This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json) Hash identifier: rBu98BFdaJT8HWT4M+Yzx5TcMSaAK1N7Q7dwdcFrvxw= Subject key identifier: 5F:4D:75:16:08:9F:05:0A:11:73:FD:75:52:30:A3:8F:C8:8F:DA:8E Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81 Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081 Certificate serial: 019C41D880DD1FE09EB9FFECAA94FFAA0649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft Manifest number: 077E Signing time: Mon 09 Feb 2026 10:00:33 +0000 Manifest this update: Mon 09 Feb 2026 10:00:33 +0000 Manifest next update: Tue 10 Feb 2026 10:00:33 +0000 Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: IzX4uPDWH6/IO6QPgazcHLI4eye37fpN6kcCHaVikV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:80:dd:1f:e0:9e:b9:ff:ec:aa:94:ff:aa:06:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081 Validity Not Before: Feb 9 10:00:33 2026 GMT Not After : Feb 10 10:00:33 2026 GMT Subject: CN=5f4d7516089f050a1173fd755230a38fc88fda8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:ec:be:d6:7d:0f:ed:ee:a7:51:4a:89:b8: 1d:80:e6:c0:6e:0e:f8:fe:cb:a3:ce:55:e0:3e:61: 48:f7:7f:9c:5a:c3:8d:5e:86:53:c6:a6:c4:cf:bf: 48:5a:e7:a5:71:aa:1e:cf:0d:bd:ad:ed:44:7e:ce: 21:a2:68:9d:0d:3f:d7:90:14:d8:a3:02:b4:6f:c2: e1:50:cf:c1:0f:ea:37:a8:ad:3b:d4:e3:83:b1:4c: bf:35:e5:90:66:b7:24:dc:ee:e3:61:00:1f:15:1a: 77:91:45:7b:c1:a9:5e:a5:0b:cf:0c:48:b9:a9:37: d2:e1:01:ed:3b:56:27:42:8b:ca:6f:0f:94:b6:bf: b6:84:f0:cf:71:3c:a2:5f:bf:e2:96:95:88:21:ba: 64:a3:80:a1:14:e8:4f:3a:fa:2d:35:cc:3a:33:35: 8a:70:ce:5a:36:a0:95:9f:28:b7:a9:50:f7:7a:af: 8b:ec:af:dd:53:fe:f9:43:35:1f:3f:b2:ee:af:37: f2:90:f4:62:36:f0:9b:89:66:1d:0b:73:00:35:cb: e9:0a:0f:cf:56:27:e1:34:af:78:f8:26:77:49:c0: 53:ef:36:3f:fe:b4:2f:6d:63:0e:ed:b5:e8:0c:91: 9e:f9:4b:77:e6:a4:43:d5:ae:86:47:6b:e4:57:6a: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:75:16:08:9F:05:0A:11:73:FD:75:52:30:A3:8F:C8:8F:DA:8E X509v3 Authority Key Identifier: keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5d:a8:12:2d:c7:10:77:36:b7:73:50:50:ef:23:e4:70:30: 8e:2f:b2:ce:4e:af:c6:d8:08:4f:f2:7a:c1:ae:1a:ff:1a:c1: 22:5f:d9:98:22:80:0d:0f:f8:c1:5b:e6:d3:84:94:a8:44:32: 2b:57:b0:8e:c4:cc:01:9e:5e:b5:c5:9e:3c:b5:3c:32:ce:96: 92:9e:66:88:73:e8:f1:50:7a:92:38:a0:13:0f:c0:d1:1e:a3: 7e:3b:9c:8e:f9:fa:85:be:5d:09:d3:05:34:61:d1:27:c2:9a: c2:43:d6:ab:29:63:ac:23:da:54:a6:26:a6:a0:11:3b:46:a4: fd:f6:53:8a:ff:57:c9:49:18:49:d2:f5:c6:4e:98:d9:cf:be: b0:d4:3b:04:56:f8:b2:db:c3:4b:b7:07:4c:31:cf:4d:20:75: bc:9c:b4:3c:88:84:87:c7:62:c1:95:0c:60:20:70:1d:b4:db: 14:04:10:46:1f:5f:0f:72:b9:40:95:9e:d4:0c:1f:4d:5b:c9: 2d:1a:fe:79:8d:05:d5:45:3a:9b:03:3a:5c:8a:73:cc:5a:44: e8:6b:c4:6c:16:a3:fa:e9:19:ea:da:85:1e:07:92:72:2b:b3: 8a:ad:4d:7c:ca:ce:e5:bb:50:d1:28:75:6c:19:da:c6:6f:4e: 62:5b:c2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IDdH+Ceuf/sqpT/qgZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjEzNzRkYTczMTMxNGYwYTA1MTc1ZDI1YjBkODlhNzZm NmUwODEwHhcNMjYwMjA5MTAwMDMzWhcNMjYwMjEwMTAwMDMzWjAzMTEwLwYDVQQD Eyg1ZjRkNzUxNjA4OWYwNTBhMTE3M2ZkNzU1MjMwYTM4ZmM4OGZkYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtzsvtZ9D+3up1FKibgdgObAbg74 /sujzlXgPmFI93+cWsONXoZTxqbEz79IWuelcaoezw29re1Efs4homidDT/XkBTY owK0b8LhUM/BD+o3qK071OODsUy/NeWQZrck3O7jYQAfFRp3kUV7walepQvPDEi5 qTfS4QHtO1YnQovKbw+Utr+2hPDPcTyiX7/ilpWIIbpko4ChFOhPOvotNcw6MzWK cM5aNqCVnyi3qVD3eq+L7K/dU/75QzUfP7LurzfykPRiNvCbiWYdC3MANcvpCg/P VifhNK94+CZ3ScBT7zY//rQvbWMO7bXoDJGe+Ut35qRD1a6GR2vkV2qxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9NdRYInwUKEXP9dVIwo4/Ij9qOMB8GA1UdIwQY MBaAFE0hN02nMTFPCgUXXSWw2Jp29uCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAt ZWIxZWQwYjQ4N2IxLzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85YjJmYzEtYmE1OC00OTU3LTg1NDAtZWIxZWQwYjQ4N2Ix LzEvVFNFM1RhY3hNVThLQlJkZEpiRFltbmIyNElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJF2oEi3H EHc2t3NQUO8j5HAwji+yzk6vxtgIT/J6wa4a/xrBIl/ZmCKADQ/4wVvm04SUqEQy K1ewjsTMAZ5etcWePLU8Ms6Wkp5miHPo8VB6kjigEw/A0R6jfjucjvn6hb5dCdMF NGHRJ8KawkPWqyljrCPaVKYmpqARO0ak/fZTiv9XyUkYSdL1xk6Y2c++sNQ7BFb4 stvDS7cHTDHPTSB1vJy0PIiEh8diwZUMYCBwHbTbFAQQRh9fD3K5QJWe1AwfTVvJ LRr+eY0F1UU6mwM6XIpzzFpE6GvEbBaj+ukZ6tqFHgeSciuziq1NfMrO5btQ0Sh1 bBnaxm9OYlvCTA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:06 2026 by rpki-client