This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json) Hash identifier: EqkjaYlNFFTrR0sfsIDNbJNPsUspK8SXRB3I+hOhrxU= Subject key identifier: 78:D6:07:AE:8F:15:23:2D:AD:E5:1A:21:D7:F1:16:1B:E4:1B:E9:78 Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa Certificate serial: 019C4322E2DA4B938A81826C684778E9C29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:25 +0000 Manifest this update: Mon 09 Feb 2026 16:01:25 +0000 Manifest next update: Tue 10 Feb 2026 16:01:25 +0000 Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: mfpIr2XuM3xmVgevQ1STPRe0z1sbpECd+m7tU4CCayQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e2:da:4b:93:8a:81:82:6c:68:47:78:e9:c2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa Validity Not Before: Feb 9 16:01:25 2026 GMT Not After : Feb 10 16:01:25 2026 GMT Subject: CN=78d607ae8f15232dade51a21d7f1161be41be978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:50:63:a9:ab:a4:72:1b:17:cc:c3:df:37: 40:20:b6:8f:17:d1:71:2f:f5:b2:b5:15:eb:78:1a: 18:a5:1d:15:0c:9a:2b:c2:e8:f8:b3:e9:87:b9:7d: 3d:09:e6:84:53:73:1c:ed:f8:94:cf:80:54:7a:18: d8:fc:18:ff:ae:45:41:f7:66:97:71:60:a0:db:a0: 63:01:e8:79:b8:0c:df:40:82:8e:81:f7:c1:34:39: d0:13:fd:7d:46:6b:11:11:4c:7f:9f:c7:85:d1:53: 51:85:d5:1e:ad:70:6b:d2:cd:05:ac:1f:51:76:d5: b7:34:a4:79:20:c0:a7:4d:7a:33:27:0c:d5:41:eb: 76:26:0e:2c:3e:e5:33:40:bf:a4:2d:e2:8b:ff:8f: 83:da:96:24:4c:da:47:d9:4e:07:04:57:69:cc:0e: 72:38:ef:93:bd:72:aa:a6:eb:0d:b3:3e:f8:10:b9: c9:0a:c8:3c:5c:92:64:a7:bb:c1:27:02:00:12:0d: 64:20:19:91:10:e5:bd:0b:8c:ab:00:61:b0:e1:53: d3:c8:68:99:33:2c:11:dd:96:b6:e5:2a:87:0d:bc: 2c:6c:bf:fb:30:91:66:76:eb:53:75:b0:1b:49:32: 20:ba:03:37:dc:04:f0:a2:e8:25:da:a8:f4:b5:b0: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D6:07:AE:8F:15:23:2D:AD:E5:1A:21:D7:F1:16:1B:E4:1B:E9:78 X509v3 Authority Key Identifier: keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:74:06:80:30:bb:73:45:35:b3:b2:e3:b4:0a:61:9d:77:04: b1:97:22:ea:18:d5:8e:b0:ca:73:b2:ed:68:41:d4:df:05:ae: c3:3d:54:fb:74:f4:1a:37:03:aa:5c:70:7c:1a:e3:59:cd:9b: 74:31:49:fd:70:29:22:e5:c8:28:07:e9:09:10:61:21:ee:b7: ce:bf:f2:23:5d:f1:40:48:65:83:26:66:c0:28:fd:9e:56:14: 7b:8c:58:e4:61:ad:a9:59:81:10:f2:28:ea:41:50:ed:b5:1b: 77:05:0a:4f:37:b3:6c:4e:85:f8:29:df:44:09:6a:06:6c:e0: 3c:64:3e:e5:63:26:d2:6f:92:bf:f5:b0:c1:9d:93:3d:36:be: c5:0b:66:be:bc:76:d9:5a:34:43:43:b5:cb:e9:13:da:94:c6: fb:8e:55:bc:fd:e1:4d:95:f7:39:90:c6:78:62:84:79:6b:5a: 2c:f0:94:8d:5c:bf:b8:d6:bb:da:b1:df:e8:30:1f:c6:51:77: ad:7e:fe:ef:14:23:97:ca:90:29:20:ad:f1:7d:be:a7:99:21: d8:5f:68:74:c5:fa:a1:84:3e:9d:44:43:b1:7c:84:73:17:d8: f3:53:94:f5:1d:c3:64:a3:e9:1e:8a:06:ce:a5:2e:f0:c8:90: 0e:46:88:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuLaS5OKgYJsaEd46cKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3M2Q4OGQ3NDY4YWY2MDFhZjE0YzVlMWVkOTAzYzRmMzZj YWY1ZmEwHhcNMjYwMjA5MTYwMTI1WhcNMjYwMjEwMTYwMTI1WjAzMTEwLwYDVQQD Eyg3OGQ2MDdhZThmMTUyMzJkYWRlNTFhMjFkN2YxMTYxYmU0MWJlOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozVQY6mrpHIbF8zD3zdAILaPF9Fx L/WytRXreBoYpR0VDJorwuj4s+mHuX09CeaEU3Mc7fiUz4BUehjY/Bj/rkVB92aX cWCg26BjAeh5uAzfQIKOgffBNDnQE/19RmsREUx/n8eF0VNRhdUerXBr0s0FrB9R dtW3NKR5IMCnTXozJwzVQet2Jg4sPuUzQL+kLeKL/4+D2pYkTNpH2U4HBFdpzA5y OO+TvXKqpusNsz74ELnJCsg8XJJkp7vBJwIAEg1kIBmREOW9C4yrAGGw4VPTyGiZ MywR3Za25SqHDbwsbL/7MJFmdutTdbAbSTIgugM33ATwougl2qj0tbB2IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjWB66PFSMtreUaIdfxFhvkG+l4MB8GA1UdIwQY MBaAFLc9iNdGivYBrxTF4e2QPE82yvX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xOWM5M2ItYzlhMS00OTRiLTliYzAt MGYyYjU0MGVjYTA4LzEvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xOWM5M2ItYzlhMS00OTRiLTliYzAtMGYyYjU0MGVjYTA4 LzEvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA33QGgDC7 c0U1s7LjtAphnXcEsZci6hjVjrDKc7LtaEHU3wWuwz1U+3T0GjcDqlxwfBrjWc2b dDFJ/XApIuXIKAfpCRBhIe63zr/yI13xQEhlgyZmwCj9nlYUe4xY5GGtqVmBEPIo 6kFQ7bUbdwUKTzezbE6F+CnfRAlqBmzgPGQ+5WMm0m+Sv/WwwZ2TPTa+xQtmvrx2 2Vo0Q0O1y+kT2pTG+45VvP3hTZX3OZDGeGKEeWtaLPCUjVy/uNa72rHf6DAfxlF3 rX7+7xQjl8qQKSCt8X2+p5kh2F9odMX6oYQ+nURDsXyEcxfY81OU9R3DZKPpHooG zqUu8MiQDkaIiA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:49 2026 by rpki-client