This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json) Hash identifier: JMnas1eRbIwsNiY3rdBuF66dpRdu4mYNJDog2SPP7eA= Subject key identifier: 10:04:54:F2:3D:D4:4E:CD:EE:4C:5A:EA:5F:66:48:6D:D2:13:2D:7B Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Certificate serial: 019C41A210D752118D2E1E1A042FF221B3B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft Manifest number: 0D26 Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: 64yTSgcbmjpKAYlvmgIcfumrEFE.roa (hash: 55p0izKTNl/c/EZ7S9t+Y7oaqYI6l5T9RwPtRmB8IuY=) 2: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: VUDYLRZyP7im8Ml6/s8tAomt+Vr2HJ0dTPG6UPrEEGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:10:d7:52:11:8d:2e:1e:1a:04:2f:f2:21:b3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=100454f23dd44ecdee4c5aea5f66486dd2132d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:06:0e:44:60:85:d2:eb:e2:b4:62:69:5c: cf:ee:3d:08:b9:ec:b3:61:1f:95:a6:d7:a8:ea:b2: 72:22:63:51:27:b4:03:cc:dd:12:ec:a7:cc:fe:c7: fc:e4:ea:b4:25:9f:0b:bb:83:cb:d9:58:32:1d:8b: 16:84:43:95:9d:f8:6e:dc:65:ab:03:5f:99:13:48: ac:83:ac:87:e4:b9:ba:a8:00:54:c2:62:62:ff:0f: 6c:12:a6:d6:3d:81:d3:26:3e:1f:fe:ad:70:77:34: 56:f7:40:74:9c:75:ef:05:73:66:2e:1a:c1:c2:0b: 97:d7:01:d9:51:f9:a4:34:1b:5a:bd:f7:eb:7d:b7: 7b:39:27:56:af:ef:37:32:1a:0f:5f:3f:5b:c3:ae: 8c:bd:a0:a8:30:aa:2b:5f:ad:9f:f2:1f:2b:06:86: 5a:0a:09:33:82:2a:bf:97:48:77:d3:ac:5d:a7:35: a5:a1:d7:36:6e:fa:49:97:62:6a:b6:6b:24:e9:f0: aa:16:ee:ae:cd:d9:eb:15:66:94:9d:b5:a2:33:c5: 74:20:2b:76:b9:04:9e:02:b3:95:56:8f:37:89:1b: 8b:9b:8f:35:f8:fa:1c:01:0f:4a:c7:01:41:0a:31: f7:4f:ad:36:fb:bb:e0:4c:d8:50:23:08:42:3c:b0: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:04:54:F2:3D:D4:4E:CD:EE:4C:5A:EA:5F:66:48:6D:D2:13:2D:7B X509v3 Authority Key Identifier: keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:37:1f:e9:2a:f9:90:dc:34:b4:3d:44:55:1e:14:fa:eb: 67:37:b8:8f:8b:39:b5:48:22:5c:a5:66:7b:8e:bf:02:0e:08: 92:ae:52:77:b9:0f:5f:c8:c6:49:95:7b:ef:81:07:8d:15:6b: 97:72:4a:45:75:f4:9b:5b:c6:f1:dd:ae:01:30:d5:21:06:e8: 27:5a:62:95:be:0d:08:94:c1:bc:df:a8:a8:e1:f2:e8:df:26: 76:00:c9:22:6e:50:a3:f9:1c:a1:77:bc:77:67:f8:25:2d:80: cd:8b:a4:85:5f:4c:ac:ea:79:92:36:7c:43:46:1c:c5:0a:1b: 2e:b3:d7:a0:36:4b:51:dc:b2:6c:c8:94:84:b1:db:d1:4a:63: 33:c9:f1:2e:a3:e5:b8:6e:d9:b7:b6:73:91:c3:46:11:bd:77: e7:d9:a8:80:1a:c6:9c:8b:3c:a4:62:27:a7:f8:21:81:5d:e6: 1d:c0:3f:d8:87:9b:9f:e1:79:f3:5a:f8:1e:32:aa:a6:62:6c: 29:04:84:8b:9b:33:16:bd:73:b3:63:68:ab:2f:d1:62:33:46: 44:7f:61:f5:c1:c2:95:3c:e9:d7:67:68:21:90:5d:c3:71:49: f1:f2:f5:84:b9:a7:8f:25:81:88:00:00:1f:50:c3:0b:97:ed: 3d:f1:cc:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohDXUhGNLh4aBC/yIbOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy MDQyYjIwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD EygxMDA0NTRmMjNkZDQ0ZWNkZWU0YzVhZWE1ZjY2NDg2ZGQyMTMyZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguMGDkRghdLr4rRiaVzP7j0Iueyz YR+Vpteo6rJyImNRJ7QDzN0S7KfM/sf85Oq0JZ8Lu4PL2VgyHYsWhEOVnfhu3GWr A1+ZE0isg6yH5Lm6qABUwmJi/w9sEqbWPYHTJj4f/q1wdzRW90B0nHXvBXNmLhrB wguX1wHZUfmkNBtavffrfbd7OSdWr+83MhoPXz9bw66MvaCoMKorX62f8h8rBoZa Cgkzgiq/l0h306xdpzWlodc2bvpJl2Jqtmsk6fCqFu6uzdnrFWaUnbWiM8V0ICt2 uQSeArOVVo83iRuLm481+PocAQ9KxwFBCjH3T602+7vgTNhQIwhCPLDSlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAEVPI91E7N7kxa6l9mSG3SEy17MB8GA1UdIwQY MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3 LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvo3H+kq +ZDcNLQ9RFUeFPrrZze4j4s5tUgiXKVme46/Ag4Ikq5Sd7kPX8jGSZV774EHjRVr l3JKRXX0m1vG8d2uATDVIQboJ1pilb4NCJTBvN+oqOHy6N8mdgDJIm5Qo/kcoXe8 d2f4JS2AzYukhV9MrOp5kjZ8Q0YcxQobLrPXoDZLUdyybMiUhLHb0UpjM8nxLqPl uG7Zt7ZzkcNGEb1359mogBrGnIs8pGInp/ghgV3mHcA/2Iebn+F581r4HjKqpmJs KQSEi5szFr1zs2Noqy/RYjNGRH9h9cHClTzp12doIZBdw3FJ8fL1hLmnjyWBiAAA H1DDC5ftPfHMtg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:27 2026 by rpki-client