This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier: IsrCKBTOQEhl5t5VptNRSLD9+WsAb0lIQJNIbOAp4Ug=
Subject key identifier: 9F:29:C3:33:6A:3D:34:A0:8C:F4:F3:25:9D:99:54:3B:6A:4C:F2:43
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 019C438FFDD9E32D596E4989142726C2BF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number: 013C
Signing time: Mon 09 Feb 2026 18:00:35 +0000
Manifest this update: Mon 09 Feb 2026 18:00:35 +0000
Manifest next update: Tue 10 Feb 2026 18:00:35 +0000
Files and hashes: 1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: uEw5FUTT35gooDJdQz7Hth/KAD0+OeOOh8mjx2h8qxs=)
2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:fd:d9:e3:2d:59:6e:49:89:14:27:26:c2:bf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Feb 9 18:00:35 2026 GMT
Not After : Feb 10 18:00:35 2026 GMT
Subject: CN=9f29c3336a3d34a08cf4f3259d99543b6a4cf243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:37:c6:8a:26:0e:19:cd:0f:07:e4:e1:91:cf:
40:c9:39:a7:cf:98:06:bb:28:88:86:26:b0:cd:97:
18:78:42:e2:41:8e:65:ce:53:e3:1f:7e:be:38:57:
8c:97:68:f2:79:c0:85:40:cd:36:5a:5f:5e:21:e1:
02:2a:47:5a:ce:aa:3c:3e:7b:b6:06:2d:52:ca:c0:
dc:39:b8:34:30:6f:59:ff:0a:0b:b2:d6:33:02:a0:
74:24:b7:6b:8a:5a:66:f4:35:46:ad:c2:96:9b:20:
44:9f:a9:eb:cd:db:90:0d:67:1b:be:b2:83:42:c6:
b4:84:60:8d:cd:1e:0a:56:e0:df:d9:12:b7:ef:06:
34:d8:ab:ab:04:a3:67:e5:07:c0:24:05:ef:ff:8c:
43:25:f2:01:87:df:ec:09:d5:f7:c6:0b:9d:17:fc:
e8:28:fc:a8:ca:bc:14:08:b0:f2:21:2b:10:a9:22:
75:20:bd:2e:42:86:4a:2a:60:49:17:6c:21:17:12:
13:bb:00:45:0b:ba:0b:35:14:e7:12:2d:fa:43:fd:
f5:c6:e9:0c:29:c6:51:93:78:6b:07:67:eb:56:b8:
e9:0b:cc:01:91:1d:9e:25:d2:86:16:e8:5a:16:31:
76:2c:a7:9e:45:27:b7:49:57:d4:4d:3e:cf:c1:a8:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:29:C3:33:6A:3D:34:A0:8C:F4:F3:25:9D:99:54:3B:6A:4C:F2:43
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:d8:ff:ac:be:8a:c1:7d:cf:54:ed:75:be:9d:06:3e:4c:
ef:6f:ab:e0:90:4c:6a:c0:a0:b4:10:cd:81:87:93:9b:6d:15:
8e:2c:fc:97:bd:d6:f8:4e:94:99:bf:bc:a6:db:ac:be:9a:84:
d6:11:d5:e9:c9:41:25:9e:a4:b5:2b:27:cd:ba:be:03:54:ed:
12:93:a1:ac:df:2f:f3:45:36:67:15:16:bc:8d:81:70:91:aa:
c2:9d:ae:23:5b:1f:b9:35:4e:b0:48:bd:17:06:8e:fc:6b:b6:
52:e4:f4:a9:21:73:db:78:62:03:5d:68:b7:00:6d:6c:2b:23:
99:72:cd:20:7f:fb:a1:8b:46:cf:fe:af:5f:a6:a5:40:0c:31:
ee:78:10:7d:e1:57:73:d0:8f:8a:e3:a9:17:77:e4:a4:fc:25:
d6:69:af:cf:fc:19:4c:32:fa:41:89:28:d8:a3:5d:38:71:93:
4e:e4:61:5f:f5:71:c7:6c:ba:ce:84:cd:3b:e1:61:a3:d5:76:
d5:bd:30:f7:14:93:af:89:3b:2c:c9:e3:f2:10:3b:39:b0:ed:
d4:9c:70:d2:ba:9c:07:30:f0:8c:70:c4:3f:27:24:f1:cd:01:
0b:fc:66:21:ab:9d:3b:33:f9:35:1b:70:46:7c:0f:f5:67:c4:
76:af:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:33 2026 by rpki-client