This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json) Hash identifier: SXlVCtSxctiusXhq8hTxCTxiHv/e3ZVEY7k5uUHgiWQ= Subject key identifier: 20:EA:4A:63:79:41:47:44:00:C8:E9:B0:82:ED:8B:8C:FB:A0:64:51 Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Certificate serial: 019C420FEB5504EBE88EB32980970450EC77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft Manifest number: 0C71 Signing time: Mon 09 Feb 2026 11:01:05 +0000 Manifest this update: Mon 09 Feb 2026 11:01:05 +0000 Manifest next update: Tue 10 Feb 2026 11:01:05 +0000 Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=) 2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 08WCMYwtIuoPe7mD/BXLOvgRnD/9rlVHDQJAVzCP2hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:eb:55:04:eb:e8:8e:b3:29:80:97:04:50:ec:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Validity Not Before: Feb 9 11:01:05 2026 GMT Not After : Feb 10 11:01:05 2026 GMT Subject: CN=20ea4a637941474400c8e9b082ed8b8cfba06451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:1d:76:59:fb:30:cb:6c:49:5b:08:ad:70: fe:50:3a:8e:00:82:01:29:e9:50:d1:ae:a9:93:ca: d7:6c:46:c1:15:ce:23:32:36:68:41:b8:7c:52:bc: 4b:51:6d:60:ec:35:b5:f2:3a:f5:dc:57:c2:c3:95: c1:9c:c7:ef:20:7c:02:50:b7:ad:41:1b:56:ce:c3: 37:fb:a5:40:26:29:a2:43:b3:a4:02:8b:e1:4f:a7: 5a:89:54:3c:db:53:58:d4:87:fd:3c:eb:19:66:a4: bb:0b:bd:f6:43:31:4a:77:c3:c2:24:48:ca:70:93: 40:08:21:03:2b:d4:7e:57:2c:41:7b:7b:ef:34:06: 75:4d:b2:1f:df:23:0c:dd:a6:33:cb:9f:cb:22:9b: af:e3:b3:a8:20:da:2b:b6:c3:38:58:b1:61:f4:46: ac:86:72:01:13:a7:12:20:3b:e4:3a:30:51:2e:0b: 66:2e:17:aa:06:12:f2:75:c1:b5:a2:2a:3e:c2:ea: eb:f7:87:5d:5b:ff:3b:87:da:b2:50:11:dc:a5:13: d6:ed:56:f2:4a:cc:64:36:9a:20:19:1a:90:9b:2c: 27:88:14:15:62:31:dd:68:b2:4f:e4:8a:eb:fe:ca: a6:4d:9a:5a:ec:c3:15:a6:b1:c2:a0:2d:7d:1f:85: 41:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EA:4A:63:79:41:47:44:00:C8:E9:B0:82:ED:8B:8C:FB:A0:64:51 X509v3 Authority Key Identifier: keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ca:33:87:b9:f2:6b:ca:ae:5d:d1:41:1c:eb:93:9c:db:d0: cd:61:51:52:5d:7d:ab:58:84:01:24:0c:e4:4b:02:a8:25:89: 24:a8:ff:89:9a:db:6d:62:46:98:e1:dd:9b:c3:29:9f:84:6a: ed:20:49:4f:ef:b2:22:1a:b4:ed:31:fa:1b:78:90:95:3e:5e: c3:0e:1a:49:94:a6:33:e6:e8:58:98:c3:b1:0c:c6:5b:ed:3d: 3a:4d:50:a7:5a:b2:df:00:d5:77:88:45:00:e9:11:78:ab:5c: 21:33:d6:ec:85:dd:92:df:2b:75:1a:73:8d:99:9d:74:4c:7b: a8:16:36:81:21:04:15:39:51:38:2d:81:01:df:3e:8f:ff:38: 2c:b1:e7:2f:cb:f0:20:61:5a:6d:70:cf:ef:f8:0c:24:be:ad: 31:45:4f:01:8c:58:bf:a9:6e:8e:b7:32:71:76:a0:61:83:6a: 7c:77:5c:df:49:b5:9a:48:00:43:49:c8:89:29:8e:c8:91:cb: df:96:f8:2a:5a:11:bc:60:8d:11:19:76:c4:7d:81:f7:0c:dc: 85:e2:a9:a6:0b:04:84:8b:a7:ed:71:0d:f3:2c:02:32:13:99: 07:5b:89:de:43:b8:3e:1d:03:55:35:57:ac:33:6f:aa:60:ae: 44:02:50:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+tVBOvojrMpgJcEUOx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2 MGM0YTQwHhcNMjYwMjA5MTEwMTA1WhcNMjYwMjEwMTEwMTA1WjAzMTEwLwYDVQQD EygyMGVhNGE2Mzc5NDE0NzQ0MDBjOGU5YjA4MmVkOGI4Y2ZiYTA2NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gUddln7MMtsSVsIrXD+UDqOAIIB KelQ0a6pk8rXbEbBFc4jMjZoQbh8UrxLUW1g7DW18jr13FfCw5XBnMfvIHwCULet QRtWzsM3+6VAJimiQ7OkAovhT6daiVQ821NY1If9POsZZqS7C732QzFKd8PCJEjK cJNACCEDK9R+VyxBe3vvNAZ1TbIf3yMM3aYzy5/LIpuv47OoINortsM4WLFh9Eas hnIBE6cSIDvkOjBRLgtmLheqBhLydcG1oio+wurr94ddW/87h9qyUBHcpRPW7Vby SsxkNpogGRqQmywniBQVYjHdaLJP5Irr/sqmTZpa7MMVprHCoC19H4VBXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDqSmN5QUdEAMjpsILti4z7oGRRMB8GA1UdIwQY MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtcozh7ny a8quXdFBHOuTnNvQzWFRUl19q1iEASQM5EsCqCWJJKj/iZrbbWJGmOHdm8Mpn4Rq 7SBJT++yIhq07TH6G3iQlT5eww4aSZSmM+boWJjDsQzGW+09Ok1Qp1qy3wDVd4hF AOkReKtcITPW7IXdkt8rdRpzjZmddEx7qBY2gSEEFTlROC2BAd8+j/84LLHnL8vw IGFabXDP7/gMJL6tMUVPAYxYv6lujrcycXagYYNqfHdc30m1mkgAQ0nIiSmOyJHL 35b4KloRvGCNERl2xH2B9wzcheKppgsEhIun7XEN8ywCMhOZB1uJ3kO4Ph0DVTVX rDNvqmCuRAJQlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:17 2026 by rpki-client