This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json) Hash identifier: odGxpWM5S4tOZ/kIMTz9Sgt40dADrjKTozvudNGSBrM= Subject key identifier: 12:FE:5A:AD:1E:23:42:BA:44:39:4E:DC:D5:F9:97:4A:32:70:C2:D8 Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e Certificate serial: 019C43225ED09D44B2BC67E7CEC5372FEF8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft Manifest number: 08F2 Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: URuzwDDnQPcbNSgwsf9jfuQmbaRjpvXaVIF4anes8VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5e:d0:9d:44:b2:bc:67:e7:ce:c5:37:2f:ef:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=12fe5aad1e2342ba44394edcd5f9974a3270c2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:31:9a:81:61:ff:b6:e8:18:dc:2e:c6:32: 71:70:7e:53:9c:0d:da:ad:7a:dc:e1:2f:61:e1:5a: 05:e0:55:1d:02:f8:44:83:bc:75:fa:97:50:f2:f8: 7d:57:95:36:35:4e:4a:82:3a:03:b1:71:f8:0a:b5: d1:71:24:16:26:58:24:6c:13:9e:97:84:73:f4:a7: 78:3e:99:da:d8:08:97:62:8c:b8:67:e5:69:cd:54: d4:98:40:e7:d9:09:36:57:86:34:ec:4d:27:55:a0: f7:6a:96:ae:ac:5e:97:a9:7d:fb:74:1d:ab:e5:20: 2d:bc:e8:90:55:84:f5:c6:67:1c:3b:97:e5:a7:fb: ea:63:79:e7:82:87:be:84:65:24:54:e8:eb:89:f8: 0e:a5:d9:11:0c:c7:51:61:d0:37:14:b1:14:57:81: f9:8e:56:39:ec:36:d4:d7:53:38:66:25:56:3c:a7: a1:c5:ed:e3:fb:b5:01:24:94:60:9b:ff:9d:e0:b4: 98:90:ee:ce:c5:6f:36:c0:9a:d6:13:bc:0f:1d:be: e3:85:82:ab:3f:54:1d:4b:f2:76:5c:8c:44:94:bb: 16:3f:f6:e4:ad:26:3f:05:c3:b5:0b:08:06:7f:f5: 8e:6d:6f:1a:68:ff:8f:aa:a2:47:6a:bb:da:ae:f0: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:5A:AD:1E:23:42:BA:44:39:4E:DC:D5:F9:97:4A:32:70:C2:D8 X509v3 Authority Key Identifier: keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:cf:75:3b:4a:a0:7c:ff:5a:9b:35:5c:e6:80:b4:f7:f8:b8: 28:d9:ec:43:dd:26:91:35:8d:28:55:e5:9a:eb:b5:a5:cc:19: c5:14:44:59:e5:93:7b:e1:e5:02:81:fd:2c:68:7e:a9:b7:d1: 12:82:a2:7f:4c:0c:1e:7f:14:81:31:fd:37:8e:2e:33:ac:a4: 17:de:f1:f5:43:c5:5a:c4:1e:dc:6a:c2:79:75:08:d7:c7:1d: 62:27:3d:9f:29:94:36:d1:fe:b4:0d:57:94:42:05:5a:84:0f: c7:fd:8e:94:53:cf:ab:1a:dc:9d:62:a5:bb:c8:57:da:70:9b: 4c:10:13:af:86:bc:2f:db:35:d6:7f:f3:0d:14:0d:42:a1:d2: 0e:86:dc:19:f8:8f:6a:60:2f:7b:e4:b9:69:ac:d3:6f:a6:bb: 89:6a:6b:de:33:62:a9:13:dc:a2:ac:f7:fd:2c:df:74:0d:c1: 9e:67:03:1e:9c:7b:b0:9b:25:25:95:a3:a3:9b:be:26:56:90: aa:24:2e:e1:1d:46:ad:01:01:c3:36:ad:b8:74:61:e1:fb:50: f8:d2:db:4c:dc:89:e3:59:6b:8c:cf:3d:e5:91:92:14:4f:50: 5d:53:38:91:e2:cb:9e:7a:b2:25:33:61:fe:69:35:b1:3c:98: 11:4d:fb:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIl7QnUSyvGfnzsU3L++PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNTQ4YmZmYjMyMTQ5OTFhOWNhN2M5ZjBmNWI0ODU0NTg4 Yjk3NWUwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD EygxMmZlNWFhZDFlMjM0MmJhNDQzOTRlZGNkNWY5OTc0YTMyNzBjMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRMxmoFh/7boGNwuxjJxcH5TnA3a rXrc4S9h4VoF4FUdAvhEg7x1+pdQ8vh9V5U2NU5KgjoDsXH4CrXRcSQWJlgkbBOe l4Rz9Kd4Ppna2AiXYoy4Z+VpzVTUmEDn2Qk2V4Y07E0nVaD3apaurF6XqX37dB2r 5SAtvOiQVYT1xmccO5flp/vqY3nngoe+hGUkVOjrifgOpdkRDMdRYdA3FLEUV4H5 jlY57DbU11M4ZiVWPKehxe3j+7UBJJRgm/+d4LSYkO7OxW82wJrWE7wPHb7jhYKr P1QdS/J2XIxElLsWP/bkrSY/BcO1CwgGf/WObW8aaP+PqqJHarvarvCFQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL+Wq0eI0K6RDlO3NX5l0oycMLYMB8GA1UdIwQY MBaAFE1Ui/+zIUmRqcp8nw9bSFRYi5deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83ZjQ5ZGYtMjcyMi00NWQxLTlkOWIt OTc1OWY5YTc5YWNlLzEvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83ZjQ5ZGYtMjcyMi00NWQxLTlkOWItOTc1OWY5YTc5YWNl LzEvVFZTTF83TWhTWkdweW55ZkQxdElWRmlMbDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA891O0qg fP9amzVc5oC09/i4KNnsQ90mkTWNKFXlmuu1pcwZxRREWeWTe+HlAoH9LGh+qbfR EoKif0wMHn8UgTH9N44uM6ykF97x9UPFWsQe3GrCeXUI18cdYic9nymUNtH+tA1X lEIFWoQPx/2OlFPPqxrcnWKlu8hX2nCbTBATr4a8L9s11n/zDRQNQqHSDobcGfiP amAve+S5aazTb6a7iWpr3jNiqRPcoqz3/SzfdA3BnmcDHpx7sJslJZWjo5u+JlaQ qiQu4R1GrQEBwzatuHRh4ftQ+NLbTNyJ41lrjM895ZGSFE9QXVM4keLLnnqyJTNh /mk1sTyYEU37Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:03 2026 by rpki-client