This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft File: cha_aL4onmHE01vUAmZi2OT76vE.mft (raw, json) Hash identifier: obwmsZGrg/rZ3r49nxnj5lCZ2xj6hRyzT9VCiNJ5wzE= Subject key identifier: DF:8B:43:BE:38:21:6B:9A:6C:BE:97:5F:28:0B:1B:C4:6E:AF:DC:8F Authority key identifier: 72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1 Certificate issuer: /CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1 Certificate serial: 019C42464162429DC9E2809EA924613B5167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft Manifest number: 0129 Signing time: Mon 09 Feb 2026 12:00:26 +0000 Manifest this update: Mon 09 Feb 2026 12:00:26 +0000 Manifest next update: Tue 10 Feb 2026 12:00:26 +0000 Files and hashes: 1: 6kDtRGD72hg_ViEDsunZWrtev2g.asa (hash: 7UpgN+iZ6ujyYBq4PaIilpgD97viaVXyBxo4zJETiRU=) 2: cha_aL4onmHE01vUAmZi2OT76vE.crl (hash: CIUZgmvBr3M6Y5sTbJMROjnJALyzKS7Ta4IbJhHLoQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:41:62:42:9d:c9:e2:80:9e:a9:24:61:3b:51:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7216bf68be289e61c4d35bd4026662d8e4fbeaf1 Validity Not Before: Feb 9 12:00:26 2026 GMT Not After : Feb 10 12:00:26 2026 GMT Subject: CN=df8b43be38216b9a6cbe975f280b1bc46eafdc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:ac:0b:e8:50:1e:95:14:87:b0:f6:b8:50: 69:4c:ad:66:24:9b:d0:1e:3c:8c:57:23:e8:f2:88: 77:03:fc:02:b4:f7:19:90:ba:d1:68:6c:4b:bc:d6: 90:a3:f4:51:40:7a:bd:bd:32:8f:94:cb:65:34:2d: 51:7d:63:ff:83:5a:ae:91:03:73:eb:d6:96:b0:1c: c7:33:69:e6:48:66:62:55:55:a1:18:ef:63:c2:75: 38:3f:9a:92:12:ff:69:e0:87:ee:2a:0d:e3:1e:cf: 10:89:2b:da:58:22:35:5e:38:3d:fd:ec:77:63:d4: 10:6c:b6:c5:72:5c:55:39:e5:02:0a:7a:4e:0b:3d: 1b:65:1f:26:97:c5:ea:ce:bb:19:40:3f:79:73:b7: 3f:f2:fd:28:7c:c5:60:77:13:55:64:0f:80:cb:db: 6d:44:9e:3b:8b:bb:9a:93:0e:d3:d7:ac:11:bc:fb: ba:8b:79:db:3d:24:b8:88:6b:04:1b:6b:e3:d4:cd: 3d:51:0a:8e:b0:f8:6c:4b:88:fa:b7:d4:b5:81:20: b4:ab:f4:28:90:f9:78:28:6c:07:4c:6c:80:90:6e: c0:c2:a4:25:31:85:51:c3:b7:e0:10:3a:2d:81:83: 88:af:38:39:a0:d8:4e:ff:0b:45:bd:23:ce:8f:d4: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:43:BE:38:21:6B:9A:6C:BE:97:5F:28:0B:1B:C4:6E:AF:DC:8F X509v3 Authority Key Identifier: keyid:72:16:BF:68:BE:28:9E:61:C4:D3:5B:D4:02:66:62:D8:E4:FB:EA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cha_aL4onmHE01vUAmZi2OT76vE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9bba49-6192-48e3-94f0-4d45231c7233/1/cha_aL4onmHE01vUAmZi2OT76vE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:61:d5:71:4b:af:71:7b:06:0a:1f:11:d8:7a:88:79:84:82: 