This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File:                     ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier:          cALITRwHsk0WRoEZLKyv/P8lYDqtVQ6c4WqK+npagsw=
Subject key identifier:   5F:44:CA:CD:4E:00:B0:4F:60:5E:EA:7B:B0:C5:F6:A6:4F:80:62:0B
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer:       /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial:       019C42B48D0B7CBA9A07335FF47DD25EE3B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number:          1246
Signing time:             Mon 09 Feb 2026 14:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:54 +0000
Files and hashes:         1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: JhHVTeIY16XtcnsPLKOVod7iqKI0ConsE1ZCgPPwx+c=)
                          2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:8d:0b:7c:ba:9a:07:33:5f:f4:7d:d2:5e:e3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
        Validity
            Not Before: Feb  9 14:00:54 2026 GMT
            Not After : Feb 10 14:00:54 2026 GMT
        Subject: CN=5f44cacd4e00b04f605eea7bb0c5f6a64f80620b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:a1:67:d2:28:75:b7:2f:d5:96:15:77:61:
                    58:cf:27:61:9e:90:00:84:f3:bb:ec:c0:41:32:a2:
                    bc:d5:23:9b:50:4f:92:9e:60:52:c0:24:6e:a4:07:
                    08:f6:22:f5:2a:58:c7:94:fa:1e:35:ed:72:2d:43:
                    b1:8c:97:ea:b2:c9:95:59:f2:db:0f:7b:2c:aa:45:
                    e8:23:93:ca:80:66:36:47:ab:98:83:95:e9:4e:f1:
                    ab:e0:fc:c5:0b:dc:d8:2d:4c:32:e8:bd:d9:8e:30:
                    62:83:0e:04:0c:4c:d9:35:b1:ab:f9:d4:ad:d4:61:
                    e0:8f:47:47:d4:52:09:8b:fb:80:3d:0e:99:02:ac:
                    d7:46:dd:a9:1d:b7:8b:11:9e:19:40:fe:18:ba:57:
                    65:91:ec:5c:0a:ad:dc:b5:03:bf:64:36:0e:86:3e:
                    1a:fd:4e:18:28:6c:66:74:0f:40:2f:92:16:5f:8e:
                    4a:95:2c:10:35:70:dc:1f:ab:51:74:dd:da:3b:e1:
                    d6:c4:d8:f1:c4:92:f1:db:ef:75:d5:34:b8:cf:55:
                    26:64:1f:6c:e4:60:4c:f8:7a:13:30:2d:ae:a0:41:
                    80:3d:e5:8f:87:b5:13:36:28:e3:76:22:2c:e3:bd:
                    cf:0a:37:ba:a4:4a:05:a1:c8:a4:bb:c7:b6:c9:6c:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:44:CA:CD:4E:00:B0:4F:60:5E:EA:7B:B0:C5:F6:A6:4F:80:62:0B
            X509v3 Authority Key Identifier:
                keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4e:81:fe:ca:35:e2:e7:87:81:1b:c7:e6:82:50:f1:b8:37:
         d4:9e:fb:ce:4e:58:fe:b9:a1:48:e0:15:bc:11:31:f8:63:20:
         09:ba:d8:77:24:cf:7c:b7:d5:95:e0:b1:dd:9b:b8:c3:94:76:
         19:57:82:cd:cb:16:49:86:bc:b8:e0:5f:14:c9:e3:4b:37:a4:
         9b:19:56:38:d9:bc:7b:14:10:95:8f:5b:41:d5:f1:c2:1c:5a:
         55:d8:e9:b7:38:16:7a:03:7e:19:8a:18:ae:2a:98:02:59:4e:
         62:77:e1:83:35:4b:a9:70:c7:3d:ff:e1:77:b8:fe:bf:bf:43:
         eb:40:28:21:55:3d:80:15:dc:c4:37:9d:34:54:fc:19:e0:d7:
         26:56:c3:82:9f:75:8c:0b:71:f8:26:12:3c:e1:63:d1:6d:aa:
         cd:fd:75:19:98:24:f6:21:ad:e7:d9:4b:fb:a9:22:b9:62:3e:
         03:84:03:7c:43:fd:e4:bf:16:69:ca:9c:d5:f9:51:b1:51:58:
         52:60:55:e4:86:87:19:61:2c:58:99:70:1f:00:97:41:47:e3:
         82:c3:bf:64:41:ad:75:ee:03:d6:11:f2:3d:db:d4:e1:95:81:
         51:8f:e2:60:6b:88:7d:40:a9:e8:70:22:3b:7a:72:84:8c:f9:
         14:70:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:13 2026 by rpki-client