This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: XmvFIsOvnVBQh8kvsWKs1+L1wmbXWrhI5SfCan2fMdU= Subject key identifier: 87:9B:96:F5:64:01:0C:EC:44:97:09:7E:48:37:43:5A:77:C5:29:F6 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019C40FD5233FA20769012EE56328B9EC289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 1833 Signing time: Mon 09 Feb 2026 06:01:09 +0000 Manifest this update: Mon 09 Feb 2026 06:01:09 +0000 Manifest next update: Tue 10 Feb 2026 06:01:09 +0000 Files and hashes: 1: 0IrKb4Ocom_z-8cWO6ogho_9Ejs.roa (hash: tjdt9PHspdzPY29Lxc8zvyVdheALBUo0bapCnScWepo=) 2: 1-mot6mikLp_MDl0b7kmHUwF8vnM.roa (hash: XgWK76sOAKa1F05WWdrvMpLFcLfu8IIa8P7y+0SOUIQ=) 3: 2hev3Ozu25IR4V2dL7dAcH9H-38.roa (hash: JMnA8s2ygn9eCJpbiMUYRSb0p9eo/efu/ihrpcvOxF0=) 4: 5CBz7J_rxqKIErWJdNCTyxWORk4.roa (hash: NgQqsHixRjLE1PxJ9k04+GOCbvcPmM6kd6jLKzVPJ4A=) 5: 9d-_5920bjCdAX8N09u8neSsl3o.roa (hash: o8FIziw32GpKzwaDWACsYaXRfvH+eTcW8yYR9DZRp+c=) 6: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: 2FXMhqArNJwB/dZ6p27Dj0KirFBA7FndOxZ1kOQxjFQ=) 7: k4d-Grd6fMOD6ch95iLC_D9xAmI.roa (hash: FpQzQlajcmhliY2oa1dKiB0yjFo7oTmcDQa2iboX4UE=) 8: o4wjR8pZMB50VMWQpLsPi-iVTDE.roa (hash: ATIz3XapJ04NxEJg4iAdFVY462a3mfpQBCW4sSM6kew=) 9: oQUSrEROqxA0JRpbiStP3_G82GM.roa (hash: XUh60Rhyc+lm/VBx4kH4IarcFH4VCmn/oycmnKA5p14=) 10: oW0C-k4390azUSS_-13XzI_AVfY.roa (hash: rzcyrGergvNW2GLz+g1GX+/P72a2swYsTQgABXmO4lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:52:33:fa:20:76:90:12:ee:56:32:8b:9e:c2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Feb 9 06:01:09 2026 GMT Not After : Feb 10 06:01:09 2026 GMT Subject: CN=879b96f564010cec4497097e4837435a77c529f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:2c:9f:67:e5:f4:45:b3:59:66:39:c8:95: 23:dd:6a:f7:61:77:96:0a:c0:07:16:52:52:b0:ef: 76:9d:7a:15:b7:b9:c1:e1:e7:b4:b4:cf:5c:dc:b8: 49:21:68:13:9a:e1:58:06:7f:ad:c8:31:0f:86:5b: c1:ed:58:c5:3e:b7:03:9f:49:be:f9:ce:74:18:bf: f8:eb:62:12:f7:63:a0:7b:a3:3c:1f:3b:11:12:91: cf:13:49:db:43:b3:ac:ad:13:09:fe:fd:1f:11:1f: d3:67:c2:03:58:f1:a7:87:b5:22:fc:06:55:71:6d: 73:30:c9:46:ce:e3:45:a7:86:e7:35:29:47:06:df: c8:6e:e3:da:b1:74:2c:b6:58:ab:b8:5c:6f:a1:89: a4:1b:8b:87:32:6a:90:df:c8:8a:75:8a:3d:2d:47: 0c:15:1c:bb:5d:46:cd:03:20:20:aa:d1:e1:0d:5e: 94:70:3d:db:71:e7:66:f9:c4:39:2f:26:57:c4:69: 