This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json) Hash identifier: rPCZtcW+8r1GdWLMFyz2feu6w8xDjFZKlFM1juu5+Xw= Subject key identifier: C5:D3:FF:E1:26:59:3A:4B:5E:6E:07:EB:19:D3:76:25:D5:8E:DA:9D Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9 Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9 Certificate serial: 019C42B46E7E5505C5E1F10FFA3FDE1085E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 14:00:46 +0000 Manifest this update: Mon 09 Feb 2026 14:00:46 +0000 Manifest next update: Tue 10 Feb 2026 14:00:46 +0000 Files and hashes: 1: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (hash: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE=) 2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: PNEADjFut8asc1jMu8j7jr2r+1DKi0Zv16os5m6cVUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:6e:7e:55:05:c5:e1:f1:0f:fa:3f:de:10:85:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9 Validity Not Before: Feb 9 14:00:46 2026 GMT Not After : Feb 10 14:00:46 2026 GMT Subject: CN=c5d3ffe126593a4b5e6e07eb19d37625d58eda9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:83:92:c3:07:f1:78:c5:28:67:e5:d0:c3: 8d:f8:d3:79:b5:88:fd:3e:d3:c3:97:eb:c9:3d:12: 1a:05:c2:a4:02:51:8d:17:11:8f:14:4b:71:aa:ba: 7d:ba:90:31:59:82:fe:a4:fb:ee:1c:e1:73:91:76: 96:52:18:50:2e:05:87:f2:e7:ea:27:ba:5a:20:90: 46:7e:87:8a:0c:31:96:68:58:5f:ab:e0:88:d6:e4: 98:57:f4:25:5b:bf:62:26:b3:38:b9:04:6c:92:4b: c1:fa:61:dd:f0:d4:36:62:63:29:a0:d5:4e:c9:8b: ca:c1:04:3e:35:4a:21:55:1c:78:ba:2e:3e:3e:4e: 12:78:d3:6a:9b:5b:08:0e:92:c5:1d:ab:02:35:e3: 30:66:e3:bc:62:8e:e8:51:90:75:c7:b1:2b:6d:46: 02:5c:86:2f:74:a6:49:f9:6f:96:6d:32:7d:de:0a: ac:44:ca:26:01:9a:e7:3c:de:04:25:12:7c:3e:25: 30:a9:c6:f4:2d:94:bc:a4:11:52:9a:47:1e:26:84: cc:24:7b:8d:fc:de:ed:f3:12:9b:fc:c5:0f:46:c4: 57:76:26:a8:90:32:b7:02:e8:4b:37:5a:d6:33:c9: af:f4:61:8c:0b:b0:44:a0:90:b0:5a:97:03:ef:2f: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:FF:E1:26:59:3A:4B:5E:6E:07:EB:19:D3:76:25:D5:8E:DA:9D X509v3 Authority Key Identifier: keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d6:da:33:83:f7:6e:68:c2:de:23:a2:c2:60:b0:69:35:ca: a3:6b:44:bb:a9:ea:ae:e0:e0:2e:47:2d:05:48:ba:fe:02:59: 2c:e5:18:4b:db:25:f9:72:65:3b:cd:e9:a7:f4:c2:3e:c9:08: ca:9e:5a:d9:e8:dc:ec:d2:f9:69:7c:42:50:8b:ca:72:fd:37: a8:f8:05:45:03:3f:d6:27:fe:3f:44:1f:1d:3a:b9:c3:ed:02: 14:c4:ae:d3:4c:b7:07:0e:04:47:bb:23:a3:f1:1c:d2:f8:b0: cb:bf:f5:4f:74:03:6a:82:e6:ff:44:4c:6c:7f:8a:63:21:12: 9a:f7:22:fd:a7:ee:53:ea:60:94:15:11:a8:6d:c5:15:7a:57: 7b:59:1f:13:0a:29:f3:f4:5a:3e:ba:fc:1e:aa:ad:cf:f5:c3: 81:40:4e:73:b6:07:d8:66:81:d6:26:b9:0f:6e:ee:05:ae:5f: 87:d2:a0:fb:b0:69:95:df:c6:ff:94:7d:a1:95:b6:10:8a:42: 6b:af:f3:a0:f1:2e:2d:1c:c7:c3:9d:bc:fb:25:85:da:e7:0a: 57:75:80:1d:d5:94:85:c3:31:39:a3:f4:8e:f2:11:3a:3b:10: 90:29:4b:7e:50:95:84:93:62:dd:78:ad:7e:cc:7b:a0:ac:54: 5e:aa:99:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtG5+VQXF4fEP+j/eEIXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl OTc0YzkwHhcNMjYwMjA5MTQwMDQ2WhcNMjYwMjEwMTQwMDQ2WjAzMTEwLwYDVQQD EyhjNWQzZmZlMTI2NTkzYTRiNWU2ZTA3ZWIxOWQzNzYyNWQ1OGVkYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T+DksMH8XjFKGfl0MON+NN5tYj9 PtPDl+vJPRIaBcKkAlGNFxGPFEtxqrp9upAxWYL+pPvuHOFzkXaWUhhQLgWH8ufq J7paIJBGfoeKDDGWaFhfq+CI1uSYV/QlW79iJrM4uQRskkvB+mHd8NQ2YmMpoNVO yYvKwQQ+NUohVRx4ui4+Pk4SeNNqm1sIDpLFHasCNeMwZuO8Yo7oUZB1x7ErbUYC XIYvdKZJ+W+WbTJ93gqsRMomAZrnPN4EJRJ8PiUwqcb0LZS8pBFSmkceJoTMJHuN /N7t8xKb/MUPRsRXdiaokDK3AuhLN1rWM8mv9GGMC7BEoJCwWpcD7y/++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXT/+EmWTpLXm4H6xnTdiXVjtqdMB8GA1UdIwQY MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt OWUyNDNjMmQ4ODIxLzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQtOWUyNDNjMmQ4ODIx LzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9baM4P3 bmjC3iOiwmCwaTXKo2tEu6nqruDgLkctBUi6/gJZLOUYS9sl+XJlO83pp/TCPskI yp5a2ejc7NL5aXxCUIvKcv03qPgFRQM/1if+P0QfHTq5w+0CFMSu00y3Bw4ER7sj o/Ec0viwy7/1T3QDaoLm/0RMbH+KYyESmvci/afuU+pglBURqG3FFXpXe1kfEwop 8/RaPrr8Hqqtz/XDgUBOc7YH2GaB1ia5D27uBa5fh9Kg+7Bpld/G/5R9oZW2EIpC a6/zoPEuLRzHw528+yWF2ucKV3WAHdWUhcMxOaP0jvIROjsQkClLflCVhJNi3Xit fsx7oKxUXqqZ1w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:29 2026 by rpki-client