This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json) Hash identifier: YIQ3QLyMlO3CAfavhpcnBj0RbcmwoCiqg/zHCtZ7HbE= Subject key identifier: 2F:63:B1:44:ED:BF:4F:72:20:E6:38:E6:9B:5A:A6:51:14:8E:60:32 Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Certificate serial: 019C446BEBDE49B1C6217AECDFDA36488266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft Manifest number: 11A7 Signing time: Mon 09 Feb 2026 22:00:49 +0000 Manifest this update: Mon 09 Feb 2026 22:00:49 +0000 Manifest next update: Tue 10 Feb 2026 22:00:49 +0000 Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: UsjcXaMz6SHgqJtgvF5rHocWf27SuT/lUKHUBknf7C0=) 2: MZXVTiNksKGTLq9u4L9cUwgb3IA.roa (hash: 2+1QbFKQ4zkEeb7PjYF9N7gyfg92zYXucG3hxOSuoJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:eb:de:49:b1:c6:21:7a:ec:df:da:36:48:82:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c Validity Not Before: Feb 9 22:00:49 2026 GMT Not After : Feb 10 22:00:49 2026 GMT Subject: CN=2f63b144edbf4f7220e638e69b5aa651148e6032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:ba:6c:ce:a9:8b:df:86:41:54:b3:f8:a4: f8:2e:93:04:86:af:62:bc:ec:dc:9a:c9:f5:75:4d: 57:d9:f7:5e:e8:c8:c1:02:4e:7c:9c:89:7a:e6:ec: 4c:74:cf:63:80:85:72:b7:56:6e:91:87:01:66:8b: 7b:45:3e:f5:85:c1:4b:dc:7e:ce:7f:d2:30:2d:91: ca:b0:6c:3b:ef:ea:12:0d:dc:a5:b1:c3:7c:40:fa: ea:6f:88:e1:c4:af:4a:21:48:76:47:ae:14:53:bf: c1:95:7c:63:bc:bb:d0:37:1f:2f:e3:c5:10:00:3d: e3:c7:4f:f6:db:2a:9f:32:08:ee:4a:fd:48:7c:2b: 37:61:8b:81:e3:16:4d:e4:ba:1c:3d:5e:27:c9:39: 24:0d:03:fb:6b:6f:70:0e:9c:01:0a:61:85:d7:68: 35:41:5e:12:b7:0b:37:fb:f9:42:74:a8:c6:0b:15: 8f:0b:96:9c:45:7c:83:ca:e5:8d:fd:80:aa:f0:1b: a8:b7:e1:3d:5a:35:51:eb:eb:31:0b:ba:f4:19:e2: 95:58:bd:57:98:e6:94:94:a6:85:27:cb:0c:3c:72: 4b:f1:62:70:23:6c:81:af:e0:12:6d:fb:23:56:10: a2:17:47:e8:85:68:ea:26:44:34:d5:62:b0:d9:11: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:63:B1:44:ED:BF:4F:72:20:E6:38:E6:9B:5A:A6:51:14:8E:60:32 X509v3 Authority Key Identifier: keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4c:74:f3:56:95:36:70:48:d3:3c:4a:95:8d:bc:db:86:5b: 73:ab:e5:7a:ae:a9:cc:6b:dc:4e:90:45:e0:1b:c5:1b:43:ad: aa:a8:4a:61:cf:ea:62:06:91:b5:a6:4e:9b:cd:f3:2f:a1:df: 18:cd:58:1e:57:20:2f:8d:c9:ee:fe:14:6f:80:70:4b:e5:8d: 2b:2a:e5:e2:17:52:a1:4b:1d:74:b1:a9:2d:03:e3:c7:cc:c1: 2c:76:d6:a9:d5:eb:e7:ed:42:07:7b:74:6e:28:b9:fa:a7:5e: b2:61:46:63:5a:20:b8:c9:b0:6b:ff:5f:c0:84:37:11:49:17: 95:b5:87:82:85:fc:cf:b6:b4:d7:af:b5:23:85:7e:9c:d7:e9: d3:d5:23:39:4a:8a:fe:03:a9:16:d0:ef:ce:4a:ca:ed:ba:75: d5:39:ca:8b:20:d4:9c:34:71:65:8d:d6:6b:5a:bd:52:0c:23: 57:6b:66:1c:12:0d:86:85:72:ee:82:0a:e0:39:ad:82:e1:ea: f2:85:59:4c:a9:5f:ad:88:f1:85:21:22:82:5b:bc:5c:df:03: 80:13:dd:d7:2a:16:67:b7:1f:f9:92:c9:ed:a3:54:73:4b:d0: 08:04:0f:9b:97:d4:33:8b:cf:10:44:4d:0d:b2:0e:73:3c:d5: 57:5f:3c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa+veSbHGIXrs39o2SIJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2IxY2YzZDNmM2NkYzM0MjZmYjQ5ZjBhMGMzM2RjMDRj ODY4MWMwHhcNMjYwMjA5MjIwMDQ5WhcNMjYwMjEwMjIwMDQ5WjAzMTEwLwYDVQQD EygyZjYzYjE0NGVkYmY0ZjcyMjBlNjM4ZTY5YjVhYTY1MTE0OGU2MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzem6bM6pi9+GQVSz+KT4LpMEhq9i vOzcmsn1dU1X2fde6MjBAk58nIl65uxMdM9jgIVyt1ZukYcBZot7RT71hcFL3H7O f9IwLZHKsGw77+oSDdylscN8QPrqb4jhxK9KIUh2R64UU7/BlXxjvLvQNx8v48UQ AD3jx0/22yqfMgjuSv1IfCs3YYuB4xZN5LocPV4nyTkkDQP7a29wDpwBCmGF12g1 QV4Stws3+/lCdKjGCxWPC5acRXyDyuWN/YCq8Buot+E9WjVR6+sxC7r0GeKVWL1X mOaUlKaFJ8sMPHJL8WJwI2yBr+ASbfsjVhCiF0fohWjqJkQ01WKw2RFLkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9jsUTtv09yIOY45ptaplEUjmAyMB8GA1UdIwQY MBaAFNvLHPPT883DQm+0nwoMM9wEyGgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0Mjgt NzM2NjliYTYzZjdjLzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9hNDA4ZmItNWM4MC00ZGNhLTg0MjgtNzM2NjliYTYzZjdj LzEvMjhzYzg5UHp6Y05DYjdTZkNnd3ozQVRJYUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekx081aV NnBI0zxKlY2824Zbc6vleq6pzGvcTpBF4BvFG0OtqqhKYc/qYgaRtaZOm83zL6Hf GM1YHlcgL43J7v4Ub4BwS+WNKyrl4hdSoUsddLGpLQPjx8zBLHbWqdXr5+1CB3t0 bii5+qdesmFGY1oguMmwa/9fwIQ3EUkXlbWHgoX8z7a016+1I4V+nNfp09UjOUqK /gOpFtDvzkrK7bp11TnKiyDUnDRxZY3Wa1q9UgwjV2tmHBINhoVy7oIK4DmtguHq 8oVZTKlfrYjxhSEiglu8XN8DgBPd1yoWZ7cf+ZLJ7aNUc0vQCAQPm5fUM4vPEERN DbIOczzVV1889Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:44 2026 by rpki-client