This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File:                     Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier:          IsrCKBTOQEhl5t5VptNRSLD9+WsAb0lIQJNIbOAp4Ug=
Subject key identifier:   9F:29:C3:33:6A:3D:34:A0:8C:F4:F3:25:9D:99:54:3B:6A:4C:F2:43
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer:       /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial:       019C438FFDD9E32D596E4989142726C2BF5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number:          013C
Signing time:             Mon 09 Feb 2026 18:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:35 +0000
Files and hashes:         1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: uEw5FUTT35gooDJdQz7Hth/KAD0+OeOOh8mjx2h8qxs=)
                          2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:fd:d9:e3:2d:59:6e:49:89:14:27:26:c2:bf:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
        Validity
            Not Before: Feb  9 18:00:35 2026 GMT
            Not After : Feb 10 18:00:35 2026 GMT
        Subject: CN=9f29c3336a3d34a08cf4f3259d99543b6a4cf243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:c6:8a:26:0e:19:cd:0f:07:e4:e1:91:cf:
                    40:c9:39:a7:cf:98:06:bb:28:88:86:26:b0:cd:97:
                    18:78:42:e2:41:8e:65:ce:53:e3:1f:7e:be:38:57:
                    8c:97:68:f2:79:c0:85:40:cd:36:5a:5f:5e:21:e1:
                    02:2a:47:5a:ce:aa:3c:3e:7b:b6:06:2d:52:ca:c0:
                    dc:39:b8:34:30:6f:59:ff:0a:0b:b2:d6:33:02:a0:
                    74:24:b7:6b:8a:5a:66:f4:35:46:ad:c2:96:9b:20:
                    44:9f:a9:eb:cd:db:90:0d:67:1b:be:b2:83:42:c6:
                    b4:84:60:8d:cd:1e:0a:56:e0:df:d9:12:b7:ef:06:
                    34:d8:ab:ab:04:a3:67:e5:07:c0:24:05:ef:ff:8c:
                    43:25:f2:01:87:df:ec:09:d5:f7:c6:0b:9d:17:fc:
                    e8:28:fc:a8:ca:bc:14:08:b0:f2:21:2b:10:a9:22:
                    75:20:bd:2e:42:86:4a:2a:60:49:17:6c:21:17:12:
                    13:bb:00:45:0b:ba:0b:35:14:e7:12:2d:fa:43:fd:
                    f5:c6:e9:0c:29:c6:51:93:78:6b:07:67:eb:56:b8:
                    e9:0b:cc:01:91:1d:9e:25:d2:86:16:e8:5a:16:31:
                    76:2c:a7:9e:45:27:b7:49:57:d4:4d:3e:cf:c1:a8:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:29:C3:33:6A:3D:34:A0:8C:F4:F3:25:9D:99:54:3B:6A:4C:F2:43
            X509v3 Authority Key Identifier:
                keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:d8:ff:ac:be:8a:c1:7d:cf:54:ed:75:be:9d:06:3e:4c:
         ef:6f:ab:e0:90:4c:6a:c0:a0:b4:10:cd:81:87:93:9b:6d:15:
         8e:2c:fc:97:bd:d6:f8:4e:94:99:bf:bc:a6:db:ac:be:9a:84:
         d6:11:d5:e9:c9:41:25:9e:a4:b5:2b:27:cd:ba:be:03:54:ed:
         12:93:a1:ac:df:2f:f3:45:36:67:15:16:bc:8d:81:70:91:aa:
         c2:9d:ae:23:5b:1f:b9:35:4e:b0:48:bd:17:06:8e:fc:6b:b6:
         52:e4:f4:a9:21:73:db:78:62:03:5d:68:b7:00:6d:6c:2b:23:
         99:72:cd:20:7f:fb:a1:8b:46:cf:fe:af:5f:a6:a5:40:0c:31:
         ee:78:10:7d:e1:57:73:d0:8f:8a:e3:a9:17:77:e4:a4:fc:25:
         d6:69:af:cf:fc:19:4c:32:fa:41:89:28:d8:a3:5d:38:71:93:
         4e:e4:61:5f:f5:71:c7:6c:ba:ce:84:cd:3b:e1:61:a3:d5:76:
         d5:bd:30:f7:14:93:af:89:3b:2c:c9:e3:f2:10:3b:39:b0:ed:
         d4:9c:70:d2:ba:9c:07:30:f0:8c:70:c4:3f:27:24:f1:cd:01:
         0b:fc:66:21:ab:9d:3b:33:f9:35:1b:70:46:7c:0f:f5:67:c4:
         76:af:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:33 2026 by rpki-client