This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json) Hash identifier: Gt0lFHkS7uj1lYaJpFD4cer0/p97I0FQocTjK2eceo4= Subject key identifier: F2:42:47:0B:28:B0:E3:70:58:83:D1:B6:04:4A:C3:F5:D0:F1:38:DC Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36 Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636 Certificate serial: 019C43FE347DE06A0B2A9F026B257ABF6BF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft Manifest number: 1172 Signing time: Mon 09 Feb 2026 20:00:58 +0000 Manifest this update: Mon 09 Feb 2026 20:00:58 +0000 Manifest next update: Tue 10 Feb 2026 20:00:58 +0000 Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: pm+59cxPiVRZENxGm3+57qTxkWMp7VZX01yTUfAm+MA=) 2: f8q72nrSHZd8tubKlt2Vm79HxNE.roa (hash: CK1Z+nBxJfN67DQ3jfNRhaauHSwB5IQIiVopFzFRMX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:34:7d:e0:6a:0b:2a:9f:02:6b:25:7a:bf:6b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636 Validity Not Before: Feb 9 20:00:58 2026 GMT Not After : Feb 10 20:00:58 2026 GMT Subject: CN=f242470b28b0e3705883d1b6044ac3f5d0f138dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:d6:27:e1:69:f6:00:48:36:11:6e:fd:2b: 06:ad:0e:6f:1f:1c:a8:cf:d0:17:d7:63:f6:9b:4a: 62:fc:d8:ff:bd:40:cf:94:fd:c2:c8:cb:93:0f:fc: c1:2e:31:fc:ef:e7:f9:cc:11:d4:39:f5:91:0d:11: a1:71:af:4e:21:ad:07:a4:8d:a0:4e:c9:8a:7f:7e: 73:f9:09:8f:f7:88:82:c3:29:45:a2:e0:c0:f4:71: 02:b5:18:d9:2b:a1:bd:51:54:db:13:03:15:1e:92: 5f:5d:ab:ca:5b:5d:70:64:a2:46:55:1f:d8:15:1a: 2d:22:8d:e1:75:18:04:ae:34:8c:df:3c:c7:34:40: fd:d7:ee:a9:b5:c0:d5:59:ec:e0:f0:c3:32:46:88: 90:e6:30:79:d2:ea:72:cd:b2:5b:b0:46:f2:14:08: 29:36:4b:d9:72:2e:a4:17:f7:da:7d:2c:21:98:72: 8e:4b:ac:23:f9:3a:48:d4:df:1e:e8:6f:f9:74:f1: a9:c4:7c:64:3a:b4:cf:e5:6d:4f:2e:12:ba:10:b6: 48:df:d2:80:7c:15:ca:d1:a3:5d:4a:de:fe:ab:f0: a9:37:0b:1b:c7:07:04:08:b7:01:fd:cd:14:98:9c: 4d:bc:3a:8a:e9:27:63:c8:35:94:6c:d9:bf:04:a4: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:42:47:0B:28:B0:E3:70:58:83:D1:B6:04:4A:C3:F5:D0:F1:38:DC X509v3 Authority Key Identifier: keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:f9:ea:fc:14:f8:fb:40:47:32:1b:26:b2:bb:a8:09:fa:26: 13:2b:62:90:c2:45:bc:94:d0:2c:a7:05:65:d6:e8:3c:c0:9d: e7:84:53:4e:a6:67:6d:5c:d5:cf:3f:b4:74:f6:c9:4b:53:fd: a7:c3:6a:be:15:cf:a1:a6:9d:6c:44:17:62:89:e8:1f:8e:b0: 9a:b7:94:9b:cb:31:1b:ab:ee:19:ce:2e:1e:6f:ae:ee:e4:c2: a0:c3:5a:79:68:34:f0:b2:86:93:71:0a:a1:ba:12:30:1d:0d: 2d:be:80:ac:0a:2a:4a:dc:dd:3d:38:e8:2f:f4:2a:bd:6a:0d: a5:6c:92:27:57:99:9c:8e:56:27:36:c4:e7:9e:d9:73:f1:45: df:a0:8e:6b:ba:57:d3:40:df:25:65:8a:8b:43:13:d5:27:35: b9:76:14:1a:e7:77:36:e4:eb:55:ab:2f:df:46:13:6a:c3:7c: 2d:fa:8c:19:09:d0:12:b7:9e:09:4a:04:72:b7:f6:cd:2e:45: 8c:30:b5:5b:c9:d5:9f:ca:1f:41:3c:e6:d4:be:82:4a:a0:4f: 85:5f:cb:ee:e4:e4:c6:8e:80:98:c4:91:d7:4a:0b:1f:8d:57: b6:67:d9:98:3d:a4:66:8a:1f:f6:48:6c:02:d9:ec:25:06:28: 6d:f3:a0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/jR94GoLKp8CayV6v2v1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTJiZTAyNTA5NjQzYmM3YTJmODYyODcxNjM5ZDA4ZTI3 NmM2MzYwHhcNMjYwMjA5MjAwMDU4WhcNMjYwMjEwMjAwMDU4WjAzMTEwLwYDVQQD EyhmMjQyNDcwYjI4YjBlMzcwNTg4M2QxYjYwNDRhYzNmNWQwZjEzOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlvWJ+Fp9gBINhFu/SsGrQ5vHxyo z9AX12P2m0pi/Nj/vUDPlP3CyMuTD/zBLjH87+f5zBHUOfWRDRGhca9OIa0HpI2g TsmKf35z+QmP94iCwylFouDA9HECtRjZK6G9UVTbEwMVHpJfXavKW11wZKJGVR/Y FRotIo3hdRgErjSM3zzHNED91+6ptcDVWezg8MMyRoiQ5jB50upyzbJbsEbyFAgp NkvZci6kF/fafSwhmHKOS6wj+TpI1N8e6G/5dPGpxHxkOrTP5W1PLhK6ELZI39KA fBXK0aNdSt7+q/CpNwsbxwcECLcB/c0UmJxNvDqK6SdjyDWUbNm/BKRpfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJCRwsosONwWIPRtgRKw/XQ8TjcMB8GA1UdIwQY MBaAFE2SvgJQlkO8ei+GKHFjnQjidsY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2Mt YjczMTJhYjIwMjczLzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2MtYjczMTJhYjIwMjcz LzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fnq/BT4 +0BHMhsmsruoCfomEytikMJFvJTQLKcFZdboPMCd54RTTqZnbVzVzz+0dPbJS1P9 p8NqvhXPoaadbEQXYonoH46wmreUm8sxG6vuGc4uHm+u7uTCoMNaeWg08LKGk3EK oboSMB0NLb6ArAoqStzdPTjoL/QqvWoNpWySJ1eZnI5WJzbE557Zc/FF36COa7pX 00DfJWWKi0MT1Sc1uXYUGud3NuTrVasv30YTasN8LfqMGQnQEreeCUoEcrf2zS5F jDC1W8nVn8ofQTzm1L6CSqBPhV/L7uTkxo6AmMSR10oLH41XtmfZmD2kZoof9khs AtnsJQYobfOgHA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:18 2026 by rpki-client