This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json) Hash identifier: EO+iVDslud/RrsiPPBkdZNYBdnEmJPozkEMHEk9D1Tk= Subject key identifier: EB:A7:E7:F1:DD:ED:04:D9:DE:92:78:95:1E:7A:BC:2C:E4:2B:6F:5E Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Certificate serial: 019B495DBF6CA2047B1D8B29D0BA05CE7531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft Manifest number: 0BF0 Signing time: Tue 23 Dec 2025 04:00:39 +0000 Manifest this update: Tue 23 Dec 2025 04:00:39 +0000 Manifest next update: Wed 24 Dec 2025 04:00:39 +0000 Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=) 2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: I8aqS6+bmtMo2Se2kJQaGRyRjtBfcmhGYHV+257ZJTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:bf:6c:a2:04:7b:1d:8b:29:d0:ba:05:ce:75:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Validity Not Before: Dec 23 04:00:39 2025 GMT Not After : Dec 24 04:00:39 2025 GMT Subject: CN=eba7e7f1dded04d9de9278951e7abc2ce42b6f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:d8:bc:27:79:71:85:36:85:cd:4d:65:7c: 6d:f3:c4:76:ed:0b:fa:d6:2d:54:04:99:ee:aa:03: 64:78:81:86:fe:50:5f:f0:49:04:5a:95:fc:8b:bd: 8c:a5:f1:6a:da:50:c0:4b:6b:77:24:3e:0e:ca:6f: 0f:d2:8d:3e:c4:99:d5:99:a5:c7:8a:69:8a:bd:47: 44:d6:c6:34:4a:5a:7e:fb:ec:4d:7d:9d:2f:ce:32: 7d:ab:8c:2d:12:dc:b6:18:a8:f0:f5:9f:aa:1e:f2: 97:53:ef:29:6a:76:3c:2b:99:17:86:ad:6b:ae:79: 66:3e:ef:f2:3b:3d:ba:47:aa:00:c8:4c:19:33:f3: ce:f3:5d:4f:d5:63:b7:b1:35:7c:b1:f6:95:eb:44: c9:6e:d1:9b:4d:0b:e2:40:69:20:2e:23:8b:b3:20: 92:8b:59:88:2d:21:87:19:28:c6:a8:17:95:00:4e: d4:8f:72:2b:a0:e7:3f:d4:37:7d:61:de:5a:c8:e7: 2d:fb:0d:25:40:e4:62:52:c8:a9:a9:c9:2a:a0:fb: 03:38:0d:5a:27:d6:35:19:3d:ce:f8:55:60:70:3c: 4d:9a:60:fa:56:ec:46:65:91:46:35:43:cd:0a:eb: 40:ac:08:07:7b:d5:e6:ce:8d:a2:b4:95:21:a5:82: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A7:E7:F1:DD:ED:04:D9:DE:92:78:95:1E:7A:BC:2C:E4:2B:6F:5E X509v3 Authority Key Identifier: keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:64:3e:14:0c:58:95:fd:cb:16:49:27:86:ac:ab:8d:06:03: a6:47:2d:e5:a2:7a:2f:e7:3d:8d:e0:4f:79:8d:94:c3:dd:04: ec:4f:20:2b:3c:ee:52:09:77:e7:d3:e4:27:c0:38:9d:76:e7: 46:cf:bf:ed:b6:3e:ba:db:fc:14:3b:d0:6b:f0:06:3a:35:ac: ac:d9:e8:8c:03:12:57:a4:f2:d4:52:10:f0:bd:cd:e7:f7:c5: 54:ff:ce:5c:aa:f4:bb:b8:7a:19:49:0d:5b:b3:dd:5a:09:3f: d2:c9:85:f9:77:71:a6:83:28:e0:c7:80:18:d7:9e:29:83:3e: cb:5f:0e:6f:67:99:fd:92:71:cb:84:34:8b:36:1d:5b:b6:7c: a1:65:7f:a3:00:ad:05:2d:1a:94:30:cc:50:59:d1:d2:6a:2c: e7:be:d4:ac:b0:0b:c1:c2:f5:05:0e:81:19:30:24:40:18:22: 6d:31:36:2d:c7:5e:71:4a:40:0a:53:c6:b2:65:6c:0a:54:46: 57:af:f3:74:a1:b9:98:f2:d5:58:bb:5d:17:ed:d9:33:a1:0f: 9e:69:9a:a9:10:a6:9f:0f:e7:f0:2a:d8:aa:90:79:8e:ad:77: c7:5d:45:97:a5:ee:ac:f5:0a:c3:e9:83:97:bb:11:fe:01:9e: 65:e3:84:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXb9sogR7HYsp0LoFznUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2 MGM0YTQwHhcNMjUxMjIzMDQwMDM5WhcNMjUxMjI0MDQwMDM5WjAzMTEwLwYDVQQD EyhlYmE3ZTdmMWRkZWQwNGQ5ZGU5Mjc4OTUxZTdhYmMyY2U0MmI2ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZTYvCd5cYU2hc1NZXxt88R27Qv6 1i1UBJnuqgNkeIGG/lBf8EkEWpX8i72MpfFq2lDAS2t3JD4Oym8P0o0+xJnVmaXH immKvUdE1sY0Slp+++xNfZ0vzjJ9q4wtEty2GKjw9Z+qHvKXU+8panY8K5kXhq1r rnlmPu/yOz26R6oAyEwZM/PO811P1WO3sTV8sfaV60TJbtGbTQviQGkgLiOLsyCS i1mILSGHGSjGqBeVAE7Uj3IroOc/1Dd9Yd5ayOct+w0lQORiUsipqckqoPsDOA1a J9Y1GT3O+FVgcDxNmmD6VuxGZZFGNUPNCutArAgHe9Xmzo2itJUhpYJ2iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOun5/Hd7QTZ3pJ4lR56vCzkK29eMB8GA1UdIwQY MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGQ+FAxY lf3LFkknhqyrjQYDpkct5aJ6L+c9jeBPeY2Uw90E7E8gKzzuUgl359PkJ8A4nXbn Rs+/7bY+utv8FDvQa/AGOjWsrNnojAMSV6Ty1FIQ8L3N5/fFVP/OXKr0u7h6GUkN W7PdWgk/0smF+XdxpoMo4MeAGNeeKYM+y18Ob2eZ/ZJxy4Q0izYdW7Z8oWV/owCt BS0alDDMUFnR0mos577UrLALwcL1BQ6BGTAkQBgibTE2LcdecUpAClPGsmVsClRG V6/zdKG5mPLVWLtdF+3ZM6EPnmmaqRCmnw/n8CrYqpB5jq13x11Fl6XurPUKw+mD l7sR/gGeZeOExA== -----END CERTIFICATE-----Generated at Tue Dec 23 14:20:28 2025 by rpki-client