75:b9:e2:25:cf:9b:3f:63:0d:e3:
9f:5b:1d:26:76:02:0a:8a:c5:f9:e0:b8:1b:07:69:3f:64:1c:
08:8c:b2:ca:db:bd:04:c2:c6:aa:0d:96:af:fa:a3:97:3e:04:
dd:6f:ef:26:2f:17:92:89:eb:88:44:3b:b1:92:f3:71:cc:5b:
d3:33:ba:4b:57:fb:e5:a5:97:a5:46:55:9c:55:b2:f7:45:45:
e7:fd:f6:0c:dd:eb:f7:8d:b3:a5:7f:3b:29:96:d6:6d:cb:7e:
40:7a:df:41:fb:ac:6e:7a:7c:7a:eb:e8:c9:a0:9c:12:95:9a:
91:3a:0f:ce:15:83:d3:3e:94:7d:71:94:13:e1:22:9a:ea:bc:
aa:cb:8d:64:d8:9c:08:1c:59:a8:9e:b3:17:03:6a:6b:ec:2c:
48:d4:8f:83:b0:a0:39:aa:58:e5:3c:35:aa:16:50:5b:f0:f6:
4a:37:10:8d:c4:0b:15:a2:a5:43:98:d8:82:88:fd:05:1c:07:
e6:4f:4d:a1:a1:08:bb:0a:64:af:32:68:cd:38:9e:7a:0e:e6:
a3:e3:3e:ef
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJBguzHUw8yJAzbyd95FFbSDJrdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhlODk1OTM4ZjNiY2VjZDQ4ZDlhYjc4OTZjYTQ0MDlm
NmY2YzU5ZTAeFw0yNjAxMjYwNjM0NTNaFw0yNjAxMjcwNjU0NTNaMDMxMTAvBgNV
BAMTKDMyNkE0MDc5NkIzREYyRkJCNDQyM0VEOEY5Rjk4OTFCNEZEOUE5OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIyIaNoUNoB19TEyAVrxoLckY4
BJpCf0vncUJY3HQUjAK+tAO/HCK/jfn4khOU+indMepiF5UOyZ27fDx8zS5vduRP
EwBJIU7S7aIMrcu8sw3Nf1mXrGW4Ai6BkeBJZ8YQaW0vhRmy+61JfzXHIFOtCB4f
NCUFdwKOuiY6L8Z4OIUTDd22TfNx7VuOD3hFjU6Sp1nsL0U3FXVz6zDSbzO7FPAV
65kT2IrFu1j41nT6ycV6CPdDuwLRpjXwdERD2Nd1j4J+d8koCQ5qRQN7zmNulAm5
evKsxi2lpFo1ipkoRejmMWme3knUUZlb9vzJ1f+JAP5WgQRZDVOGsTRxznbnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMmpAeWs98vu0Qj7Y+fmJG0/ZqZ0wHwYDVR0j
BBgwFoAUOOiVk487zs1I2at4lspECfb2xZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj
OWRjLzAvMzhFODk1OTM4RjNCQ0VDRDQ4RDlBQjc4OTZDQTQ0MDlGNkY2QzU5RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09PaVZrNDg3enMxSTJhdDRsc3BFQ2Zi
MnhaNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04
OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMC8zOEU4OTU5MzhGM0JDRUNENDhE
OUFCNzg5NkNBNDQwOUY2RjZDNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan3h5ksoksu2onedtHYd
GuG/JGzYomylbdI9zU5fY+Bf8hspm2RXgEI/g1h1ueIlz5s/Yw3jn1sdJnYCCorF
+eC4GwdpP2QcCIyyytu9BMLGqg2Wr/qjlz4E3W/vJi8XkonriEQ7sZLzccxb0zO6
S1f75aWXpUZVnFWy90VF5/32DN3r942zpX87KZbWbct+QHrfQfusbnp8euvoyaCc
EpWakToPzhWD0z6UfXGUE+Eimuq8qsuNZNicCBxZqJ6zFwNqa+wsSNSPg7CgOapY
5Tw1qhZQW/D2SjcQjcQLFaKlQ5jYgoj9BRwH5k9NoaEIuwpkrzJozTieeg7mo+M+
7w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:10:31 2026 by rpki-client