This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File:                     38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier:          ZSZcpc/My0wDgZq27rAfv1HbNwnRqGHv7cIZqANPjaQ=
Subject key identifier:   32:6A:40:79:6B:3D:F2:FB:B4:42:3E:D8:F9:F9:89:1B:4F:D9:A9:9D
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer:       /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial:       24182ECC7530F32240CDBC9DF791456D20C9ADD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number:          FD
Signing time:             Mon 26 Jan 2026 06:39:53 +0000
Manifest this update:     Mon 26 Jan 2026 06:34:53 +0000
Manifest next update:     Tue 27 Jan 2026 06:54:53 +0000
Files and hashes:         1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: dNvGgDSgN6JBc7D3xZpWTVKjrVpUXg83mBcuPwAPZEo=)
                          2: AS211575.asa (hash: HGOQYjY8FnmDlA1OVJPNtP4L08SkfuavIEpvVMnQpx8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:18:2e:cc:75:30:f3:22:40:cd:bc:9d:f7:91:45:6d:20:c9:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
        Validity
            Not Before: Jan 26 06:34:53 2026 GMT
            Not After : Jan 27 06:54:53 2026 GMT
        Subject: CN=326A40796B3DF2FBB4423ED8F9F9891B4FD9A99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:86:8d:a1:43:68:07:5f:53:13:20:15:af:
                    1a:0b:72:46:38:04:9a:42:7f:4b:e7:71:42:58:dc:
                    74:14:8c:02:be:b4:03:bf:1c:22:bf:8d:f9:f8:92:
                    13:94:fa:29:dd:31:ea:62:17:95:0e:c9:9d:bb:7c:
                    3c:7c:cd:2e:6f:76:e4:4f:13:00:49:21:4e:d2:ed:
                    a2:0c:ad:cb:bc:b3:0d:cd:7f:59:97:ac:65:b8:02:
                    2e:81:91:e0:49:67:c6:10:69:6d:2f:85:19:b2:fb:
                    ad:49:7f:35:c7:20:53:ad:08:1e:1f:34:25:05:77:
                    02:8e:ba:26:3a:2f:c6:78:38:85:13:0d:dd:b6:4d:
                    f3:71:ed:5b:8e:0f:78:45:8d:4e:92:a7:59:ec:2f:
                    45:37:15:75:73:eb:30:d2:6f:33:bb:14:f0:15:eb:
                    99:13:d8:8a:c5:bb:58:f8:d6:74:fa:c9:c5:7a:08:
                    f7:43:bb:02:d1:a6:35:f0:74:44:43:d8:d7:75:8f:
                    82:7e:77:c9:28:09:0e:6a:45:03:7b:ce:63:6e:94:
                    09:b9:7a:f2:ac:c6:2d:a5:a4:5a:35:8a:99:28:45:
                    e8:e6:31:69:9e:de:49:d4:51:99:5b:f6:fc:c9:d5:
                    ff:89:00:fe:56:81:04:59:0d:53:86:b1:34:71:ce:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6A:40:79:6B:3D:F2:FB:B4:42:3E:D8:F9:F9:89:1B:4F:D9:A9:9D
            X509v3 Authority Key Identifier:
                keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:e1:e6:4b:28:92:cb:b6:a2:77:9d:b4:76:1d:1a:e1:bf:
         24:6c:d8:a2:6c:a5:6d:d2:3d:cd:4e:5f:63:e0:5f:f2:1b:29:
         9b:64:57:80:42:3f:83:58:75:b9:e2:25:cf:9b:3f:63:0d:e3:
         9f:5b:1d:26:76:02:0a:8a:c5:f9:e0:b8:1b:07:69:3f:64:1c:
         08:8c:b2:ca:db:bd:04:c2:c6:aa:0d:96:af:fa:a3:97:3e:04:
         dd:6f:ef:26:2f:17:92:89:eb:88:44:3b:b1:92:f3:71:cc:5b:
         d3:33:ba:4b:57:fb:e5:a5:97:a5:46:55:9c:55:b2:f7:45:45:
         e7:fd:f6:0c:dd:eb:f7:8d:b3:a5:7f:3b:29:96:d6:6d:cb:7e:
         40:7a:df:41:fb:ac:6e:7a:7c:7a:eb:e8:c9:a0:9c:12:95:9a:
         91:3a:0f:ce:15:83:d3:3e:94:7d:71:94:13:e1:22:9a:ea:bc:
         aa:cb:8d:64:d8:9c:08:1c:59:a8:9e:b3:17:03:6a:6b:ec:2c:
         48:d4:8f:83:b0:a0:39:aa:58:e5:3c:35:aa:16:50:5b:f0:f6:
         4a:37:10:8d:c4:0b:15:a2:a5:43:98:d8:82:88:fd:05:1c:07:
         e6:4f:4d:a1:a1:08:bb:0a:64:af:32:68:cd:38:9e:7a:0e:e6:
         a3:e3:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:10:31 2026 by rpki-client