This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File:                     tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier:          pr3R0d3nKnD3wFW6WQmDBq7br0sAa5WFdbaONwpJxbw=
Subject key identifier:   C3:12:F1:6C:5C:2F:D1:9F:07:2D:81:14:3D:4F:32:C9:68:96:22:F1
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer:       /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial:       019C427DDEEB250DA2E40F9AD4CE3FE729F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number:          120B
Signing time:             Mon 09 Feb 2026 13:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:10 +0000
Files and hashes:         1: rUXKeVVJ04wZzY-9AMdF7X_kQUY.roa (hash: JD0yLLKxNO7w7T95rG6mxBg4uiPzT+AUeh23SkMpuwQ=)
                          2: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: msXpR4rorQsnTxpDJhEGp/VOdj6CUUi6mChzELqCFZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:de:eb:25:0d:a2:e4:0f:9a:d4:ce:3f:e7:29:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
        Validity
            Not Before: Feb  9 13:01:10 2026 GMT
            Not After : Feb 10 13:01:10 2026 GMT
        Subject: CN=c312f16c5c2fd19f072d81143d4f32c9689622f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:d7:9d:08:1b:54:cb:7a:21:a6:62:18:ad:
                    32:a6:1a:e6:1d:65:15:1f:67:0f:1e:0c:64:13:de:
                    28:03:74:03:cd:34:ba:db:7a:6f:89:70:ac:37:18:
                    23:21:f3:e6:33:4d:d3:79:2c:41:79:8d:b7:08:1a:
                    4c:55:48:31:9e:ee:ca:07:af:82:be:26:8a:75:cd:
                    36:1f:73:04:30:4e:e7:5a:07:3c:bd:1c:9a:b9:93:
                    12:47:37:f4:d4:26:5d:09:de:6e:c9:a5:ad:11:c1:
                    c6:93:32:f2:20:8b:ec:47:85:83:ff:40:68:60:87:
                    8e:07:eb:7d:02:5c:ad:56:b0:62:b5:7c:15:f1:08:
                    60:0a:36:44:c0:85:2b:89:3c:e7:1e:00:ab:97:c6:
                    90:74:3b:66:cb:e1:4a:92:ad:73:72:c9:8a:e9:4b:
                    7d:e4:6a:4d:b9:11:5e:8b:b5:3f:f7:f2:7e:79:1d:
                    7f:78:3c:f3:69:d7:9f:f3:1c:92:e0:b2:4d:5e:fe:
                    33:b7:0b:1c:90:8f:95:0b:b4:43:62:37:60:ee:10:
                    ca:d6:67:91:10:38:f3:11:ba:b6:8a:a1:91:8d:d4:
                    90:01:54:c7:4f:1d:d8:c7:5c:e2:e3:93:67:27:07:
                    c0:19:4c:05:fc:9e:13:aa:d2:61:29:41:04:04:93:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:12:F1:6C:5C:2F:D1:9F:07:2D:81:14:3D:4F:32:C9:68:96:22:F1
            X509v3 Authority Key Identifier:
                keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:30:1c:18:b3:88:54:ae:fd:94:be:06:8f:df:62:6d:57:
         36:fc:86:68:de:cd:52:c0:a5:08:87:e3:0e:0a:da:d9:28:c2:
         5d:88:64:3f:14:62:1c:d9:ac:18:60:b9:83:49:c4:38:8d:ba:
         b7:7b:03:0c:a3:94:38:73:7b:2b:7e:ca:32:67:2e:6e:a9:9d:
         73:a3:44:ab:78:5f:06:b3:cf:19:94:96:f4:fd:af:c7:58:84:
         55:8d:fd:a8:29:77:99:d7:8e:8c:4f:e4:35:bd:c0:4f:99:3b:
         3a:33:24:7b:17:9d:d2:10:87:05:91:5b:7d:22:d1:73:eb:ca:
         38:2f:c4:7f:3e:39:60:2e:ff:ff:25:b6:ee:fd:33:a6:aa:44:
         d3:65:45:2f:cc:87:26:fb:d5:47:a3:c4:67:13:0f:d9:83:73:
         44:ab:df:95:f2:69:4d:12:7e:04:9d:f2:74:a8:e8:47:86:7f:
         e9:5f:3e:9f:20:74:5a:97:6b:ea:f6:0e:56:83:9c:b3:e3:7a:
         c9:b5:3d:10:b2:5e:d8:1c:dc:af:10:fd:cf:e7:62:b4:7c:ca:
         57:4f:b0:0e:70:20:72:89:9c:1b:5e:d3:4e:4b:f1:88:f0:db:
         ab:f0:08:07:e3:0d:fe:75:11:26:05:65:32:a6:78:36:73:78:
         c9:12:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:20 2026 by rpki-client