73:46:da:8e:29:ff:67:d4:4a:1e:96:8e:15:80:d4:2c:a5:3c: b7:aa:54:7b:93:8b:14:1c:d9:52:c8:3f:92:25:2e:d8:1f:c2: 5d:70:cb:28:b2:1a:17:53:ff:08:19:66:1c:63:2b:c3:c9:84: 65:ee:4e:06:93:c5:da:dc:a3:51:af:70:b5:ba:6f:6f:76:90: c8:6c:a2:6b:be:3f:d1:5d:6d:c5:a0:29:ca:4b:d4:33:dc:d2: 1a:f0:56:04:82:fe:70:e5:3d:be:b9:c2:8a:e3:e8:e0:41:05: 5d:07:0f:f7:bf:6d:51:e8:ae:a9:10:78:af:bd:73:56:60:87: 62:2c:88:ed:1a:37:6c:88:81:1f:86:e7:c9:40:34:00:c7:b3: 7e:e1:e8:48:aa:c2:08:68:c7:01:eb:3b:9d:c2:00:55:23:c9: b2:54:09:c3:af:1a:5a:8c:ee:52:e4:26:ce:ab:68:5f:b9:68: e1:5f:c8:4b:8b:0c:8b:d5:d5:e2:74:ba:42:40:1e:44:dc:8c: b6:12:2e:54:09:67:7b:eb:f7:28:90:fc:aa:b9:f4:40:5a:84: 7c:9c:92:83:80:25:f8:5f:b7:f9:06:cf:b3:f9:fb:09:22:5a: ac:59:fb:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkFiQp3J4oCeqSRhO1FnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMTZiZjY4YmUyODllNjFjNGQzNWJkNDAyNjY2MmQ4ZTRm YmVhZjEwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD EyhkZjhiNDNiZTM4MjE2YjlhNmNiZTk3NWYyODBiMWJjNDZlYWZkYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbysC+hQHpUUh7D2uFBpTK1mJJvQ HjyMVyPo8oh3A/wCtPcZkLrRaGxLvNaQo/RRQHq9vTKPlMtlNC1RfWP/g1qukQNz 69aWsBzHM2nmSGZiVVWhGO9jwnU4P5qSEv9p4IfuKg3jHs8QiSvaWCI1Xjg9/ex3 Y9QQbLbFclxVOeUCCnpOCz0bZR8ml8XqzrsZQD95c7c/8v0ofMVgdxNVZA+Ay9tt RJ47i7uakw7T16wRvPu6i3nbPSS4iGsEG2vj1M09UQqOsPhsS4j6t9S1gSC0q/Qo kPl4KGwHTGyAkG7AwqQlMYVRw7fgEDotgYOIrzg5oNhO/wtFvSPOj9QfiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+LQ744IWuabL6XXygLG8Rur9yPMB8GA1UdIwQY MBaAFHIWv2i+KJ5hxNNb1AJmYtjk++rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAt NGQ0NTIzMWM3MjMzLzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85YmJhNDktNjE5Mi00OGUzLTk0ZjAtNGQ0NTIzMWM3MjMz LzEvY2hhX2FMNG9ubUhFMDF2VUFtWmkyT1Q3NnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmHVcUuv cXsGCh8R2HqIeYSCc0bajin/Z9RKHpaOFYDULKU8t6pUe5OLFBzZUsg/kiUu2B/C XXDLKLIaF1P/CBlmHGMrw8mEZe5OBpPF2tyjUa9wtbpvb3aQyGyia74/0V1txaAp ykvUM9zSGvBWBIL+cOU9vrnCiuPo4EEFXQcP979tUeiuqRB4r71zVmCHYiyI7Ro3 bIiBH4bnyUA0AMezfuHoSKrCCGjHAes7ncIAVSPJslQJw68aWozuUuQmzqtoX7lo 4V/IS4sMi9XV4nS6QkAeRNyMthIuVAlne+v3KJD8qrn0QFqEfJySg4Al+F+3+QbP s/n7CSJarFn73g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:01 2026 by rpki-client