This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: 7vrk6lW5vV2DFU1m821WADYdXcyHydMTktXp6fHVVPg=
Subject key identifier: C5:F7:1F:9F:A2:90:B0:2B:D9:24:D7:60:C3:63:4E:A3:C4:F3:C4:96
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019C43905C10B36D8FBC04D2A991F08A86B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0A8D
Signing time: Mon 09 Feb 2026 18:01:00 +0000
Manifest this update: Mon 09 Feb 2026 18:01:00 +0000
Manifest next update: Tue 10 Feb 2026 18:01:00 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: 8IeWU5pcyxlT/gmOyhraTMoVH1jqsCIdbOzL3eXmtBQ=)
2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:5c:10:b3:6d:8f:bc:04:d2:a9:91:f0:8a:86:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Feb 9 18:01:00 2026 GMT
Not After : Feb 10 18:01:00 2026 GMT
Subject: CN=c5f71f9fa290b02bd924d760c3634ea3c4f3c496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:7a:57:47:06:27:38:e8:cf:b0:e8:d5:f5:
03:8d:3c:d0:51:31:31:ef:b9:3f:ae:1e:c2:2a:ab:
fa:70:43:ee:6f:51:e5:25:2c:01:87:0f:d6:fa:02:
03:97:33:58:51:2d:c4:e5:75:48:0f:4d:0d:78:ad:
7c:47:74:f2:80:33:cf:8b:88:ab:d1:9d:a9:8f:a0:
fe:cb:49:a3:92:9a:99:37:0b:a7:d6:29:06:ea:5c:
7f:88:9f:a6:8e:60:c4:bb:2b:9f:8f:2d:88:af:55:
22:c7:2f:76:b1:24:46:b3:55:9d:a6:22:b8:b3:48:
4d:5d:94:45:10:30:6f:47:17:5d:5b:8f:76:62:a5:
90:42:b6:66:3d:aa:65:60:66:bb:4a:cd:92:8e:0c:
52:35:36:fa:7d:70:3d:70:28:01:62:64:5a:4c:08:
b9:b9:3b:21:45:54:28:dd:41:65:38:f2:36:f3:7f:
13:15:24:ad:bf:9f:e6:fd:47:37:69:6e:28:30:e6:
e2:bc:f5:e0:56:74:33:ec:18:d6:0e:3f:a3:5d:00:
de:58:fc:c7:f0:a8:4a:10:95:d5:6c:81:ce:00:48:
37:48:ef:66:f9:44:f0:9c:fc:a7:df:30:70:18:10:
20:09:12:e9:6b:23:62:b4:7e:ee:87:1a:43:aa:33:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:1F:9F:A2:90:B0:2B:D9:24:D7:60:C3:63:4E:A3:C4:F3:C4:96
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:d2:86:58:1a:bb:07:56:8e:63:df:83:c8:08:2e:f3:45:
e7:cd:68:a3:63:4e:15:9c:e4:49:43:02:80:7a:d3:c0:89:a8:
26:ca:a7:97:50:51:bf:9b:6f:7c:5b:33:ff:b5:10:9a:8d:94:
c2:3f:71:5d:7f:73:00:0a:40:84:70:1a:21:19:86:28:fb:40:
fc:f0:de:ec:1d:f3:c8:ad:90:71:d3:97:3a:9d:65:f0:13:c4:
e7:cb:a8:c6:17:a4:75:35:49:f6:a8:14:99:d9:07:92:20:a5:
6f:f0:28:8a:6f:43:15:31:69:f7:b2:58:31:0d:cd:5a:19:02:
03:c6:6d:dd:39:f0:fa:3b:0f:6e:b7:8e:61:1a:49:b4:40:a3:
c8:0a:e9:20:f4:d0:fd:92:ac:52:ea:ef:8e:09:60:0c:e7:55:
cb:7b:72:3b:7c:11:f3:4a:b9:64:a6:ea:7d:4a:86:6d:80:19:
9b:e7:a6:e9:35:f9:bd:bf:6d:c1:0b:81:d2:5c:e1:d9:4f:19:
57:04:63:a2:fc:48:c9:89:83:13:36:ba:f2:05:70:25:77:9c:
4f:9f:b7:14:d1:93:e0:9d:62:76:fb:34:5f:ab:84:6f:ed:ac:
40:96:7e:70:c5:8f:73:6c:1c:ae:fe:f8:06:60:05:fa:05:69:
63:b9:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:19 2026 by rpki-client