This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json) Hash identifier: +fFR0P2m7z+npMh5TIuOe/2aK2sby317Gf193LRMU0w= Subject key identifier: E0:83:71:B6:20:73:2F:C1:0B:A0:74:5C:DE:43:AA:D4:F0:35:53:50 Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80 Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80 Certificate serial: 019C1C4BE103765FF600EB33E654517CA247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft Manifest number: 17FD Signing time: Mon 02 Feb 2026 03:01:00 +0000 Manifest this update: Mon 02 Feb 2026 03:01:00 +0000 Manifest next update: Tue 03 Feb 2026 03:01:00 +0000 Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: 0VSh8mmyg7goUJAkyIRznMmLGzBLoWyjqE6csZqa71M=) 2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4b:e1:03:76:5f:f6:00:eb:33:e6:54:51:7c:a2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80 Validity Not Before: Feb 2 03:01:00 2026 GMT Not After : Feb 3 03:01:00 2026 GMT Subject: CN=e08371b620732fc10ba0745cde43aad4f0355350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e4:14:d9:82:28:eb:92:f9:bf:52:1f:63:90: 34:82:5f:d2:78:23:d5:63:34:91:bc:48:6c:5e:10: c7:d6:77:d2:45:35:2f:19:98:d7:ef:e0:a1:0d:5e: cf:9a:72:7e:09:d0:97:f7:29:12:88:88:8f:a9:d7: f7:cd:f1:7d:87:f2:5e:4f:e0:fe:13:92:d6:93:4a: d3:5b:bd:60:bd:21:61:e1:b1:2e:ca:94:37:74:14: 50:56:70:7f:c7:63:a9:ff:7c:07:92:92:e6:c6:bc: 76:97:04:1b:7b:c7:49:db:c0:ec:36:31:5f:ac:92: e9:0c:3a:be:23:d5:1b:b6:20:9b:2e:52:de:63:fe: d1:53:0f:33:1b:b4:f1:26:93:2d:10:b9:eb:4c:63: a8:09:01:12:41:df:9f:63:8c:a4:99:69:50:f4:eb: b7:45:7b:be:d7:fd:18:2f:28:32:c9:da:a7:c0:b4: 8c:83:6d:31:e7:4a:b0:3a:df:21:ba:20:32:d3:57: de:b6:9d:a4:b4:66:81:63:13:b4:e8:4a:72:db:4c: 39:66:67:7c:aa:58:fc:11:b0:17:be:bf:6f:c8:fd: c9:6c:c2:da:b6:8b:45:a6:1e:7a:22:02:58:60:28: 99:31:6a:5f:23:aa:d4:a5:7a:92:da:e3:25:db:4d: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:83:71:B6:20:73:2F:C1:0B:A0:74:5C:DE:43:AA:D4:F0:35:53:50 X509v3 Authority Key Identifier: keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:44:f2:e9:dc:ba:2f:a2:25:48:1e:61:5b:c9:69:e0:24:3c: 3c:ef:15:c0:2f:d6:d6:69:27:86:36:2b:d6:d0:89:e8:db:cc: 4c:ea:d7:68:e4:19:6c:e9:18:d7:02:47:ac:c5:30:37:6e:6a: ea:93:15:e3:b2:f9:79:ef:c9:1c:5f:63:81:66:e2:48:a4:a9: 8d:f8:a5:93:d1:e8:6f:d1:b8:cd:12:ae:19:54:49:8c:12:0d: 45:b4:cd:9c:57:f7:85:17:d4:a5:4f:ff:06:b0:f1:7c:43:da: 53:ca:5e:dd:1a:fb:a5:80:63:ca:06:d7:0a:98:a6:75:bc:24: d4:4d:0a:90:83:82:39:5b:12:22:ee:9f:99:a3:59:f9:6b:dd: e1:5a:52:d6:4b:73:29:a2:8a:0c:65:05:d5:09:36:f4:7d:08: d4:46:7c:4f:35:02:03:1a:d2:8f:e8:bf:30:52:db:54:a9:9c: 35:17:fc:7a:65:7d:f1:85:01:5d:e3:86:52:d9:3c:f6:c6:ff: 6c:d1:9a:2b:b0:ac:91:64:a3:16:94:6c:f2:a9:91:5a:04:6d: 40:d7:1d:38:ba:3a:92:c5:a3:d6:6a:ac:87:25:0f:88:26:cc: ab:67:2e:cc:d4:c9:c1:ff:7c:4e:40:f7:03:57:3f:59:70:50: d5:58:77:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcS+EDdl/2AOsz5lRRfKJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2FjYWFmOGFjMTNhOTY0YWIzZDQ2MTkzNTg0MWM4ZTFj OTNiODAwHhcNMjYwMjAyMDMwMTAwWhcNMjYwMjAzMDMwMTAwWjAzMTEwLwYDVQQD EyhlMDgzNzFiNjIwNzMyZmMxMGJhMDc0NWNkZTQzYWFkNGYwMzU1MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OQU2YIo65L5v1IfY5A0gl/SeCPV YzSRvEhsXhDH1nfSRTUvGZjX7+ChDV7PmnJ+CdCX9ykSiIiPqdf3zfF9h/JeT+D+ E5LWk0rTW71gvSFh4bEuypQ3dBRQVnB/x2Op/3wHkpLmxrx2lwQbe8dJ28DsNjFf rJLpDDq+I9UbtiCbLlLeY/7RUw8zG7TxJpMtELnrTGOoCQESQd+fY4ykmWlQ9Ou3 RXu+1/0YLygyydqnwLSMg20x50qwOt8huiAy01fetp2ktGaBYxO06Epy20w5Zmd8 qlj8EbAXvr9vyP3JbMLatotFph56IgJYYCiZMWpfI6rUpXqS2uMl202UFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCDcbYgcy/BC6B0XN5DqtTwNVNQMB8GA1UdIwQY MBaAFNvKyq+KwTqWSrPUYZNYQcjhyTuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQt NWU2NWM3ZDYxYjllLzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81NzM3YjAtYmIyNC00ZTkyLWIxOWQtNWU2NWM3ZDYxYjll LzEvMjhyS3I0ckJPcFpLczlSaGsxaEJ5T0hKTzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkTy6dy6 L6IlSB5hW8lp4CQ8PO8VwC/W1mknhjYr1tCJ6NvMTOrXaOQZbOkY1wJHrMUwN25q 6pMV47L5ee/JHF9jgWbiSKSpjfilk9Hob9G4zRKuGVRJjBINRbTNnFf3hRfUpU// BrDxfEPaU8pe3Rr7pYBjygbXCpimdbwk1E0KkIOCOVsSIu6fmaNZ+Wvd4VpS1ktz KaKKDGUF1Qk29H0I1EZ8TzUCAxrSj+i/MFLbVKmcNRf8emV98YUBXeOGUtk89sb/ bNGaK7CskWSjFpRs8qmRWgRtQNcdOLo6ksWj1mqshyUPiCbMq2cuzNTJwf98TkD3 A1c/WXBQ1Vh3rQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:29:08 2026 by rpki-client