This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json) Hash identifier: DeVi6Kk51OuJj9Z2u+0WTDAQcfXgC1Nb/RPI2CYX258= Subject key identifier: A4:3B:72:B1:D9:49:63:90:CA:A8:6B:5D:4E:2C:CD:1F:BE:A0:8F:5E Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Certificate serial: 019C420F7BCE9E4F69CA73A1DF22A8E0E70D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft Manifest number: 125B Signing time: Mon 09 Feb 2026 11:00:36 +0000 Manifest this update: Mon 09 Feb 2026 11:00:36 +0000 Manifest next update: Tue 10 Feb 2026 11:00:36 +0000 Files and hashes: 1: fp6e1oWTW6ERgaYTNaPCSf0ibbk.roa (hash: cfY9W6Oc4CWCMHNddhZlxoGOHOxJVO+wjS65/vUgYTs=) 2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: 1qsHCx9VHBxfTItDH+LGXRUOCKkokTgCxohgJUpsaWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:7b:ce:9e:4f:69:ca:73:a1:df:22:a8:e0:e7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Validity Not Before: Feb 9 11:00:36 2026 GMT Not After : Feb 10 11:00:36 2026 GMT Subject: CN=a43b72b1d9496390caa86b5d4e2ccd1fbea08f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:17:9d:35:7a:17:ff:3e:a5:52:c0:26:3c: be:bd:83:9b:d8:a5:01:39:31:77:d6:9f:c4:15:79: 7a:38:46:a0:96:fe:07:e2:5c:4b:7c:a5:e5:dc:03: c0:9c:88:c2:ff:d0:a6:1d:29:f6:17:85:c1:38:27: da:69:ee:c8:f4:83:c9:ac:c8:00:8e:d8:d8:ee:b7: 68:35:fc:60:cf:27:d3:b0:f5:31:1a:80:70:6e:d6: 81:fb:bf:e5:7d:4d:62:16:62:3a:c8:9a:94:79:a5: 90:90:04:99:24:37:80:62:7d:44:f4:7d:ba:41:81: 80:52:ec:07:a2:8f:4d:da:2b:84:b2:51:7b:2f:8b: 06:17:40:c2:ef:17:4f:d6:0f:f1:66:fd:5e:b2:20: e9:54:0f:50:6c:4c:5d:47:45:20:cc:79:db:5b:64: 9a:db:ff:87:a3:e3:cf:d1:23:da:f8:85:a8:f9:33: 1d:be:4e:01:5b:03:85:8c:5f:47:e8:29:55:28:51: af:7c:74:48:3e:99:9a:1d:77:98:d8:97:13:ab:eb: fd:67:c2:1c:83:cc:f8:c4:b9:c0:04:d8:07:e5:3f: 0f:0d:e7:d7:cd:67:eb:a7:28:1c:44:1d:63:1e:f1: 1f:89:8a:6c:43:68:4d:97:b0:ca:5a:43:df:14:e9: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3B:72:B1:D9:49:63:90:CA:A8:6B:5D:4E:2C:CD:1F:BE:A0:8F:5E X509v3 Authority Key Identifier: keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:10:84:80:ef:18:46:06:6a:31:b2:7b:19:51:8e:f1:7f:c0: 40:4a:f4:76:a1:54:86:9b:42:6e:bb:7a:e0:cc:46:b1:9d:96: 42:66:eb:28:b5:ea:c1:30:14:36:c7:5f:f0:b7:78:ec:3f:fa: 6f:34:67:82:a9:d5:f3:af:3e:02:a0:6d:91:15:54:ad:ce:37: bf:7d:2f:2b:2c:ca:0d:a8:e9:28:ee:00:8b:78:34:1f:5c:a1: f5:c4:4d:fe:63:7f:c5:46:27:66:d8:db:a6:98:c0:15:86:96: b9:c5:67:04:d8:73:d4:41:a5:a5:aa:2c:83:af:81:c5:a6:46: de:a6:99:17:9a:60:b5:a3:c5:ad:00:38:7d:43:34:7c:ae:43: c5:84:59:2b:48:f1:08:80:f8:a4:d8:91:a4:0b:6e:c0:12:e8: 00:a9:c8:fe:7c:59:bb:93:f5:64:bc:bc:bb:00:59:df:aa:83: 5c:b0:da:cd:98:a6:cc:4c:49:6e:8e:a8:ff:3e:7c:0a:66:1a: 9b:1e:63:d8:cd:0f:bb:8a:3e:a1:88:06:dd:7a:50:ee:ac:7b: 56:2b:19:f7:4b:a2:e9:94:a1:8b:4c:5c:16:e3:fd:f7:3c:87: 01:8f:84:bd:bc:5f:af:f2:98:89:77:31:77:4a:59:ef:de:7e: 5b:c7:c5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3vOnk9pynOh3yKo4OcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzljNGUzZmU4NjlkOTc4M2JhMmRhZGY2NjBkY2NkMGZh NTM3MDcwHhcNMjYwMjA5MTEwMDM2WhcNMjYwMjEwMTEwMDM2WjAzMTEwLwYDVQQD EyhhNDNiNzJiMWQ5NDk2MzkwY2FhODZiNWQ0ZTJjY2QxZmJlYTA4ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtQXnTV6F/8+pVLAJjy+vYOb2KUB OTF31p/EFXl6OEaglv4H4lxLfKXl3APAnIjC/9CmHSn2F4XBOCfaae7I9IPJrMgA jtjY7rdoNfxgzyfTsPUxGoBwbtaB+7/lfU1iFmI6yJqUeaWQkASZJDeAYn1E9H26 QYGAUuwHoo9N2iuEslF7L4sGF0DC7xdP1g/xZv1esiDpVA9QbExdR0UgzHnbW2Sa 2/+Ho+PP0SPa+IWo+TMdvk4BWwOFjF9H6ClVKFGvfHRIPpmaHXeY2JcTq+v9Z8Ic g8z4xLnABNgH5T8PDefXzWfrpygcRB1jHvEfiYpsQ2hNl7DKWkPfFOleFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ7crHZSWOQyqhrXU4szR++oI9eMB8GA1UdIwQY MBaAFLc5xOP+hp2Xg7otrfZg3M0PpTcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQt MDcyMjYyZTMwZmM1LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQtMDcyMjYyZTMwZmM1 LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBCEgO8Y RgZqMbJ7GVGO8X/AQEr0dqFUhptCbrt64MxGsZ2WQmbrKLXqwTAUNsdf8Ld47D/6 bzRngqnV868+AqBtkRVUrc43v30vKyzKDajpKO4Ai3g0H1yh9cRN/mN/xUYnZtjb ppjAFYaWucVnBNhz1EGlpaosg6+BxaZG3qaZF5pgtaPFrQA4fUM0fK5DxYRZK0jx CID4pNiRpAtuwBLoAKnI/nxZu5P1ZLy8uwBZ36qDXLDazZimzExJbo6o/z58CmYa mx5j2M0Pu4o+oYgG3XpQ7qx7VisZ90ui6ZShi0xcFuP99zyHAY+Evbxfr/KYiXcx d0pZ795+W8fFww== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:03 2026 by rpki-client