This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File:                     38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier:          eS9lEsPXynf1ZvZvaXV+E69KZ9/mFDew/32TM1OjNcM=
Subject key identifier:   34:72:AA:6C:13:C8:F1:90:AA:D6:27:36:09:6B:CA:4F:15:3C:D9:B0
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer:       /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial:       019C435976CA5D5A68B49225DC5083C399F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number:          1115
Signing time:             Mon 09 Feb 2026 17:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 17:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 17:01:02 +0000
Files and hashes:         1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: IimjdhAQpn3MaLNxL3xfFo0pZUuG9XM+87zg9kMiAjI=)
                          2: DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa (hash: Kdz9GuJlZ7ZKJVHKRBo+yO7QuXh68uExIpIMEaag7CQ=)
                          3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:76:ca:5d:5a:68:b4:92:25:dc:50:83:c3:99:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
        Validity
            Not Before: Feb  9 17:01:02 2026 GMT
            Not After : Feb 10 17:01:02 2026 GMT
        Subject: CN=3472aa6c13c8f190aad62736096bca4f153cd9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:85:58:5f:cd:6d:bd:aa:f7:d7:ff:0f:f7:
                    c0:d6:d8:d2:90:92:01:89:52:9b:b4:fe:73:42:b8:
                    f3:12:d1:d1:f3:c8:2c:d3:54:07:3b:f3:05:6f:29:
                    81:7d:af:ad:ea:39:1c:77:19:59:ee:1a:4d:79:02:
                    82:5b:1a:21:66:4a:14:c2:cf:63:ea:e2:15:8d:9a:
                    b2:90:96:cb:d5:b4:61:27:24:85:7e:de:38:01:f8:
                    42:09:c5:3d:e6:bb:5e:fb:32:4e:b3:4b:26:2a:dd:
                    2b:54:a0:4c:de:5b:28:76:91:5f:4e:ac:8b:a4:a5:
                    58:18:2c:e9:aa:3c:2a:04:88:c5:46:d4:5f:44:38:
                    f9:7a:a2:69:db:ec:3f:4a:84:a9:a1:42:a5:1a:e4:
                    a0:b5:fa:56:24:53:73:07:67:36:76:a4:a6:6c:3f:
                    b6:9f:e9:4e:fe:0e:05:a9:91:81:36:90:10:f2:a5:
                    c0:c9:2d:12:f7:51:32:4b:86:3f:53:9f:a2:d5:9e:
                    6f:3a:eb:57:66:d2:cd:05:b5:f4:f3:50:49:bf:72:
                    e3:85:8f:ae:0b:10:e3:48:91:8c:6c:94:1b:b0:3f:
                    51:85:40:07:00:4e:aa:68:a9:71:09:3a:6c:e5:d6:
                    98:20:8a:5d:6f:e7:df:80:19:e2:1d:8a:68:86:b1:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:72:AA:6C:13:C8:F1:90:AA:D6:27:36:09:6B:CA:4F:15:3C:D9:B0
            X509v3 Authority Key Identifier:
                keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:34:91:57:2a:5e:cf:04:0b:b4:cd:c5:25:e0:71:de:53:
         d9:cd:8f:08:0a:ac:ec:5b:20:71:ab:67:3f:02:12:10:fd:1e:
         69:42:9d:c8:98:8f:29:36:8e:e6:af:05:d7:93:ce:c3:a9:a3:
         4e:5f:b9:72:5f:f7:8d:cc:00:81:8a:d5:0b:e4:80:70:e6:75:
         ff:51:1e:9a:82:75:5d:dd:d0:4c:d7:eb:00:2e:21:3b:1d:ed:
         af:4a:01:9c:15:5b:05:91:44:8d:69:c8:e1:96:93:f6:62:43:
         21:da:57:01:65:63:ac:0e:a2:3d:78:f6:78:81:cc:34:03:aa:
         01:13:ad:a0:45:8f:0c:e4:bc:6c:e4:6f:a1:a0:9b:45:fc:b1:
         2a:10:2e:d7:a3:d2:b9:53:3d:37:09:50:b5:77:45:a1:bb:f7:
         d5:cf:67:a6:15:81:83:dc:16:c2:53:11:a7:b6:8e:63:89:1c:
         95:73:44:8a:14:9a:da:15:46:dd:9a:9b:35:3b:d7:55:d0:5f:
         da:a6:2d:97:1d:b1:b2:89:32:bb:9b:41:0a:48:f7:e6:ad:cd:
         78:53:b0:16:13:1d:fe:10:2c:c1:76:3c:05:4d:b7:66:7c:4b:
         bb:34:cb:f5:30:a7:5c:41:0a:6d:2e:15:e4:c8:0f:9c:ed:ea:
         5b:7d:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:35 2026 by rpki-client