This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json) Hash identifier: NbWkYy/gKnUtz20rjdqFheIAvBaPWYRwYMkwrSx0YWg= Subject key identifier: FD:48:59:FA:87:58:73:F8:D9:36:74:67:E5:7A:D7:E3:A1:FB:0A:CB Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Certificate serial: 019BF8AD6F0D25F7A58D2FBAC959023FB3E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft Manifest number: 0C4B Signing time: Mon 26 Jan 2026 05:01:14 +0000 Manifest this update: Mon 26 Jan 2026 05:01:14 +0000 Manifest next update: Tue 27 Jan 2026 05:01:14 +0000 Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=) 2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: Ga+3xJY4F7/z0uyJJXiF3PNEIs0UdCgWsmhY/hANgks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:6f:0d:25:f7:a5:8d:2f:ba:c9:59:02:3f:b3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4 Validity Not Before: Jan 26 05:01:14 2026 GMT Not After : Jan 27 05:01:14 2026 GMT Subject: CN=fd4859fa875873f8d9367467e57ad7e3a1fb0acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:5b:d7:17:c6:40:2c:ca:1e:a0:f4:04:83: 0f:a9:a7:7f:2b:86:d5:1b:10:c6:20:27:3d:86:83: 38:8b:cc:90:20:85:7f:4e:54:62:a3:7e:e0:1b:31: 1e:e0:62:7b:6c:96:4f:c4:61:35:2d:da:04:d7:05: 7a:66:c3:8f:b6:d6:41:aa:0a:85:9c:6e:5b:cb:7e: 46:d8:33:ea:65:51:7d:84:e9:40:8e:49:1e:0e:d2: 03:eb:87:28:42:ac:39:10:39:8a:a9:62:ef:6e:71: 7c:bf:65:8b:79:e2:13:3a:15:80:45:53:aa:07:fe: 3c:55:e0:f5:bf:96:d0:10:89:66:4f:94:65:da:15: 65:a2:06:a8:17:6d:1a:b1:80:ac:1c:be:2a:d2:1a: d1:0d:bd:b9:70:4c:67:5d:dc:6b:18:58:29:67:9d: da:2d:e3:40:c0:3a:00:4d:94:63:9f:b8:1d:42:0d: e1:f0:82:2b:a4:2d:bd:2e:2a:6a:dc:99:18:5e:3b: ee:36:af:33:eb:38:f8:d0:ce:d5:1d:8a:65:05:28: f4:ff:85:c8:8a:ec:27:93:3d:d6:7d:ac:19:e2:4d: 31:dc:65:e5:5a:de:91:f3:8a:c2:ea:ef:7b:58:fb: ec:b9:6a:d2:0e:f5:34:48:20:72:0e:1e:4f:9a:5d: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:59:FA:87:58:73:F8:D9:36:74:67:E5:7A:D7:E3:A1:FB:0A:CB X509v3 Authority Key Identifier: keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:23:ad:a8:7e:4b:fe:67:ff:1d:21:b4:68:c6:14:3c:7e:68: af:52:3f:f9:0a:fa:6a:1d:21:b5:77:09:2b:a7:57:46:37:56: 3b:36:b6:c0:84:99:3c:96:fa:da:c7:e4:e9:4c:14:40:fc:9c: 05:2d:c1:7d:72:24:6e:33:32:84:03:64:50:0c:ac:40:52:4b: 34:ae:a9:c4:2c:89:41:a7:56:b1:96:94:ff:67:ef:41:88:4b: f8:cc:62:5e:9b:40:97:31:c5:49:87:07:65:97:33:47:f9:0d: f2:4a:b7:28:10:51:1c:5c:10:d5:73:d4:66:29:95:f2:47:3e: 65:4a:54:fc:e3:da:32:96:7e:76:d8:c0:b2:91:36:a2:80:6e: 61:67:6d:0c:76:f7:34:08:61:c7:f4:ef:98:26:9f:ad:19:e3: 36:d0:d7:84:0a:6d:97:e4:35:26:ea:e5:9c:40:55:ad:f4:3a: cf:3c:1e:d5:7e:4c:c9:af:48:bf:c4:2f:b0:e4:d4:c7:e8:a0: 1c:2b:26:6a:09:29:6e:2a:c5:71:09:cf:7a:dc:35:28:50:e0: b1:73:e4:c6:a4:35:ac:59:8b:39:55:f1:f4:7b:ef:5c:ec:22: 4a:74:a4:a7:b6:5f:49:39:04:6f:87:d3:09:4e:67:41:5c:df: 2d:ce:69:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rW8NJfeljS+6yVkCP7PhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2 MGM0YTQwHhcNMjYwMTI2MDUwMTE0WhcNMjYwMTI3MDUwMTE0WjAzMTEwLwYDVQQD EyhmZDQ4NTlmYTg3NTg3M2Y4ZDkzNjc0NjdlNTdhZDdlM2ExZmIwYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTZb1xfGQCzKHqD0BIMPqad/K4bV GxDGICc9hoM4i8yQIIV/TlRio37gGzEe4GJ7bJZPxGE1LdoE1wV6ZsOPttZBqgqF nG5by35G2DPqZVF9hOlAjkkeDtID64coQqw5EDmKqWLvbnF8v2WLeeITOhWARVOq B/48VeD1v5bQEIlmT5Rl2hVlogaoF20asYCsHL4q0hrRDb25cExnXdxrGFgpZ53a LeNAwDoATZRjn7gdQg3h8IIrpC29Lipq3JkYXjvuNq8z6zj40M7VHYplBSj0/4XI iuwnkz3WfawZ4k0x3GXlWt6R84rC6u97WPvsuWrSDvU0SCByDh5Pml1KCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1IWfqHWHP42TZ0Z+V61+Oh+wrLMB8GA1UdIwQY MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCOtqH5L /mf/HSG0aMYUPH5or1I/+Qr6ah0htXcJK6dXRjdWOza2wISZPJb62sfk6UwUQPyc BS3BfXIkbjMyhANkUAysQFJLNK6pxCyJQadWsZaU/2fvQYhL+MxiXptAlzHFSYcH ZZczR/kN8kq3KBBRHFwQ1XPUZimV8kc+ZUpU/OPaMpZ+dtjAspE2ooBuYWdtDHb3 NAhhx/TvmCafrRnjNtDXhAptl+Q1JurlnEBVrfQ6zzwe1X5Mya9Iv8QvsOTUx+ig HCsmagkpbirFcQnPetw1KFDgsXPkxqQ1rFmLOVXx9HvvXOwiSnSkp7ZfSTkEb4fT CU5nQVzfLc5pDg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:48 2026 by rpki-client