This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json) Hash identifier: /jva2Tv4vtFdIAyTGioLXARmlyVMREfqawSOEX7wGy0= Subject key identifier: E4:89:C5:57:1D:E1:5F:03:38:AA:77:B6:A1:B8:29:77:98:CA:06:14 Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Certificate serial: 019AF464D39C8FEFDABA1796D53F869423F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft Manifest number: 0BC4 Signing time: Sat 06 Dec 2025 16:00:39 +0000 Manifest this update: Sat 06 Dec 2025 16:00:39 +0000 Manifest next update: Sun 07 Dec 2025 16:00:39 +0000 Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=) 2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: SWpzlo/UXl3a57YTc95NB8VnIq2/RzGYvsIqw8hnohc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d3:9c:8f:ef:da:ba:17:96:d5:3f:86:94:23:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Validity Not Before: Dec 6 16:00:39 2025 GMT Not After : Dec 7 16:00:39 2025 GMT Subject: CN=e489c5571de15f0338aa77b6a1b8297798ca0614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:f9:a6:09:77:4a:72:c4:69:2d:ce:05:9c: bd:7c:b7:53:33:f4:11:2b:ee:41:31:67:bb:fd:47: d0:e4:f3:dc:4b:c4:55:fe:9d:d9:22:b6:dd:e1:01: 1f:8a:cf:c3:64:d7:70:ff:3c:0b:32:70:58:2c:f8: ac:c9:23:d8:23:e9:d9:36:fe:d3:95:24:a4:c4:38: 74:ce:ea:ff:17:6e:e7:23:10:df:53:94:9c:38:ee: c1:1e:7d:83:42:73:68:0a:96:0d:f0:60:e3:fe:16: 84:e3:dd:7a:f8:b8:c7:d8:39:da:8e:e0:24:c8:5a: 6b:29:6a:5a:5c:27:ec:a8:25:f5:87:24:ce:4c:c4: 1b:1f:c3:02:1b:73:22:3e:10:6c:60:3a:fc:60:68: af:c3:6c:4b:ff:e9:89:e1:90:c9:1c:36:d3:a8:39: 8b:de:e8:95:44:5e:d1:06:11:2b:db:2d:f1:53:57: 20:b5:e6:b6:cf:91:32:96:0c:b2:ee:22:9a:38:34: a1:be:b1:86:6b:89:14:4a:3d:82:33:13:a3:b3:48: e8:f2:d7:3b:45:f7:85:f2:f5:a2:ce:58:d3:bc:19: 58:00:db:e9:58:45:be:9b:24:7a:f3:e0:6e:e6:e4: 54:8d:1b:b1:51:24:fd:7d:62:00:0d:79:13:6c:da: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:C5:57:1D:E1:5F:03:38:AA:77:B6:A1:B8:29:77:98:CA:06:14 X509v3 Authority Key Identifier: keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:cb:86:ef:e7:fc:21:bc:3e:59:a4:f2:68:a1:31:e9:82: b3:5a:08:6e:e4:5e:d3:0c:9d:c4:0e:89:45:c6:71:f9:96:54: ae:56:94:47:0a:cf:45:f5:9e:d6:a2:9c:96:8b:e1:36:55:3c: 03:8b:65:6b:b1:89:79:22:a0:6c:8a:22:35:ec:af:13:1c:31: 2a:f5:ec:28:e7:3a:17:e3:f3:e3:e1:2f:01:b1:0b:94:f8:9b: 4b:7b:1c:a5:db:9f:70:8a:34:4d:c3:85:46:68:be:2f:e5:93: 11:43:d0:48:9a:92:4e:d5:9c:14:3f:f0:dc:87:26:62:ea:eb: b6:0e:78:24:74:39:e9:53:ff:0d:22:ea:5f:b0:d8:9b:47:eb: 8b:de:57:af:33:a6:af:81:5a:ac:e2:43:c8:3e:fc:61:f3:15: ce:30:30:f8:24:5e:cf:87:cb:9b:7d:12:bf:2c:4f:b8:6f:e2: 8a:ca:27:60:6a:90:8b:11:11:3d:61:d9:64:c3:70:3d:e2:92: 24:cd:ab:7d:e7:a4:cf:b6:35:86:d2:d1:c8:83:bf:29:3f:80: b7:e2:64:33:51:59:7a:e6:28:1a:4b:55:bb:e1:69:5e:d9:06: 2e:ea:49:8c:b6:01:4c:28:51:c7:f4:68:cd:1f:7e:d4:fe:bd: bf:ba:48:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNOcj+/auheW1T+GlCP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2 MGM0YTQwHhcNMjUxMjA2MTYwMDM5WhcNMjUxMjA3MTYwMDM5WjAzMTEwLwYDVQQD EyhlNDg5YzU1NzFkZTE1ZjAzMzhhYTc3YjZhMWI4Mjk3Nzk4Y2EwNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfv5pgl3SnLEaS3OBZy9fLdTM/QR K+5BMWe7/UfQ5PPcS8RV/p3ZIrbd4QEfis/DZNdw/zwLMnBYLPisySPYI+nZNv7T lSSkxDh0zur/F27nIxDfU5ScOO7BHn2DQnNoCpYN8GDj/haE4916+LjH2DnajuAk yFprKWpaXCfsqCX1hyTOTMQbH8MCG3MiPhBsYDr8YGivw2xL/+mJ4ZDJHDbTqDmL 3uiVRF7RBhEr2y3xU1cgtea2z5Eylgyy7iKaODShvrGGa4kUSj2CMxOjs0jo8tc7 RfeF8vWizljTvBlYANvpWEW+myR68+Bu5uRUjRuxUST9fWIADXkTbNowpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSJxVcd4V8DOKp3tqG4KXeYygYUMB8GA1UdIwQY MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiXLhu/n /CG8Plmk8mihMemCs1oIbuRe0wydxA6JRcZx+ZZUrlaURwrPRfWe1qKclovhNlU8 A4tla7GJeSKgbIoiNeyvExwxKvXsKOc6F+Pz4+EvAbELlPibS3scpdufcIo0TcOF Rmi+L+WTEUPQSJqSTtWcFD/w3IcmYurrtg54JHQ56VP/DSLqX7DYm0fri95XrzOm r4FarOJDyD78YfMVzjAw+CRez4fLm30SvyxPuG/iisonYGqQixERPWHZZMNwPeKS JM2rfeekz7Y1htLRyIO/KT+At+JkM1FZeuYoGktVu+FpXtkGLupJjLYBTChRx/Ro zR9+1P69v7pIkg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:56 2025 by rpki-client