This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File:                     CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier:          /PCaKtzDikwg5PtNohNDLbE7IT4vZCAn0hK/aYkgOhc=
Subject key identifier:   FB:F7:95:4B:A0:03:A5:9F:D6:0A:49:01:F6:C5:D9:55:36:F9:93:B9
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer:       /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial:       019C4322994C919B6D059DA3059AF489CB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 16:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:06 +0000
Files and hashes:         1: 3YlnqXzXRItsSLDrHhdeboBlrZ8.roa (hash: r4ehQL2G6N2FatUHDDCMbiJAM714KbZbwtvUTz8Ebug=)
                          2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: /lZ1wYHcO90Bm1mJhaC3hybTsKMeLWIO079zNeXePss=)
                          3: a3pMMKBEJQH8lzNGB6-PpGvrW8c.roa (hash: FpGlSq68Wbq7E2420sIPM126CcstpSsQ1yPwUp4H0+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:99:4c:91:9b:6d:05:9d:a3:05:9a:f4:89:cb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08759158de234b754b7150f21933096c1094aac4
        Validity
            Not Before: Feb  9 16:01:06 2026 GMT
            Not After : Feb 10 16:01:06 2026 GMT
        Subject: CN=fbf7954ba003a59fd60a4901f6c5d95536f993b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:46:b4:27:47:62:4c:d3:93:4f:98:54:49:
                    fe:a0:26:ad:cd:cf:8a:11:a7:69:80:98:b8:0b:ff:
                    bc:b6:a1:bc:06:13:24:8a:ba:9b:74:0a:08:f7:58:
                    da:c4:47:7d:fb:1b:e5:ad:ce:26:50:38:fa:f4:59:
                    be:c9:c2:11:1c:ff:c0:85:a9:70:65:34:50:fb:a6:
                    e5:cc:c1:63:1c:90:de:1f:e2:a0:a9:f1:20:75:eb:
                    6a:92:27:b1:33:09:aa:8f:b3:36:e7:87:73:8a:91:
                    51:7c:7c:50:81:ed:e4:d0:a3:aa:ea:75:e2:f7:fb:
                    21:01:09:f6:58:1f:c7:ad:35:90:57:05:17:d1:e5:
                    56:bb:96:51:30:f8:da:3e:69:86:2a:b4:ac:97:f8:
                    41:d3:a4:00:70:20:dc:9e:2c:13:c4:ee:ff:25:16:
                    5c:22:c5:7a:d2:2e:5f:d8:a1:37:a3:eb:f8:b5:23:
                    17:54:71:55:a7:1e:22:13:f4:1f:b2:9b:a1:eb:ff:
                    26:2d:88:4d:7b:cb:4f:a9:01:5e:15:50:c8:e3:c5:
                    f7:dc:05:64:ba:69:90:d3:aa:8f:ad:d4:3c:ce:16:
                    0d:e4:85:9b:60:2d:35:c6:48:13:61:ce:fe:9c:2b:
                    b0:b0:13:2e:34:69:d8:37:11:e0:0b:93:66:3d:55:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:95:4B:A0:03:A5:9F:D6:0A:49:01:F6:C5:D9:55:36:F9:93:B9
            X509v3 Authority Key Identifier:
                keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:55:14:76:8e:7d:ca:64:cb:0f:b8:ac:17:01:58:a4:1d:
         75:f5:69:4e:24:87:3c:58:13:ab:5a:13:03:65:5c:f0:58:40:
         12:e6:7c:6c:a9:a9:7d:37:23:24:96:ab:04:aa:e2:46:95:35:
         50:45:ab:93:2c:79:63:eb:ac:89:fd:72:11:87:17:e9:87:7d:
         07:d6:6f:37:0f:bc:23:64:15:60:03:0a:07:43:25:92:11:77:
         1d:cc:ec:d4:a9:e8:83:ff:88:a9:88:f6:d3:db:3b:1d:d2:60:
         b6:a7:a6:a7:2e:d8:6f:d6:8a:a8:ee:1a:68:1d:90:e0:f9:a5:
         b2:06:f4:5a:96:cc:87:65:a7:0a:f4:1e:a4:7d:01:eb:93:6c:
         6b:4d:0d:19:05:18:5a:ea:30:64:06:32:c4:25:00:5e:91:4e:
         01:04:79:3d:d5:11:cc:66:38:6f:4d:3c:6e:87:ed:86:8a:2a:
         ee:6a:8a:38:99:a7:ba:f5:56:66:ac:e4:b2:e7:59:d9:f7:9f:
         cc:55:b0:99:c1:0d:b0:35:e6:2e:2d:a2:61:ab:ff:bd:02:2b:
         80:30:6f:6b:9c:4a:ba:ce:85:c5:11:03:ed:1a:0e:3d:b9:91:
         28:a9:1d:9e:0b:3c:5f:a0:d2:e6:46:f4:6c:ba:7d:bf:4b:05:
         10:a1:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:43 2026 by rpki-client