This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json) Hash identifier: OFIev+nWDw+W0HyAHVVYkdxD9QNHpTnk05hIIWjlRpM= Subject key identifier: A9:BF:86:BF:D9:54:CC:AE:D5:62:9D:60:C2:09:8A:FB:F2:EE:B3:15 Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20 Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720 Certificate serial: 019C439014F60697A75AC8FCDDA8C06372AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft Manifest number: 1750 Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: dAqS0xUbZSIs9g0LUy8X8VWqzXiRhePxcT0mIMaje+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:14:f6:06:97:a7:5a:c8:fc:dd:a8:c0:63:72:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720 Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=a9bf86bfd954ccaed5629d60c2098afbf2eeb315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:92:3a:c1:4c:df:75:bd:d4:ee:ea:47:b9: 01:b2:fe:43:9e:e8:d3:f4:b0:a2:ea:3a:9c:dd:c8: 45:47:f5:3b:07:b4:40:46:2a:e2:e1:4e:0c:6a:db: 6f:18:19:f2:01:0a:29:21:fb:10:c7:99:12:8b:1c: 5a:98:4e:97:2b:3a:ef:cd:65:22:b0:e6:a0:6b:67: ef:47:74:38:fd:eb:94:80:89:e3:fa:e5:eb:ec:a0: 2c:60:e3:05:5d:40:12:4b:ff:23:3a:35:44:82:f8: f8:c2:79:1e:c3:00:98:bb:8c:3b:81:da:38:0b:94: c6:c6:c5:5d:26:8d:aa:82:9a:d0:26:13:f7:dc:6b: a6:8a:a2:83:1f:11:5c:1d:a3:7b:88:72:89:d3:42: 42:88:9e:08:ca:46:1d:b8:b0:a0:99:1e:78:71:07: 8c:aa:1d:09:96:af:91:21:d7:7c:45:bc:f2:1d:fb: 4b:c6:54:38:a1:ab:76:d0:ea:a0:9c:1b:4c:2d:86: 93:15:2a:48:8a:4a:94:80:09:3e:3a:6d:e2:27:87: 2d:4c:81:c3:4e:8d:8b:8d:1e:5a:ae:c9:19:ff:f8: 13:ee:75:e5:19:fb:3f:27:6e:c6:47:20:2e:71:8d: a9:e9:17:f5:e4:1f:23:1d:26:65:2a:16:60:61:1c: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BF:86:BF:D9:54:CC:AE:D5:62:9D:60:C2:09:8A:FB:F2:EE:B3:15 X509v3 Authority Key Identifier: keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8a:31:78:d7:d7:82:14:35:f7:4c:bb:96:24:2f:e2:aa:8a: 08:99:f9:97:b0:99:93:c0:24:d2:6e:ed:1a:cc:42:af:0a:35: e0:85:f0:95:2b:fd:d7:bd:fb:18:13:fa:06:f1:9f:0b:00:87: 67:22:8b:1c:8b:1f:8d:e1:6f:46:4b:82:31:c4:4d:be:90:d7: 07:8c:41:65:f7:36:95:92:40:57:ad:48:b8:5e:dc:db:26:d1: 8c:f7:59:c0:4a:eb:4d:2d:e3:10:d9:02:5a:b4:2d:e4:c8:47: f7:5e:4a:87:bd:85:05:a9:f5:1b:be:21:9f:ff:e2:ba:02:63: 82:9a:cb:ca:a7:52:c5:7b:62:09:5b:fd:ce:6a:bf:39:80:a8: d0:b7:d3:e6:cd:12:f4:3d:38:5c:60:21:a8:d0:6c:8f:98:8e: 9d:e4:63:1c:f5:99:58:f0:0f:2b:34:57:03:65:6b:e9:d3:c6: 03:7b:8d:09:7d:9c:5b:c7:99:c5:6a:7f:1d:35:0d:57:eb:d6: 26:1c:04:5d:9d:8e:ae:95:1c:68:ad:38:1d:4c:0e:48:06:30: 1e:1b:36:9d:40:b7:04:6d:4f:f0:33:f4:0f:f0:15:e0:50:3a: 1d:96:1c:c5:4b:82:0e:3f:17:68:e1:e8:b3:16:ea:a8:d5:b6: 6e:e9:15:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBT2BpenWsj83ajAY3KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNTNmOGE1YTA2Nzc0NGU4ZmUzN2M5N2MxY2M0Yjg4N2Vk YWM3MjAwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD EyhhOWJmODZiZmQ5NTRjY2FlZDU2MjlkNjBjMjA5OGFmYmYyZWViMzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBOSOsFM33W91O7qR7kBsv5DnujT 9LCi6jqc3chFR/U7B7RARiri4U4MattvGBnyAQopIfsQx5kSixxamE6XKzrvzWUi sOaga2fvR3Q4/euUgInj+uXr7KAsYOMFXUASS/8jOjVEgvj4wnkewwCYu4w7gdo4 C5TGxsVdJo2qgprQJhP33GumiqKDHxFcHaN7iHKJ00JCiJ4IykYduLCgmR54cQeM qh0Jlq+RIdd8RbzyHftLxlQ4oat20OqgnBtMLYaTFSpIikqUgAk+Om3iJ4ctTIHD To2LjR5arskZ//gT7nXlGfs/J27GRyAucY2p6Rf15B8jHSZlKhZgYRxa0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm/hr/ZVMyu1WKdYMIJivvy7rMVMB8GA1UdIwQY MBaAFE1T+KWgZ3ROj+N8l8HMS4h+2scgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83MTA0ZDQtNzQxNC00OWQyLTliODQt OGIxYTA5M2M4YzVjLzEvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS83MTA0ZDQtNzQxNC00OWQyLTliODQtOGIxYTA5M2M4YzVj LzEvVFZQNHBhQm5kRTZQNDN5WHdjeExpSDdheHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATooxeNfX ghQ190y7liQv4qqKCJn5l7CZk8Ak0m7tGsxCrwo14IXwlSv91737GBP6BvGfCwCH ZyKLHIsfjeFvRkuCMcRNvpDXB4xBZfc2lZJAV61IuF7c2ybRjPdZwErrTS3jENkC WrQt5MhH915Kh72FBan1G74hn//iugJjgprLyqdSxXtiCVv9zmq/OYCo0LfT5s0S 9D04XGAhqNBsj5iOneRjHPWZWPAPKzRXA2Vr6dPGA3uNCX2cW8eZxWp/HTUNV+vW JhwEXZ2OrpUcaK04HUwOSAYwHhs2nUC3BG1P8DP0D/AV4FA6HZYcxUuCDj8XaOHo sxbqqNW2bukVOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:35 2026 by rpki-client