This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json) Hash identifier: /eV34Peso7GqzFnRV+Ii4xMlLtA/gnIN5hqq6PLYOgA= Subject key identifier: 68:AD:91:F3:62:C6:76:70:3C:19:41:C5:6D:AE:55:9E:E1:4D:15:E0 Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Certificate serial: 019B19BBCE4C111CCDD1AA3FAD1FFC4AC079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft Manifest number: A1 Signing time: Sat 13 Dec 2025 22:01:36 +0000 Manifest this update: Sat 13 Dec 2025 22:01:36 +0000 Manifest next update: Sun 14 Dec 2025 22:01:36 +0000 Files and hashes: 1: MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa (hash: C1RacTZdjwPZlfow+hor5mnPRzIoBUQ9t7zMcZ9IcC8=) 2: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: oOs2Xo+V1rwAQZovpjdKHKS5vn1QraNFE3OZ1ukMw2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:ce:4c:11:1c:cd:d1:aa:3f:ad:1f:fc:4a:c0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Validity Not Before: Dec 13 22:01:36 2025 GMT Not After : Dec 14 22:01:36 2025 GMT Subject: CN=68ad91f362c676703c1941c56dae559ee14d15e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:19:9f:85:3e:41:1a:7b:63:b2:44:0f:ba: 71:dc:37:41:e1:e2:e7:bd:5e:dd:b1:5a:4b:da:24: 83:d5:b9:b9:20:c2:23:4b:fa:26:bb:ac:36:57:1d: fc:c2:be:e4:d2:31:72:73:93:e9:ec:db:8a:a3:b2: 55:ac:33:49:42:6d:26:66:5c:64:a7:7f:5e:50:5b: 0c:17:d7:48:16:fb:a2:45:77:93:00:89:2a:df:0e: f5:0f:d7:90:0e:6b:fb:38:1b:96:25:d1:c6:97:7f: 20:a9:e0:e1:61:f1:a4:17:85:2c:30:c8:58:bd:2d: 91:05:31:9c:33:9e:bf:4c:dc:99:92:1e:eb:39:0e: 9d:0f:c6:49:67:89:dc:d8:37:bc:9d:e2:e5:b7:59: 6f:e5:67:bf:11:c4:48:ea:59:ad:c5:90:62:19:39: da:01:78:cd:33:3b:c8:a5:c8:6b:e3:11:01:06:d0: 61:77:21:3d:b1:ac:ab:a7:cd:51:fd:08:fc:11:9d: 9a:b3:43:54:18:71:a7:16:88:f0:e2:53:91:ab:5d: 18:13:85:a7:01:29:af:ed:d8:c5:97:75:cf:d7:1e: 75:4c:c6:4b:11:28:28:88:c5:33:e5:f0:15:36:c6: f4:0e:ac:32:d3:b2:89:bf:ec:db:95:2e:c3:0b:ab: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AD:91:F3:62:C6:76:70:3C:19:41:C5:6D:AE:55:9E:E1:4D:15:E0 X509v3 Authority Key Identifier: keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:51:04:c3:c0:b4:90:ac:ec:64:26:19:f4:14:f2:7b:b4:9c: d7:57:dc:95:67:74:13:2e:e0:e8:92:0a:5d:58:ca:7f:34:fd: dc:dd:4b:d8:63:76:d3:4f:48:39:f6:62:5d:eb:5c:d0:c8:89: 51:ca:ef:49:c3:40:5e:43:a1:d8:15:3a:ee:c1:35:61:5d:b9: e9:d4:f2:56:80:80:b1:57:ff:48:71:96:e8:65:f7:96:14:50: 62:2b:7c:f0:fb:1b:93:4f:96:51:bc:76:1f:39:30:ad:52:f0: 11:73:38:2b:50:de:d4:e5:d6:0d:33:9a:11:ea:bc:75:1f:d3: 7d:6d:af:e6:2e:98:7a:45:d1:ef:9d:db:79:cc:9a:81:2a:e7: 3f:78:be:6a:cf:95:cc:31:e7:ba:4f:52:6f:98:83:e4:be:ff: c3:ab:9d:7a:c2:a0:12:21:8c:ed:95:4e:f0:94:83:21:63:ff: f5:55:e2:ea:bb:42:94:a4:30:03:cb:47:69:74:88:62:5e:85: 30:46:4c:49:0c:e5:07:11:ea:d9:fa:16:50:ae:1e:93:bd:c7: bd:df:7a:32:3b:3d:61:81:dd:7b:3d:b3:78:99:91:3e:23:65: c5:5e:83:63:cd:a4:5e:db:9c:bc:cc:5d:cc:a9:6c:f1:72:cc: 18:5e:87:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu85MERzN0ao/rR/8SsB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTliZTNjNDdhZmI5ZTBhNWZjMzAzYmYyZDg0YTczZjIw ODJmYWMwHhcNMjUxMjEzMjIwMTM2WhcNMjUxMjE0MjIwMTM2WjAzMTEwLwYDVQQD Eyg2OGFkOTFmMzYyYzY3NjcwM2MxOTQxYzU2ZGFlNTU5ZWUxNGQxNWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTwZn4U+QRp7Y7JED7px3DdB4eLn vV7dsVpL2iSD1bm5IMIjS/omu6w2Vx38wr7k0jFyc5Pp7NuKo7JVrDNJQm0mZlxk p39eUFsMF9dIFvuiRXeTAIkq3w71D9eQDmv7OBuWJdHGl38gqeDhYfGkF4UsMMhY vS2RBTGcM56/TNyZkh7rOQ6dD8ZJZ4nc2De8neLlt1lv5We/EcRI6lmtxZBiGTna AXjNMzvIpchr4xEBBtBhdyE9sayrp81R/Qj8EZ2as0NUGHGnFojw4lORq10YE4Wn ASmv7djFl3XP1x51TMZLESgoiMUz5fAVNsb0Dqwy07KJv+zblS7DC6sdzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGitkfNixnZwPBlBxW2uVZ7hTRXgMB8GA1UdIwQY MBaAFD3pvjxHr7ngpfwwO/LYSnPyCC+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2It MmMxYzI5MDE0NTQ4LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2ItMmMxYzI5MDE0NTQ4 LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglEEw8C0 kKzsZCYZ9BTye7Sc11fclWd0Ey7g6JIKXVjKfzT93N1L2GN2009IOfZiXetc0MiJ UcrvScNAXkOh2BU67sE1YV256dTyVoCAsVf/SHGW6GX3lhRQYit88Psbk0+WUbx2 HzkwrVLwEXM4K1De1OXWDTOaEeq8dR/TfW2v5i6YekXR753becyagSrnP3i+as+V zDHnuk9Sb5iD5L7/w6udesKgEiGM7ZVO8JSDIWP/9VXi6rtClKQwA8tHaXSIYl6F MEZMSQzlBxHq2foWUK4ek73Hvd96Mjs9YYHdez2zeJmRPiNlxV6DY82kXtucvMxd zKls8XLMGF6HHw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:03:43 2025 by rpki-client