This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json) Hash identifier: shx9FsgKA5+XcWzHTSUlJWbrTHa8q0EZKIBchWkafdI= Subject key identifier: 2D:3F:3D:57:D9:6A:F1:8D:05:D1:80:51:81:92:A3:90:2F:23:36:99 Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66 Certificate serial: 019C424665674EC084981B91857F46D9C40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft Manifest number: 1172 Signing time: Mon 09 Feb 2026 12:00:35 +0000 Manifest this update: Mon 09 Feb 2026 12:00:35 +0000 Manifest next update: Tue 10 Feb 2026 12:00:35 +0000 Files and hashes: 1: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: ONEAETsQc1pFMBNj/xeaZiNeT+g4gw7h44HqDx6ynnI=) 2: ytSYW9uePGMbZ79Lq_rgcm-M5Zw.roa (hash: Y13kOAlNy0Wbk1bHbXfUJdX2fwgc6gfKxcan1EEpTzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:65:67:4e:c0:84:98:1b:91:85:7f:46:d9:c4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66 Validity Not Before: Feb 9 12:00:35 2026 GMT Not After : Feb 10 12:00:35 2026 GMT Subject: CN=2d3f3d57d96af18d05d180518192a3902f233699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:8e:a8:ed:4e:05:ae:a1:9b:93:2b:11:77: e3:80:c9:e6:bb:94:0b:97:52:a4:5b:8d:de:ad:ef: 05:c3:c8:f5:17:22:b9:2f:c7:a5:46:43:00:8a:8c: 89:5a:35:3a:02:88:d8:5c:53:ff:03:3f:a8:42:16: 81:ed:85:95:85:fe:c8:4b:96:08:34:bd:25:09:30: b6:44:8c:69:41:58:ba:45:5a:8e:73:d7:3f:5a:43: d3:6f:2f:d3:bb:4e:08:e2:59:8a:9b:aa:68:cc:85: 1b:f6:22:85:ce:6f:64:87:f6:8d:cf:ff:93:14:f3: ba:cd:9d:80:f5:66:29:16:65:ec:06:e2:42:6d:09: 64:f2:eb:bd:62:2e:19:03:5d:22:55:d8:6f:36:11: 73:ec:46:33:25:fc:8b:82:39:c3:a8:63:95:91:48: 6c:9e:64:cd:82:ef:33:49:39:05:50:b0:0f:24:bc: 8c:76:8d:b1:1f:8a:77:0a:30:ac:d2:9c:72:6b:a5: 08:82:a7:84:50:13:70:89:86:11:61:7b:97:40:6d: 31:82:b7:1f:94:ec:69:63:ab:41:9a:30:d4:25:42: da:ed:32:30:23:a6:4e:ea:74:df:01:ae:87:56:b8: b4:12:ca:23:5f:fb:5b:25:6a:ac:08:65:29:c1:77: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3F:3D:57:D9:6A:F1:8D:05:D1:80:51:81:92:A3:90:2F:23:36:99 X509v3 Authority Key Identifier: keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:cf:8b:d7:c2:44:ea:1e:71:d0:c6:ac:34:c8:ff:8d:ac:1b: d4:ec:a3:a2:99:f8:0a:d7:3c:ab:fb:48:f7:35:6d:57:75:1b: 1b:80:33:f0:65:43:65:0d:0d:f4:d6:0f:61:8e:c8:a9:7e:43: 11:18:60:40:77:43:a9:82:b7:c0:bc:dc:96:18:03:23:7e:5f: 6e:7b:ab:d7:b6:04:ce:13:4d:a3:44:cc:cc:fe:d7:b8:91:9b: 81:ec:28:b9:f2:a8:97:e5:54:6d:66:71:f2:5e:d1:6a:7d:0d: d1:85:6a:e0:44:cf:7e:39:46:d2:c9:1d:c5:a4:82:2f:e6:f7: ce:13:eb:60:67:d9:76:7c:94:25:da:df:ae:77:83:d0:3e:af: 44:b3:e9:f5:98:f2:92:fc:c3:1a:3b:0a:db:90:06:35:6b:e4: 87:1d:68:14:f8:9a:a9:82:e0:38:ef:e7:12:16:3e:a8:d7:bb: 94:8f:cf:c4:ca:8d:09:0a:ff:43:e8:d2:95:17:ce:cf:75:16: f2:28:71:b4:0b:cd:30:16:ad:37:41:79:fa:90:3b:76:81:e8: 8d:4b:62:bd:2a:33:35:87:6e:f1:f9:62:eb:71:87:39:6b:44: 86:e6:76:d2:2f:02:c5:45:94:cc:c5:4e:c2:aa:86:b4:dd:6c: 7b:04:65:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmVnTsCEmBuRhX9G2cQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi YmRhNjYwHhcNMjYwMjA5MTIwMDM1WhcNMjYwMjEwMTIwMDM1WjAzMTEwLwYDVQQD EygyZDNmM2Q1N2Q5NmFmMThkMDVkMTgwNTE4MTkyYTM5MDJmMjMzNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6OqO1OBa6hm5MrEXfjgMnmu5QL l1KkW43ere8Fw8j1FyK5L8elRkMAioyJWjU6AojYXFP/Az+oQhaB7YWVhf7IS5YI NL0lCTC2RIxpQVi6RVqOc9c/WkPTby/Tu04I4lmKm6pozIUb9iKFzm9kh/aNz/+T FPO6zZ2A9WYpFmXsBuJCbQlk8uu9Yi4ZA10iVdhvNhFz7EYzJfyLgjnDqGOVkUhs nmTNgu8zSTkFULAPJLyMdo2xH4p3CjCs0pxya6UIgqeEUBNwiYYRYXuXQG0xgrcf lOxpY6tBmjDUJULa7TIwI6ZO6nTfAa6HVri0EsojX/tbJWqsCGUpwXdtlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0/PVfZavGNBdGAUYGSo5AvIzaZMB8GA1UdIwQY MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt YzI0ZWUwNDk0NTQxLzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeM+L18JE 6h5x0MasNMj/jawb1Oyjopn4Ctc8q/tI9zVtV3UbG4Az8GVDZQ0N9NYPYY7IqX5D ERhgQHdDqYK3wLzclhgDI35fbnur17YEzhNNo0TMzP7XuJGbgewoufKol+VUbWZx 8l7Ran0N0YVq4ETPfjlG0skdxaSCL+b3zhPrYGfZdnyUJdrfrneD0D6vRLPp9Zjy kvzDGjsK25AGNWvkhx1oFPiaqYLgOO/nEhY+qNe7lI/PxMqNCQr/Q+jSlRfOz3UW 8ihxtAvNMBatN0F5+pA7doHojUtivSozNYdu8fli63GHOWtEhuZ20i8CxUWUzMVO wqqGtN1sewRlEw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:42 2026 by rpki-client