This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: K7h6gJ3oXAS37c4T78/4ntTJRZOMdY2KOydvaT8Mlo8= Subject key identifier: 97:39:A1:31:29:9C:FA:E7:73:8C:CD:4A:90:C3:5B:3B:75:C8:CA:FF Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019C04437010D5EB6F5CAD86A50591822B33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 17F7 Signing time: Wed 28 Jan 2026 11:00:54 +0000 Manifest this update: Wed 28 Jan 2026 11:00:54 +0000 Manifest next update: Thu 29 Jan 2026 11:00:54 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: n1Y2GgmiLP290rKDI8am6ZTaSRIgM6LQAA3/29lrEhg=) 4: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 5: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 6: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 7: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:43:70:10:d5:eb:6f:5c:ad:86:a5:05:91:82:2b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 28 11:00:54 2026 GMT Not After : Jan 29 11:00:54 2026 GMT Subject: CN=9739a131299cfae7738ccd4a90c35b3b75c8caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:2a:4f:97:db:b5:5e:6f:50:02:85:cb:9e: 0c:14:d9:ad:cc:81:8a:66:38:61:20:44:56:af:49: c5:12:91:75:04:00:61:7f:51:b6:8a:4b:e2:05:86: c0:2f:16:b8:81:55:98:c8:2b:36:4f:fa:f0:d4:36: 35:43:d7:9a:3e:ca:75:c0:47:16:a3:eb:94:e6:8f: 47:46:ba:26:a4:f3:49:e6:7a:e9:77:8c:fb:72:aa: b4:a6:18:e8:e3:dc:ab:22:c3:d3:f6:bb:67:e8:94: a6:27:22:67:5b:df:8a:8e:52:c9:13:2a:49:d1:fc: 6f:29:e1:09:8a:8a:1d:bb:01:bb:b3:bb:ef:f6:ad: 8b:b7:42:c9:ac:e0:99:2b:0b:9a:a0:a5:70:97:6e: 97:12:8b:74:69:1e:6a:31:b5:ef:3b:1f:d7:71:a5: a6:e7:b6:cc:2a:f6:e5:55:2f:a3:40:28:24:75:87: 98:21:76:cb:92:e3:fc:1c:24:f1:b5:fd:cd:b7:5b: f7:81:1e:72:82:05:79:39:ea:f2:57:da:9c:03:f6: d8:42:51:3d:df:d5:51:1f:a1:cb:cb:a5:27:1c:5f: 61:09:7b:11:15:a0:7f:dc:2c:3e:c1:e4:96:d1:a5: 21:e0:5a:d7:32:ac:36:4f:29:8c:16:a9:85:f0:5c: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:39:A1:31:29:9C:FA:E7:73:8C:CD:4A:90:C3:5B:3B:75:C8:CA:FF X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0c:df:41:7c:d0:c9:c3:a0:b9:94:ce:45:5f:6e:f6:80:73: 50:24:27:44:64:bc:8c:3e:66:90:ff:1a:1a:2b:44:13:81:f2: dd:0a:8d:c4:eb:ef:d1:62:7b:d5:97:62:bf:99:12:6f:ce:51: 34:40:7a:e9:2b:ba:13:44:c0:38:ad:e2:40:e9:9d:9f:0a:fb: b8:7c:7c:d3:5a:95:8c:66:d4:99:43:bc:16:e1:1f:27:f7:4d: 8b:b0:09:82:bf:c2:96:42:3b:f4:b1:c8:2f:b7:70:1c:2c:df: ce:3c:3d:e4:bc:2f:e2:e0:66:f9:a0:68:cd:11:83:3f:ac:e8: 4d:17:c5:64:4b:bc:3a:82:60:ab:57:c6:ca:99:37:f1:40:9d: fa:8d:f7:5a:89:b7:64:9d:68:4d:62:02:c0:ab:94:de:4a:a2: 13:0f:a4:99:6f:b3:34:20:e3:6d:e6:06:15:e9:c5:da:e2:90: ea:fe:dc:be:52:19:67:98:3f:05:a4:40:e2:69:26:16:37:5e: dd:ba:22:bb:2b:4f:99:12:7a:27:ab:ee:4a:09:8f:ae:bf:39: 83:7a:6b:ed:b3:e4:68:46:53:06:2f:ec:00:55:ec:c4:a0:2e: bd:28:7f:e8:75:ec:b0:c6:28:64:57:cf:a6:f4:8a:7a:d2:cf: 95:55:b2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEQ3AQ1etvXK2GpQWRgiszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTI4MTEwMDU0WhcNMjYwMTI5MTEwMDU0WjAzMTEwLwYDVQQD Eyg5NzM5YTEzMTI5OWNmYWU3NzM4Y2NkNGE5MGMzNWIzYjc1YzhjYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvUqT5fbtV5vUAKFy54MFNmtzIGK ZjhhIERWr0nFEpF1BABhf1G2ikviBYbALxa4gVWYyCs2T/rw1DY1Q9eaPsp1wEcW o+uU5o9HRrompPNJ5nrpd4z7cqq0phjo49yrIsPT9rtn6JSmJyJnW9+KjlLJEypJ 0fxvKeEJiooduwG7s7vv9q2Lt0LJrOCZKwuaoKVwl26XEot0aR5qMbXvOx/XcaWm 57bMKvblVS+jQCgkdYeYIXbLkuP8HCTxtf3Nt1v3gR5yggV5OeryV9qcA/bYQlE9 39VRH6HLy6UnHF9hCXsRFaB/3Cw+weSW0aUh4FrXMqw2TymMFqmF8FznKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc5oTEpnPrnc4zNSpDDWzt1yMr/MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAzfQXzQ ycOguZTORV9u9oBzUCQnRGS8jD5mkP8aGitEE4Hy3QqNxOvv0WJ71Zdiv5kSb85R NEB66Su6E0TAOK3iQOmdnwr7uHx801qVjGbUmUO8FuEfJ/dNi7AJgr/ClkI79LHI L7dwHCzfzjw95Lwv4uBm+aBozRGDP6zoTRfFZEu8OoJgq1fGypk38UCd+o33Wom3 ZJ1oTWICwKuU3kqiEw+kmW+zNCDjbeYGFenF2uKQ6v7cvlIZZ5g/BaRA4mkmFjde 3boiuytPmRJ6J6vuSgmPrr85g3pr7bPkaEZTBi/sAFXsxKAuvSh/6HXssMYoZFfP pvSKetLPlVWyAg== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:15 2026 by rpki-client