This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: OQjubYDL5aIH+WjIhkqDex+QeF2vHzybCANRKYLl2ks= Subject key identifier: F8:24:30:D1:31:FA:9C:A1:83:08:9C:CA:28:EA:F7:26:0E:54:2E:3F Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 5417FAED1193BD1EF092AE5DECDE71C8B4C5D9B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 01F2 Signing time: Wed 03 Dec 2025 09:06:03 +0000 Manifest this update: Wed 03 Dec 2025 09:01:03 +0000 Manifest next update: Thu 04 Dec 2025 09:39:03 +0000 Files and hashes: 1: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 2: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 3: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 4: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 5: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 6: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (hash: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I=) 7: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 8: 33312e3138352e3130352e302f32342d3234203d3e20343031373736.roa (hash: Wd2EFVccIS+53JZc9dBxMvZJP/AX4kzECnJdx5FY1Nk=) 9: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=) 10: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 11: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 12: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 13: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 14: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 15: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 16: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 17: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 18: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: Lt6Cfafnd1+eYva8XgL8/hT+oHjJQkrd4kEWm24QBsg=) 19: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 20: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 21: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:17:fa:ed:11:93:bd:1e:f0:92:ae:5d:ec:de:71:c8:b4:c5:d9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Dec 3 09:01:03 2025 GMT Not After : Dec 4 09:39:03 2025 GMT Subject: CN=F82430D131FA9CA183089CCA28EAF7260E542E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:58:af:36:be:5e:a8:36:86:1d:d3:aa:02: d4:94:59:c0:74:59:8c:df:7d:09:f1:92:52:3f:44: 92:89:26:1d:7a:cb:86:66:8c:39:41:30:8c:75:fc: 18:a2:30:35:72:8e:4e:35:f9:03:67:a4:2e:07:be: e1:b6:f4:0e:0e:34:34:bb:a6:57:f6:9d:22:00:cf: e8:b5:67:dc:49:ca:e8:d2:41:08:fd:00:70:56:7c: e1:49:e9:4a:6e:00:43:81:68:82:c8:8f:43:93:c7: f7:34:0c:00:2f:25:07:d5:70:8a:43:8c:53:10:72: 17:c9:7d:99:21:29:8a:2a:df:c5:35:7e:9a:b7:91: 52:00:a4:bc:1a:c1:ff:e1:67:29:58:66:4a:03:2a: f6:4b:b5:00:47:27:fe:a4:1c:78:83:41:04:80:53: d4:3d:53:46:c8:1b:fa:69:ab:ec:c0:75:10:b8:0d: ac:98:24:74:a9:48:d0:f5:62:94:b1:87:80:df:fe: 07:ac:f1:f5:90:f3:06:f9:11:d5:4b:52:52:f3:f5: 95:83:10:bf:e3:b6:92:d6:be:18:60:d0:5e:6d:85: a3:2f:ae:2d:f1:91:f6:f0:25:3a:f7:0b:8d:dd:12: 00:63:86:7b:23:fe:8c:96:53:d1:ac:ff:75:5d:68: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:24:30:D1:31:FA:9C:A1:83:08:9C:CA:28:EA:F7:26:0E:54:2E:3F X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:38:2f:a2:9e:e5:c8:e4:d9:1b:c6:dc:23:ae:8d:a8:5f:48: 33:45:09:51:39:88:aa:b8:f8:d0:49:ce:23:3c:06:6f:ae:47: a9:3b:26:cd:60:c1:86:12:26:19:4a:25:5d:79:44:03:c6:c1: cd:a3:0f:d4:d6:05:07:6d:80:e5:6c:be:b4:33:eb:b3:36:fd: e1:c0:24:79:ac:c5:6b:9c:77:69:d6:d0:06:49:8b:02:2b:73: 94:7a:10:7f:d3:78:da:83:c9:79:1f:4f:dc:d7:a0:58:d8:a5: c9:8b:3c:a7:ca:89:e7:ec:72:b7:e7:da:b1:89:ea:00:42:9e: 94:15:fc:38:47:53:da:2d:cb:c3:48:58:7a:af:13:fa:3a:6f: f3:e5:c5:02:9c:1e:dd:ab:6e:18:39:e6:4d:ec:2a:7b:8e:3f: 18:2a:dd:3e:7c:ca:2d:5e:bf:32:82:ed:64:24:f3:cf:d0:84: f3:9b:c7:17:18:4d:38:7c:b4:8c:e7:55:9f:26:f8:5d:a1:ca: 2e:1a:8c:07:97:a7:bf:04:92:7b:f7:b1:cb:b2:f3:c2:dd:7c: 8e:56:5f:f6:b7:02:43:07:17:6f:1b:13:e8:d3:bc:57:53:b2: dc:1a:df:1b:c1:36:d6:ef:87:e3:1d:5e:07:5e:11:fb:62:76: ec:07:41:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVBf67RGTvR7wkq5d7N5xyLTF2bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTEyMDMwOTAxMDNaFw0yNTEyMDQwOTM5MDNaMDMxMTAvBgNV BAMTKEY4MjQzMEQxMzFGQTlDQTE4MzA4OUNDQTI4RUFGNzI2MEU1NDJFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8c1ivNr5eqDaGHdOqAtSUWcB0 WYzffQnxklI/RJKJJh16y4ZmjDlBMIx1/BiiMDVyjk41+QNnpC4HvuG29A4ONDS7 plf2nSIAz+i1Z9xJyujSQQj9AHBWfOFJ6UpuAEOBaILIj0OTx/c0DAAvJQfVcIpD jFMQchfJfZkhKYoq38U1fpq3kVIApLwawf/hZylYZkoDKvZLtQBHJ/6kHHiDQQSA U9Q9U0bIG/ppq+zAdRC4DayYJHSpSND1YpSxh4Df/ges8fWQ8wb5EdVLUlLz9ZWD EL/jtpLWvhhg0F5thaMvri3xkfbwJTr3C43dEgBjhnsj/oyWU9Gs/3VdaLBFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+CQw0TH6nKGDCJzKKOr3Jg5ULj8wHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzgvop7lyOTZG8bcI66N qF9IM0UJUTmIqrj40EnOIzwGb65HqTsmzWDBhhImGUolXXlEA8bBzaMP1NYFB22A 5Wy+tDPrszb94cAkeazFa5x3adbQBkmLAitzlHoQf9N42oPJeR9P3NegWNilyYs8 p8qJ5+xyt+fasYnqAEKelBX8OEdT2i3Lw0hYeq8T+jpv8+XFApwe3atuGDnmTewq e44/GCrdPnzKLV6/MoLtZCTzz9CE85vHFxhNOHy0jOdVnyb4XaHKLhqMB5envwSS e/exy7Lzwt18jlZf9rcCQwcXbxsT6NO8V1Oy3BrfG8E21u+H4x1eB14R+2J27AdB 0g== -----END CERTIFICATE-----Generated at Wed Dec 3 19:32:04 2025 by rpki-client