This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: jzkRzbXnuC28m4yEB5LXjz18MnD6dsjYyMc57+TD3b4= Subject key identifier: 68:46:B6:B5:28:B7:A2:24:EF:69:BF:1A:67:AA:49:9D:0D:D5:BF:CD Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 7DF49C28BC878506F05FE9379CFDDA6F8EEB0876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0230 Signing time: Sat 17 Jan 2026 19:02:00 +0000 Manifest this update: Sat 17 Jan 2026 18:57:00 +0000 Manifest next update: Sun 18 Jan 2026 22:34:00 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=) 2: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 3: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 4: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 5: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 6: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 7: 33312e3138352e3130352e302f32342d3234203d3e20343031373736.roa (hash: Wd2EFVccIS+53JZc9dBxMvZJP/AX4kzECnJdx5FY1Nk=) 8: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 9: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (hash: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I=) 10: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 11: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 12: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 13: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 2J3VUv4MURvRG5c6aTXjTdqIoCFSmR1MMelcvbVJpZU=) 14: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 15: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 16: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 17: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 18: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 19: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 20: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 21: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f4:9c:28:bc:87:85:06:f0:5f:e9:37:9c:fd:da:6f:8e:eb:08:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jan 17 18:57:00 2026 GMT Not After : Jan 18 22:34:00 2026 GMT Subject: CN=6846B6B528B7A224EF69BF1A67AA499D0DD5BFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:22:4a:d2:a3:e5:ba:ca:45:18:ff:36:54: 41:67:c2:9d:61:cb:e6:d0:e9:de:e6:ca:b9:15:ed: c3:ae:bd:67:17:b2:c2:7c:01:05:8b:24:51:bc:13: 73:45:12:b9:30:a7:f5:53:0c:be:7d:a5:be:a7:0f: 00:52:58:ba:0e:89:8c:31:59:a8:d9:97:d9:e3:29: 88:4e:50:f4:d9:97:bc:49:42:a8:89:9c:d2:5d:d0: 30:00:4d:73:96:7d:3d:a5:ce:aa:00:b3:e0:ce:ef: 09:22:28:ad:64:e5:6b:eb:99:8f:87:ea:fb:68:74: 3f:d9:ff:a5:24:1a:e2:a6:ce:a9:e5:cf:4f:fb:86: d0:24:43:0c:52:94:9b:1d:50:68:c0:58:20:95:c7: 07:0b:f5:5a:59:be:0c:14:0b:0a:ac:1a:4b:71:ca: 87:8e:b9:1f:8c:6e:3a:6f:0b:07:d0:fb:53:c4:92: aa:d6:15:bb:64:31:d8:d9:d7:36:a2:90:02:6b:e4: 38:7f:45:9a:3a:21:22:6a:33:38:1d:45:e0:93:50: 91:49:c4:ff:80:a4:e0:ed:f9:5e:5d:be:62:2e:95: e5:71:84:7a:fd:f3:7b:9e:42:5f:4e:f0:9a:19:5c: 38:bd:6b:a5:65:95:08:cf:60:7c:bb:06:97:b9:8c: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:B6:B5:28:B7:A2:24:EF:69:BF:1A:67:AA:49:9D:0D:D5:BF:CD X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:43:4a:f7:71:e3:d8:98:f5:2a:f3:aa:12:16:f1:75:cf:be: 1f:87:0b:f2:41:2a:86:23:00:94:35:0c:b7:5c:02:17:cc:4b: ac:86:ca:fd:42:da:1b:db:b0:82:c3:48:8e:04:0c:84:77:cd: d5:99:fb:a1:fa:dd:81:2e:a8:71:8d:b9:95:13:a0:08:c8:1c: 97:1f:b9:e2:08:f1:37:ae:2b:ec:b4:d0:ba:11:97:fc:b3:e6: d7:34:ed:6c:d2:04:a0:aa:f2:3b:f9:55:f6:63:58:2b:c7:b2: ca:47:27:46:9b:b0:96:e5:99:f4:10:14:c2:1e:ff:c7:a2:b5: 04:94:e5:d3:eb:70:16:58:74:fa:b2:dc:2d:03:42:82:de:10: e7:5e:0f:1a:be:49:68:2b:53:8b:b0:aa:35:3c:94:fa:02:e4: 68:a1:74:1e:97:e0:02:7e:bb:a4:29:91:2f:4f:23:19:99:47: 8a:b2:e7:6a:02:58:76:52:32:95:9a:75:f7:61:8f:dd:ef:93: 0a:01:24:02:2a:e0:2e:84:e7:e8:db:d2:46:73:73:e3:26:c9: 70:6d:e7:a0:54:77:08:5f:e1:56:e2:fa:41:9e:86:0b:90:20: bc:26:0f:79:e9:a7:fc:f4:2f:9e:f6:c8:0b:4f:13:b1:43:3f: e1:5d:5f:67 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUffScKLyHhQbwX+k3nP3ab47rCHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjAxMTcxODU3MDBaFw0yNjAxMTgyMjM0MDBaMDMxMTAvBgNV BAMTKDY4NDZCNkI1MjhCN0EyMjRFRjY5QkYxQTY3QUE0OTlEMERENUJGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4CJK0qPluspFGP82VEFnwp1h y+bQ6d7myrkV7cOuvWcXssJ8AQWLJFG8E3NFErkwp/VTDL59pb6nDwBSWLoOiYwx WajZl9njKYhOUPTZl7xJQqiJnNJd0DAATXOWfT2lzqoAs+DO7wkiKK1k5WvrmY+H 6vtodD/Z/6UkGuKmzqnlz0/7htAkQwxSlJsdUGjAWCCVxwcL9VpZvgwUCwqsGktx yoeOuR+MbjpvCwfQ+1PEkqrWFbtkMdjZ1zaikAJr5Dh/RZo6ISJqMzgdReCTUJFJ xP+ApODt+V5dvmIuleVxhHr983ueQl9O8JoZXDi9a6VllQjPYHy7Bpe5jA1JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaEa2tSi3oiTvab8aZ6pJnQ3Vv80wHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0NK93Hj2Jj1KvOqEhbx dc++H4cL8kEqhiMAlDUMt1wCF8xLrIbK/ULaG9uwgsNIjgQMhHfN1Zn7ofrdgS6o cY25lROgCMgclx+54gjxN64r7LTQuhGX/LPm1zTtbNIEoKryO/lV9mNYK8eyykcn RpuwluWZ9BAUwh7/x6K1BJTl0+twFlh0+rLcLQNCgt4Q514PGr5JaCtTi7CqNTyU +gLkaKF0HpfgAn67pCmRL08jGZlHirLnagJYdlIylZp192GP3e+TCgEkAirgLoTn 6NvSRnNz4ybJcG3noFR3CF/hVuL6QZ6GC5AgvCYPeemn/PQvnvbIC08TsUM/4V1f Zw== -----END CERTIFICATE-----Generated at Sun Jan 18 12:13:36 2026 by rpki-client