This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json) Hash identifier: N5teIwvqednAZSqAE022v22rDtHcFGRAigA0Jch4BbU= Subject key identifier: 80:DB:B7:BD:01:3C:4F:BE:C4:2A:05:FC:B1:ED:61:75:F1:94:13:C3 Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Certificate serial: 019BFA2E4C1D93FD4EC4B96F2470F908BB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft Manifest number: 0116 Signing time: Mon 26 Jan 2026 12:01:36 +0000 Manifest this update: Mon 26 Jan 2026 12:01:36 +0000 Manifest next update: Tue 27 Jan 2026 12:01:36 +0000 Files and hashes: 1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: l2oHoqKtuIgeDTA58yS3983av3txbavzoKxZCxHrfhg=) 2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:4c:1d:93:fd:4e:c4:b9:6f:24:70:f9:08:bb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Validity Not Before: Jan 26 12:01:36 2026 GMT Not After : Jan 27 12:01:36 2026 GMT Subject: CN=80dbb7bd013c4fbec42a05fcb1ed6175f19413c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:56:92:8f:77:b6:81:6c:bb:01:9c:4d:c4: 56:20:3b:ef:63:f2:f5:86:50:8e:7c:da:b1:13:43: 51:eb:6d:fe:d6:a2:06:7f:5b:8e:a6:1b:4b:f7:a6: 97:c7:fb:e9:08:8c:fb:14:58:3a:42:32:90:90:c6: 26:30:62:3d:60:d1:e1:a7:55:60:12:6e:5d:f9:53: c7:6b:df:66:6e:a3:78:d0:3f:79:ab:ef:8e:ee:4f: a6:2b:2e:f7:da:dd:2f:4d:ff:2d:38:1b:9b:91:8d: 02:09:17:fa:9b:8d:df:5c:f2:4d:9e:e9:da:ec:39: 71:5c:ee:c6:95:7f:31:f2:c6:ba:55:41:fc:bb:3d: f3:ae:fa:e8:52:65:7c:d6:92:bf:5d:1c:21:2c:4d: f4:b2:45:45:af:d8:0a:40:ec:a1:08:de:b0:c5:0c: 66:b0:4a:0b:95:8a:d9:9b:0b:aa:a0:b8:c8:d1:98: 93:a1:8d:a0:2b:98:f3:2b:98:97:90:fc:cd:a1:8f: 71:d4:a3:52:c4:1c:55:3f:c7:29:df:a8:76:c9:e7: d9:49:c4:b5:d3:13:e9:02:98:cc:79:bf:19:ce:58: ae:26:62:ea:15:ad:e1:21:01:72:56:4d:69:73:68: 00:fb:e8:9a:d3:d6:58:20:ca:49:1f:45:27:b2:b3: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DB:B7:BD:01:3C:4F:BE:C4:2A:05:FC:B1:ED:61:75:F1:94:13:C3 X509v3 Authority Key Identifier: keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1f:5f:b0:81:4a:d5:e0:f9:25:c2:d6:66:04:37:7d:ae:49: 7c:c3:14:88:98:cd:d3:05:05:5b:76:34:44:29:09:92:c6:66: dd:7f:43:44:59:63:11:dd:e4:75:74:63:9f:e2:e8:57:9b:09: 92:ef:c7:da:3a:40:f6:6a:d6:e0:5c:f2:0f:8a:b4:0e:03:9d: 15:29:52:7f:c2:9c:35:81:37:a9:33:47:00:c8:7f:0b:71:6d: 52:19:c1:b9:43:29:1a:1b:67:0e:a3:ec:b4:43:92:7a:8e:19: 63:b0:e1:a9:96:a6:4a:3d:f0:b9:ea:b3:3b:45:ea:18:6e:da: 75:52:ef:95:1d:cb:03:0b:8d:50:35:87:6d:8e:2b:79:7d:1e: 74:aa:96:35:97:68:cc:c8:df:12:ce:22:a4:39:5c:11:ba:25: 19:a5:09:89:f9:8d:66:9b:a5:07:f7:11:4f:91:17:ea:5b:05: 9e:63:3a:06:c9:45:5b:72:81:46:d3:06:84:b1:f1:e1:4f:2b: bb:90:9a:d8:04:66:a9:b8:35:c3:f1:f5:87:60:7b:c1:f3:03: 37:6d:15:59:85:af:c5:a7:fc:f2:04:2d:1f:70:41:47:54:42: f4:cc:6f:d5:a1:fb:e2:4c:94:d3:79:0b:a5:6f:b9:57:b6:66: 1f:df:87:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lkwdk/1OxLlvJHD5CLtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTliZTNjNDdhZmI5ZTBhNWZjMzAzYmYyZDg0YTczZjIw ODJmYWMwHhcNMjYwMTI2MTIwMTM2WhcNMjYwMTI3MTIwMTM2WjAzMTEwLwYDVQQD Eyg4MGRiYjdiZDAxM2M0ZmJlYzQyYTA1ZmNiMWVkNjE3NWYxOTQxM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHhWko93toFsuwGcTcRWIDvvY/L1 hlCOfNqxE0NR623+1qIGf1uOphtL96aXx/vpCIz7FFg6QjKQkMYmMGI9YNHhp1Vg Em5d+VPHa99mbqN40D95q++O7k+mKy732t0vTf8tOBubkY0CCRf6m43fXPJNnuna 7DlxXO7GlX8x8sa6VUH8uz3zrvroUmV81pK/XRwhLE30skVFr9gKQOyhCN6wxQxm sEoLlYrZmwuqoLjI0ZiToY2gK5jzK5iXkPzNoY9x1KNSxBxVP8cp36h2yefZScS1 0xPpApjMeb8ZzliuJmLqFa3hIQFyVk1pc2gA++ia09ZYIMpJH0UnsrMk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDbt70BPE++xCoF/LHtYXXxlBPDMB8GA1UdIwQY MBaAFD3pvjxHr7ngpfwwO/LYSnPyCC+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2It MmMxYzI5MDE0NTQ4LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2ItMmMxYzI5MDE0NTQ4 LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx9fsIFK 1eD5JcLWZgQ3fa5JfMMUiJjN0wUFW3Y0RCkJksZm3X9DRFljEd3kdXRjn+LoV5sJ ku/H2jpA9mrW4FzyD4q0DgOdFSlSf8KcNYE3qTNHAMh/C3FtUhnBuUMpGhtnDqPs tEOSeo4ZY7DhqZamSj3wueqzO0XqGG7adVLvlR3LAwuNUDWHbY4reX0edKqWNZdo zMjfEs4ipDlcEbolGaUJifmNZpulB/cRT5EX6lsFnmM6BslFW3KBRtMGhLHx4U8r u5Ca2ARmqbg1w/H1h2B7wfMDN20VWYWvxaf88gQtH3BBR1RC9Mxv1aH74kyU03kL pW+5V7ZmH9+Hbg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:08 2026 by rpki-client