This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json) Hash identifier: IDyJi3NhLb42kLCVh5tjqLzNDfQce0yMurwQcKqxwDQ= Subject key identifier: BD:AC:5B:2E:06:C4:40:6C:34:51:CC:02:84:B0:06:64:BA:9D:64:32 Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Certificate serial: 019AF12CFA0A9B7759B51E13C1AD5781DD02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft Manifest number: 8C Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa (hash: C1RacTZdjwPZlfow+hor5mnPRzIoBUQ9t7zMcZ9IcC8=) 2: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: zyryGF1mA/gMh37DFCHNOdd7NHAjh+sQndyz6e42L04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fa:0a:9b:77:59:b5:1e:13:c1:ad:57:81:dd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=bdac5b2e06c4406c3451cc0284b00664ba9d6432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:08:f3:41:bf:10:06:d2:27:a1:54:70:9e: 38:37:81:43:18:1f:81:72:89:a1:95:4e:7a:0f:9f: 10:e6:aa:8a:71:c3:aa:4b:b2:8f:05:71:35:94:1c: e3:ec:a3:d1:be:8a:88:88:9a:da:92:51:1a:2e:cc: 38:89:1a:12:06:5a:ed:b5:48:30:71:87:6c:47:ed: d9:7c:f0:e1:d1:f5:b6:ec:b4:5f:cd:3d:3b:e8:06: 19:1c:01:f9:7a:5c:2c:3f:04:da:cf:39:9e:70:8d: 68:78:52:31:85:f9:ae:27:c6:62:63:e9:45:85:a8: c7:bf:11:1a:cf:05:45:7d:60:d6:da:b0:85:c8:7f: 1f:97:55:da:b9:70:34:01:da:e0:22:23:72:82:10: ee:dc:ec:6b:85:35:0a:b4:95:97:58:49:0c:d1:f2: 92:29:83:50:ad:c4:a2:5a:12:13:6f:06:e5:79:cc: ba:71:47:66:f5:33:aa:62:02:3c:ba:50:61:4b:dd: 8a:55:17:37:0e:b9:0e:d2:bc:c9:04:cc:a9:78:dc: 24:82:b5:ee:ff:f3:fe:b5:e6:a7:70:37:97:da:e0: c1:62:80:35:4d:92:18:ab:58:1b:21:53:6f:6e:c1: f7:fc:78:7a:5a:f8:d8:eb:6f:6a:94:a1:57:01:f1: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:5B:2E:06:C4:40:6C:34:51:CC:02:84:B0:06:64:BA:9D:64:32 X509v3 Authority Key Identifier: keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:81:13:b4:5d:3c:b8:52:59:86:d4:ae:4e:8d:fe:70:b2:f1: dc:30:d9:20:d9:e8:cb:47:17:16:36:d8:ca:52:ea:51:5b:4d: c9:f3:28:4a:b0:a4:0a:e9:2f:b3:7b:63:cf:f1:1d:31:a1:b8: 06:c4:5d:8b:84:3e:61:e4:b4:7c:4c:c7:f5:86:83:2c:9a:08: 1c:8e:07:a7:ec:14:ce:49:5e:3f:aa:99:3d:95:70:05:c4:3c: 1f:62:2b:fb:08:8d:f2:2e:53:53:55:66:97:89:8c:25:8f:f4: 4a:86:cd:c5:ce:cf:d4:d3:8c:e4:b0:d0:34:e7:49:ad:b5:0f: 90:28:86:22:e4:41:2e:26:69:b3:da:04:39:d0:18:dd:e4:9c: 56:00:05:a1:15:7e:5a:36:2d:19:31:19:a6:6b:dd:b8:45:11: 50:0f:5b:cc:3c:d3:4c:90:c6:17:8d:32:e9:1d:21:34:19:70: b1:89:da:43:e1:03:e0:01:ca:b7:67:c1:bd:70:b5:cb:57:f4: e6:e9:b9:5e:2d:1e:1c:6a:5d:04:88:6b:e1:fb:67:86:08:e3: f5:75:e5:30:d1:8a:9c:c4:21:70:df:01:da:06:56:44:ad:7d: d6:c0:62:39:02:98:32:46:72:1d:35:7a:3a:4e:d9:97:7a:91: ab:ff:18:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPoKm3dZtR4Twa1Xgd0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTliZTNjNDdhZmI5ZTBhNWZjMzAzYmYyZDg0YTczZjIw ODJmYWMwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD EyhiZGFjNWIyZTA2YzQ0MDZjMzQ1MWNjMDI4NGIwMDY2NGJhOWQ2NDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE8I80G/EAbSJ6FUcJ44N4FDGB+B comhlU56D58Q5qqKccOqS7KPBXE1lBzj7KPRvoqIiJraklEaLsw4iRoSBlrttUgw cYdsR+3ZfPDh0fW27LRfzT076AYZHAH5elwsPwTazzmecI1oeFIxhfmuJ8ZiY+lF hajHvxEazwVFfWDW2rCFyH8fl1XauXA0AdrgIiNyghDu3OxrhTUKtJWXWEkM0fKS KYNQrcSiWhITbwblecy6cUdm9TOqYgI8ulBhS92KVRc3DrkO0rzJBMypeNwkgrXu //P+teancDeX2uDBYoA1TZIYq1gbIVNvbsH3/Hh6WvjY629qlKFXAfEYxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2sWy4GxEBsNFHMAoSwBmS6nWQyMB8GA1UdIwQY MBaAFD3pvjxHr7ngpfwwO/LYSnPyCC+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2It MmMxYzI5MDE0NTQ4LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2ItMmMxYzI5MDE0NTQ4 LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIETtF08 uFJZhtSuTo3+cLLx3DDZINnoy0cXFjbYylLqUVtNyfMoSrCkCukvs3tjz/EdMaG4 BsRdi4Q+YeS0fEzH9YaDLJoIHI4Hp+wUzkleP6qZPZVwBcQ8H2Ir+wiN8i5TU1Vm l4mMJY/0SobNxc7P1NOM5LDQNOdJrbUPkCiGIuRBLiZps9oEOdAY3eScVgAFoRV+ WjYtGTEZpmvduEURUA9bzDzTTJDGF40y6R0hNBlwsYnaQ+ED4AHKt2fBvXC1y1f0 5um5Xi0eHGpdBIhr4ftnhgjj9XXlMNGKnMQhcN8B2gZWRK191sBiOQKYMkZyHTV6 Ok7Zl3qRq/8Y4g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:12 2025 by rpki-client