24:b9:98:84:80:8e:68:b2:fe:3e:a6:3c:c9:0b:47: e0:a9:ad:65:11:4e:ad:55:29:a7:c4:3e:74:d1:58: 67:80:02:41:20:bf:aa:62:dd:7b:70:17:52:43:7b: e7:0e:82:1b:ce:03:f6:aa:c0:00:dc:b2:fa:55:90: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:96:F5:64:01:0C:EC:44:97:09:7E:48:37:43:5A:77:C5:29:F6 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:df:61:a3:2a:05:b8:31:98:53:0f:7d:ea:71:66:51:1d:4a: ed:97:36:f9:9a:3b:5b:7a:8d:ac:a0:41:d4:bd:5c:85:31:ac: f4:1b:92:d2:bc:1e:d6:41:56:2d:92:17:ad:ec:a7:ca:e7:3d: c3:92:fc:fe:4c:3b:5a:44:05:98:6f:95:2d:e0:da:d8:89:2a: 55:d8:58:d0:1a:d9:79:5f:e8:64:d5:7b:22:a0:4c:a7:a1:54: 11:30:43:74:f4:6f:b9:07:a4:4f:ad:00:e4:1c:9e:6d:82:d3: 4c:68:b5:f8:07:6d:31:4f:23:38:36:b2:1d:01:97:57:91:99: bb:40:09:81:4e:f4:bd:9a:0c:5b:fd:f1:25:d5:1b:9e:d3:ab: 09:4b:94:c2:24:50:7b:de:c6:b7:fc:dd:b4:43:db:04:38:f0: d7:1e:47:39:5c:c8:27:47:8b:0f:f9:e7:11:7b:89:b5:29:3c: 8e:02:20:36:79:7c:e6:d0:08:21:c4:10:35:8f:8e:01:5a:61: 01:89:04:d4:2a:0f:5e:cf:34:19:bf:cc:d7:c2:ee:f2:d6:52: c6:09:0d:bc:eb:88:62:19:57:19:58:17:60:73:47:52:21:3a: e6:07:f7:12:0a:5a:33:53:39:4c:54:70:74:56:a2:cf:f1:5f: 30:b5:fc:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/VIz+iB2kBLuVjKLnsKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMjA5MDYwMTA5WhcNMjYwMjEwMDYwMTA5WjAzMTEwLwYDVQQD Eyg4NzliOTZmNTY0MDEwY2VjNDQ5NzA5N2U0ODM3NDM1YTc3YzUyOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbwsn2fl9EWzWWY5yJUj3Wr3YXeW CsAHFlJSsO92nXoVt7nB4ee0tM9c3LhJIWgTmuFYBn+tyDEPhlvB7VjFPrcDn0m+ +c50GL/462IS92Oge6M8HzsREpHPE0nbQ7OsrRMJ/v0fER/TZ8IDWPGnh7Ui/AZV cW1zMMlGzuNFp4bnNSlHBt/IbuPasXQstliruFxvoYmkG4uHMmqQ38iKdYo9LUcM FRy7XUbNAyAgqtHhDV6UcD3bcedm+cQ5LyZXxGkkuZiEgI5osv4+pjzJC0fgqa1l EU6tVSmnxD500VhngAJBIL+qYt17cBdSQ3vnDoIbzgP2qsAA3LL6VZBFhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeblvVkAQzsRJcJfkg3Q1p3xSn2MB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC99hoyoF uDGYUw996nFmUR1K7Zc2+Zo7W3qNrKBB1L1chTGs9BuS0rwe1kFWLZIXreynyuc9 w5L8/kw7WkQFmG+VLeDa2IkqVdhY0BrZeV/oZNV7IqBMp6FUETBDdPRvuQekT60A 5ByebYLTTGi1+AdtMU8jODayHQGXV5GZu0AJgU70vZoMW/3xJdUbntOrCUuUwiRQ e97Gt/zdtEPbBDjw1x5HOVzIJ0eLD/nnEXuJtSk8jgIgNnl85tAIIcQQNY+OAVph AYkE1CoPXs80Gb/M18Lu8tZSxgkNvOuIYhlXGVgXYHNHUiE65gf3EgpaM1M5TFRw dFaiz/FfMLX86Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:13 2026 by rpki-client