This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json) Hash identifier: OpznurT1jDPCGES0TbWQYmN/ScwoM1o/RLZW07qa/iQ= Subject key identifier: 2E:C1:74:85:21:88:E2:7A:7F:2E:01:7B:CC:A8:A6:FB:F0:AD:3D:A9 Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c Certificate serial: 019C427E09B9B2B0DEECA9705168F8CD4600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft Manifest number: 0EF3 Signing time: Mon 09 Feb 2026 13:01:22 +0000 Manifest this update: Mon 09 Feb 2026 13:01:22 +0000 Manifest next update: Tue 10 Feb 2026 13:01:22 +0000 Files and hashes: 1: 4FtzsbmBRCz-KN7S54pRuO4IZrM.roa (hash: GUqsJWH9+kzctFjpZP6HQaUNoQFv8yqD7sokvUur02k=) 2: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: H5iyeVRqYP9XV1hmDKcxqdWHP90iD0lZvpqs5Ko0m/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:09:b9:b2:b0:de:ec:a9:70:51:68:f8:cd:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c Validity Not Before: Feb 9 13:01:22 2026 GMT Not After : Feb 10 13:01:22 2026 GMT Subject: CN=2ec174852188e27a7f2e017bcca8a6fbf0ad3da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:06:75:92:34:bb:8b:36:ad:5b:c2:d7:07: 8d:b8:9c:ae:1f:4d:d2:46:93:13:db:aa:19:57:4d: d1:7c:7b:cd:a3:a5:bb:b3:a8:e5:c2:da:c7:3c:8d: a6:d1:0e:ab:f3:47:8c:26:33:52:c0:dc:ae:51:e5: ff:9d:77:4d:27:12:91:01:f7:42:3e:c7:db:29:36: 8f:af:ee:a2:50:6b:87:31:46:1b:5d:f6:8d:b5:68: d0:c2:03:9c:5c:54:3e:c6:e7:7f:dd:56:d3:36:a2: f7:39:93:da:34:be:9c:a0:76:78:91:a1:7d:db:1c: 0f:c4:5d:80:eb:bb:64:11:21:e7:60:46:9c:73:3c: 9d:00:1f:48:77:2f:41:51:1f:de:04:ff:97:e0:ad: 91:71:d0:f3:e3:89:b7:c1:b6:e2:4c:de:60:0f:27: 23:8b:e5:ac:a8:05:46:23:ae:60:c3:8b:cd:0d:99: 9f:5f:ae:50:48:b1:df:72:da:5f:d5:29:3a:b9:0b: be:92:65:0c:14:c3:5e:96:1c:7e:d3:e6:25:03:4c: 22:2d:3d:e9:cb:72:47:de:71:62:15:42:46:92:5a: ea:34:42:fb:56:c5:17:9f:c8:67:3c:35:1f:dd:12: 0d:eb:23:55:99:08:a6:b3:53:bb:e8:49:ee:82:6c: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:74:85:21:88:E2:7A:7F:2E:01:7B:CC:A8:A6:FB:F0:AD:3D:A9 X509v3 Authority Key Identifier: keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0b:96:ce:73:b3:29:a3:dd:c5:1d:25:51:7f:78:b5:45:22: 65:93:6f:e6:31:7a:f4:41:e4:05:d6:8d:b9:07:9e:9a:a3:8b: f8:de:49:41:6b:68:8d:e9:01:a9:72:c4:e5:7a:e3:39:b7:87: e9:26:f2:ef:0c:8d:a6:1c:85:2e:96:c2:a3:6d:e2:4f:fe:a1: 2b:88:84:e9:ca:62:64:31:7f:e9:f5:06:20:d5:1a:ae:8d:ee: 3e:77:76:73:2b:7a:2b:01:11:2d:b3:8c:6b:c3:92:23:e1:48: 3d:54:da:b0:5d:a9:be:61:a6:4f:24:44:49:4e:c5:35:24:d5: 8d:a1:4b:86:9f:7d:de:9e:94:34:37:b0:25:e1:e8:be:7a:b5: dd:61:92:1a:1e:26:38:5c:cc:29:59:cf:34:e6:0a:c8:b4:d3: 98:e1:2e:32:e4:46:1f:35:1c:1c:fb:aa:9d:e1:4a:bb:a7:9e: 12:b8:e8:62:2a:3b:97:b4:89:21:e8:de:d7:9b:4c:b4:96:f3: cd:24:b9:4f:be:d0:bc:d8:42:82:32:47:90:8e:fc:f8:86:d9: b5:c5:17:d5:3d:8a:5f:cc:1b:8c:6e:c7:57:05:23:f5:32:5b: f2:91:96:b6:9e:b0:9b:50:5c:a3:54:07:9d:2c:ce:bd:1a:59: 71:6d:a6:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgm5srDe7KlwUWj4zUYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMWE2YjNmNWVkNWZiNzRkMDM1MTIyMTY1MTNjNGM4MWVm ZTFlNWMwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD EygyZWMxNzQ4NTIxODhlMjdhN2YyZTAxN2JjY2E4YTZmYmYwYWQzZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PUGdZI0u4s2rVvC1weNuJyuH03S RpMT26oZV03RfHvNo6W7s6jlwtrHPI2m0Q6r80eMJjNSwNyuUeX/nXdNJxKRAfdC PsfbKTaPr+6iUGuHMUYbXfaNtWjQwgOcXFQ+xud/3VbTNqL3OZPaNL6coHZ4kaF9 2xwPxF2A67tkESHnYEacczydAB9Idy9BUR/eBP+X4K2RcdDz44m3wbbiTN5gDycj i+WsqAVGI65gw4vNDZmfX65QSLHfctpf1Sk6uQu+kmUMFMNelhx+0+YlA0wiLT3p y3JH3nFiFUJGklrqNEL7VsUXn8hnPDUf3RIN6yNVmQims1O76Enugmw1sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7BdIUhiOJ6fy4Be8yopvvwrT2pMB8GA1UdIwQY MBaAFHIaaz9e1ft00DUSIWUTxMge/h5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQt ODBjMzFkYjIwYWM1LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hZjMxMGMtMmJkOC00ZWZkLTg4ZTQtODBjMzFkYjIwYWM1 LzEvY2hwclAxN1YtM1RRTlJJaFpSUEV5QjctSGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkguWznOz KaPdxR0lUX94tUUiZZNv5jF69EHkBdaNuQeemqOL+N5JQWtojekBqXLE5XrjObeH 6Sby7wyNphyFLpbCo23iT/6hK4iE6cpiZDF/6fUGINUaro3uPnd2cyt6KwERLbOM a8OSI+FIPVTasF2pvmGmTyRESU7FNSTVjaFLhp993p6UNDewJeHovnq13WGSGh4m OFzMKVnPNOYKyLTTmOEuMuRGHzUcHPuqneFKu6eeErjoYio7l7SJIeje15tMtJbz zSS5T77QvNhCgjJHkI78+IbZtcUX1T2KX8wbjG7HVwUj9TJb8pGWtp6wm1Bco1QH nSzOvRpZcW2mVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:04 2026 by rpki-client