This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: 4xftTn6njSOuxRPZp7KXpxinDuQr2JSmZAkqEhyP8nc= Subject key identifier: 3C:42:AB:0D:24:CC:44:AA:1C:82:F8:AC:AE:BE:9D:B6:6F:63:49:E7 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 4A2F064EBB9873288E76FA6CE6F0BDA089D5D9BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0208 Signing time: Fri 19 Dec 2025 20:02:33 +0000 Manifest this update: Fri 19 Dec 2025 19:57:33 +0000 Manifest next update: Sat 20 Dec 2025 20:58:33 +0000 Files and hashes: 1: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 2: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 3: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=) 4: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 5: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 6: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 7: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 8: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 9: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 10: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 11: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 12: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: Kif3Jv/RRujxhxJbmhrzTKPM2Xv2oz0NaNEHmuhcIAI=) 13: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 14: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 15: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 16: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 17: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 18: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 19: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 20: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (hash: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I=) 21: 33312e3138352e3130352e302f32342d3234203d3e20343031373736.roa (hash: Wd2EFVccIS+53JZc9dBxMvZJP/AX4kzECnJdx5FY1Nk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2f:06:4e:bb:98:73:28:8e:76:fa:6c:e6:f0:bd:a0:89:d5:d9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Dec 19 19:57:33 2025 GMT Not After : Dec 20 20:58:33 2025 GMT Subject: CN=3C42AB0D24CC44AA1C82F8ACAEBE9DB66F6349E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:41:68:05:23:aa:19:4b:40:19:04:c5:90: 09:16:cb:94:2f:0a:ad:22:29:49:30:c9:54:08:8f: 5c:7f:15:c0:92:f9:75:14:4a:81:a2:29:68:fe:ce: 85:43:f0:fe:ab:77:b8:85:11:21:9b:ab:b2:2b:3f: 4d:d1:d4:02:4a:48:ad:ea:2f:d2:54:82:97:f5:b7: 86:50:05:21:87:2d:7e:98:08:b3:cc:53:94:c3:c5: 9b:ed:41:e0:a6:9b:5d:c7:8c:72:05:19:c7:5a:1d: 56:5b:f3:63:9d:0b:a8:28:42:c6:d9:12:41:85:7d: 1c:6d:ff:1b:5d:dd:39:d4:08:e2:0b:7a:ea:fc:f0: fb:0a:23:69:42:95:a7:ac:6c:ef:54:63:81:e8:53: 60:f8:e4:ec:9e:6c:27:b3:db:0e:15:0d:b1:0b:a8: c2:84:a5:8e:36:07:3e:24:46:68:5a:04:ae:17:7d: 5a:42:94:a2:ee:8f:86:8e:5e:0a:74:15:cb:bd:70: 16:1f:0c:49:61:0b:97:90:cc:e5:3c:13:12:5a:cc: e9:d0:2a:95:64:99:3a:d0:22:f3:2e:99:91:c4:a8: 38:3d:8e:45:8c:85:ab:9c:8b:85:11:7f:e8:a6:38: a3:1f:35:9e:aa:63:cb:a7:73:6b:b4:05:c5:00:59: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:42:AB:0D:24:CC:44:AA:1C:82:F8:AC:AE:BE:9D:B6:6F:63:49:E7 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:e2:32:72:04:be:50:17:cb:63:f4:31:ef:5d:39:61:cb:16: f3:15:e1:36:ba:64:5c:d8:33:c2:9f:b6:c3:80:5d:f3:0b:b3: 8e:11:bc:85:a9:91:72:2b:46:f5:00:10:c5:07:3e:19:55:81: bc:74:af:7e:36:a1:73:82:80:98:b1:e8:30:0d:77:ae:74:98: 60:1f:2e:9a:29:c3:25:5e:c8:b0:f3:2d:a6:90:7e:f2:72:e5: d3:41:36:ac:61:05:3d:1d:44:88:4d:df:a1:d6:61:23:02:43: a4:cb:5e:c5:ac:66:4e:9f:cb:9f:9a:d7:e4:5e:48:c2:5f:6c: f2:91:d2:47:6e:45:2f:b2:ab:31:10:32:5b:da:40:e2:82:28: b7:05:9b:36:ae:e3:7f:c0:5e:a7:5e:ec:7d:e0:51:c7:89:a5: ac:2a:19:18:11:03:f9:46:51:05:de:75:52:1f:16:8b:3b:da: de:1c:d6:91:46:e1:f3:cd:32:e9:d8:84:13:e2:fd:39:3a:f0: 81:ca:68:1a:39:30:ee:89:c7:d9:13:eb:72:de:e6:20:a2:28: 2d:69:61:91:37:ca:ba:28:30:c2:84:08:fa:13:2d:f7:a5:4d: 96:32:b2:24:9e:32:5e:cb:01:07:0a:67:13:36:61:23:93:80: 32:b5:48:c8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSi8GTruYcyiOdvps5vC9oInV2bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTEyMTkxOTU3MzNaFw0yNTEyMjAyMDU4MzNaMDMxMTAvBgNV BAMTKDNDNDJBQjBEMjRDQzQ0QUExQzgyRjhBQ0FFQkU5REI2NkY2MzQ5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWkFoBSOqGUtAGQTFkAkWy5Qv Cq0iKUkwyVQIj1x/FcCS+XUUSoGiKWj+zoVD8P6rd7iFESGbq7IrP03R1AJKSK3q L9JUgpf1t4ZQBSGHLX6YCLPMU5TDxZvtQeCmm13HjHIFGcdaHVZb82OdC6goQsbZ EkGFfRxt/xtd3TnUCOILeur88PsKI2lClaesbO9UY4HoU2D45OyebCez2w4VDbEL qMKEpY42Bz4kRmhaBK4XfVpClKLuj4aOXgp0Fcu9cBYfDElhC5eQzOU8ExJazOnQ KpVkmTrQIvMumZHEqDg9jkWMhauci4URf+imOKMfNZ6qY8unc2u0BcUAWaRdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPEKrDSTMRKocgvisrr6dtm9jSecwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOIycgS+UBfLY/Qx7105 YcsW8xXhNrpkXNgzwp+2w4Bd8wuzjhG8hamRcitG9QAQxQc+GVWBvHSvfjahc4KA mLHoMA13rnSYYB8uminDJV7IsPMtppB+8nLl00E2rGEFPR1EiE3fodZhIwJDpMte xaxmTp/Ln5rX5F5Iwl9s8pHSR25FL7KrMRAyW9pA4oIotwWbNq7jf8Bep17sfeBR x4mlrCoZGBED+UZRBd51Uh8Wizva3hzWkUbh880y6diEE+L9OTrwgcpoGjkw7onH 2RPrct7mIKIoLWlhkTfKuigwwoQI+hMt96VNljKyJJ4yXssBBwpnEzZhI5OAMrVI yA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:30 2025 by rpki-client