This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json) Hash identifier: Sfgpcc8os2GgqCWeakNXMM2WfuoGHLvpc/MWGJw8uao= Subject key identifier: B2:B1:1D:06:48:BF:E6:26:06:B6:8E:95:92:68:87:F4:BB:00:6B:36 Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Certificate serial: 019B405C84198CAF03EAE4672FD7B60E2451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft Manifest number: B5 Signing time: Sun 21 Dec 2025 10:02:43 +0000 Manifest this update: Sun 21 Dec 2025 10:02:43 +0000 Manifest next update: Mon 22 Dec 2025 10:02:43 +0000 Files and hashes: 1: MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa (hash: C1RacTZdjwPZlfow+hor5mnPRzIoBUQ9t7zMcZ9IcC8=) 2: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: YO70KnSNTwdTnDyBG5ZPq+tEPj0Orz+nTvPr4niU3K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:84:19:8c:af:03:ea:e4:67:2f:d7:b6:0e:24:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac Validity Not Before: Dec 21 10:02:43 2025 GMT Not After : Dec 22 10:02:43 2025 GMT Subject: CN=b2b11d0648bfe62606b68e95926887f4bb006b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:82:4b:35:d3:67:fa:a0:50:a2:d9:32:04: ab:d4:66:72:ba:b1:c8:50:6a:73:3c:9b:92:8d:9b: ae:44:bb:a6:d3:1e:db:d9:00:d7:0a:57:49:0d:8f: 5e:69:e8:59:c1:b2:38:11:dc:40:46:be:24:1f:24: 07:cc:d4:a2:4b:18:35:04:69:7d:be:d7:ee:f4:cd: 1e:06:07:96:c0:82:ea:5a:a2:8a:36:24:7a:66:9c: d1:6f:f5:94:af:14:7c:df:f4:5e:05:a9:2b:7b:51: 4e:62:d9:32:25:ef:a4:24:6f:9a:57:a9:4a:8f:eb: 8a:95:88:7e:2a:6d:f9:d8:45:34:36:2a:72:9c:3e: 6d:2f:dc:b5:27:00:5a:e9:36:20:59:2c:92:82:ef: 55:ea:1b:14:d7:dc:69:0e:c5:c9:9b:d1:0b:73:e2: 5e:54:e1:05:ba:cb:0b:dc:44:29:96:74:d1:d2:04: b1:36:72:30:d2:45:6f:fc:cc:18:a9:e5:10:6f:f3: a1:72:86:2f:08:84:cc:c0:60:d7:26:fc:8c:4b:69: c1:8e:b9:2f:95:c6:27:33:2c:de:cc:82:15:65:56: bd:80:50:16:d8:f1:75:b9:c4:fe:12:11:07:96:2c: 5c:dd:80:e3:3e:2c:2e:38:8f:29:47:29:1e:62:6f: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B1:1D:06:48:BF:E6:26:06:B6:8E:95:92:68:87:F4:BB:00:6B:36 X509v3 Authority Key Identifier: keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b6:54:a3:28:84:bd:fd:bd:75:1c:3e:b2:86:78:40:cb:e1: c8:7f:90:f0:88:bc:8b:32:36:79:a0:a9:af:ab:79:fc:5a:75: c1:48:96:1d:ed:8a:93:25:f6:79:6b:2a:fc:54:30:8a:45:ac: 44:7d:60:66:35:f1:ef:4c:9c:23:53:8a:a6:ca:8f:cf:c9:89: 6f:03:ef:ad:1f:a3:dd:cb:d9:ac:f4:98:65:62:06:0a:8c:ad: cf:75:96:3c:f6:06:ef:e4:0c:da:bd:f8:9c:59:f4:52:67:57: f4:e2:ef:20:50:92:3a:62:b9:c2:ba:5a:60:3e:ea:87:4b:10: b0:19:88:77:c3:74:33:93:95:2d:2a:2b:bd:27:89:5f:6e:2e: 90:6e:d1:79:43:f4:8d:1b:ca:86:aa:17:a0:10:68:04:ac:9d: 1c:b2:99:51:79:80:9e:2d:3a:a3:e2:b6:68:57:b6:43:2c:76: 89:cf:ab:c4:32:98:a3:f6:41:c5:43:e2:d8:c4:11:fc:37:f6: 88:c6:20:da:d1:34:bc:ba:e2:41:80:da:61:29:ac:06:f4:69: 64:42:5f:4e:4d:79:36:11:da:8e:14:f1:cf:77:5a:40:03:2a: 6c:1b:c7:4a:be:57:6e:6c:23:9b:8e:cd:22:31:a0:40:c9:8c: 91:18:3e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXIQZjK8D6uRnL9e2DiRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTliZTNjNDdhZmI5ZTBhNWZjMzAzYmYyZDg0YTczZjIw ODJmYWMwHhcNMjUxMjIxMTAwMjQzWhcNMjUxMjIyMTAwMjQzWjAzMTEwLwYDVQQD EyhiMmIxMWQwNjQ4YmZlNjI2MDZiNjhlOTU5MjY4ODdmNGJiMDA2YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tmCSzXTZ/qgUKLZMgSr1GZyurHI UGpzPJuSjZuuRLum0x7b2QDXCldJDY9eaehZwbI4EdxARr4kHyQHzNSiSxg1BGl9 vtfu9M0eBgeWwILqWqKKNiR6ZpzRb/WUrxR83/ReBakre1FOYtkyJe+kJG+aV6lK j+uKlYh+Km352EU0NipynD5tL9y1JwBa6TYgWSySgu9V6hsU19xpDsXJm9ELc+Je VOEFussL3EQplnTR0gSxNnIw0kVv/MwYqeUQb/OhcoYvCITMwGDXJvyMS2nBjrkv lcYnMyzezIIVZVa9gFAW2PF1ucT+EhEHlixc3YDjPiwuOI8pRykeYm+/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKxHQZIv+YmBraOlZJoh/S7AGs2MB8GA1UdIwQY MBaAFD3pvjxHr7ngpfwwO/LYSnPyCC+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2It MmMxYzI5MDE0NTQ4LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9lZjc2YTYtYzRlMS00MjdmLTk3M2ItMmMxYzI5MDE0NTQ4 LzEvUGVtLVBFZXZ1ZUNsX0RBNzh0aEtjX0lJTDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7ZUoyiE vf29dRw+soZ4QMvhyH+Q8Ii8izI2eaCpr6t5/Fp1wUiWHe2KkyX2eWsq/FQwikWs RH1gZjXx70ycI1OKpsqPz8mJbwPvrR+j3cvZrPSYZWIGCoytz3WWPPYG7+QM2r34 nFn0UmdX9OLvIFCSOmK5wrpaYD7qh0sQsBmId8N0M5OVLSorvSeJX24ukG7ReUP0 jRvKhqoXoBBoBKydHLKZUXmAni06o+K2aFe2Qyx2ic+rxDKYo/ZBxUPi2MQR/Df2 iMYg2tE0vLriQYDaYSmsBvRpZEJfTk15NhHajhTxz3daQAMqbBvHSr5Xbmwjm47N IjGgQMmMkRg+rA== -----END CERTIFICATE-----Generated at Sun Dec 21 14:37:43 2025 by rpki-client