This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft File: 28L_akYQUNSPP9sLUThxVLXWzQ4.mft (raw, json) Hash identifier: gpiFNCjC23QW9ed/qZlPLPRJfkFniA6bLKcO6kfhjIw= Subject key identifier: 19:D8:7B:24:EE:E3:F0:A1:F6:26:74:61:A9:F6:9A:94:26:04:88:B8 Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Certificate serial: 019BFA2DA3A091822DF0EABC632825132B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft Manifest number: 16BE Signing time: Mon 26 Jan 2026 12:00:53 +0000 Manifest this update: Mon 26 Jan 2026 12:00:53 +0000 Manifest next update: Tue 27 Jan 2026 12:00:53 +0000 Files and hashes: 1: 28L_akYQUNSPP9sLUThxVLXWzQ4.crl (hash: YPh3w7WiVt+2MCs5zsOqx6inUUFZMYgvaUThDLZiRig=) 2: iQPX0ayEGzxk6a9oqqUew1HkYlI.roa (hash: w9hIv7rUMK4mch1qlrYdJn+0PwXGsWqZECABhq8al9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:a3:a0:91:82:2d:f0:ea:bc:63:28:25:13:2b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e Validity Not Before: Jan 26 12:00:53 2026 GMT Not After : Jan 27 12:00:53 2026 GMT Subject: CN=19d87b24eee3f0a1f6267461a9f69a94260488b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:3d:47:3b:df:cc:e8:46:10:ec:33:fd:48: 16:05:b8:96:ae:6a:f4:0b:c5:ef:57:88:38:0f:90: e5:4e:19:2f:55:ac:0c:2d:a0:af:74:ea:c1:aa:bc: de:19:bd:e7:70:23:66:f6:2b:a8:6a:a1:be:b3:48: 09:78:13:ef:d6:c6:e8:9b:cb:66:89:82:84:53:ec: 82:df:38:16:15:11:d0:e2:fd:42:a4:c6:cf:7d:1a: 29:34:37:be:81:ac:aa:30:22:39:77:f3:ff:9e:8b: 32:2b:14:31:07:03:b3:e4:ad:60:99:ba:0c:4f:ef: 60:17:7b:57:bb:d2:48:9a:ce:4e:09:fe:44:70:fd: de:d4:96:52:48:cb:a0:72:b9:26:31:9a:49:88:22: 4c:d4:99:9b:09:53:10:f2:c6:a5:24:b5:0c:e4:f4: 50:a2:c2:02:3e:53:6c:30:85:bd:c4:6c:f8:35:11: c0:33:23:d7:66:c5:6f:9b:6f:3c:64:c0:45:de:78: e5:83:08:b9:28:46:4e:7e:bc:20:bc:d5:4c:7c:d3: cd:e6:85:40:e7:57:26:8b:0f:47:c9:ac:5f:52:60: c8:21:0f:11:08:3e:73:d7:9c:ce:7c:90:6e:a5:be: d0:87:8f:aa:02:73:53:26:f3:27:0e:34:6c:25:2d: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:7B:24:EE:E3:F0:A1:F6:26:74:61:A9:F6:9A:94:26:04:88:B8 X509v3 Authority Key Identifier: keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9a:a8:d8:69:a9:8b:93:0d:92:3f:2f:e4:8f:ef:bf:38:eb: 8a:7c:a8:1c:d8:d3:42:ae:34:6a:86:48:36:78:4e:ae:05:4a: 2b:f6:28:33:07:52:75:f4:da:68:91:63:d4:b8:cb:2f:d3:3e: b4:7e:79:3e:79:9b:39:9b:34:d6:77:1f:27:24:94:6c:14:4d: 49:a8:cc:82:6b:38:58:41:6b:7f:ee:0b:4a:ea:95:96:f6:17: ba:2d:0f:0f:ac:bf:09:d6:79:65:ef:50:3b:bb:a2:b7:a2:57: 73:cc:8f:06:02:cd:ae:54:8f:5e:7d:9d:c1:a1:8e:3f:81:99: a4:49:97:1d:49:66:23:43:66:eb:d9:2f:bb:54:20:c9:32:cc: f7:16:4b:0a:ae:ad:8b:7c:e0:46:19:22:18:2d:0b:01:39:df: a1:cc:4c:7c:20:14:0e:4a:5c:b5:5c:26:e4:4c:fd:ac:1d:4e: 7e:aa:ba:6d:ff:ae:32:92:e5:97:89:a6:28:af:8a:ee:81:5a: e4:23:64:5e:04:d6:4b:02:77:82:0c:41:1f:a3:b9:2a:be:d3: d5:10:9e:3e:f1:da:ee:98:6e:ad:79:13:d3:32:d2:11:78:bb: 1a:51:b4:f5:44:11:e1:47:75:27:1e:18:ad:7d:5d:ab:1a:8b: bb:07:55:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LaOgkYIt8Oq8YyglEythMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzJmZjZhNDYxMDUwZDQ4ZjNmZGIwYjUxMzg3MTU0YjVk NmNkMGUwHhcNMjYwMTI2MTIwMDUzWhcNMjYwMTI3MTIwMDUzWjAzMTEwLwYDVQQD EygxOWQ4N2IyNGVlZTNmMGExZjYyNjc0NjFhOWY2OWE5NDI2MDQ4OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBk9RzvfzOhGEOwz/UgWBbiWrmr0 C8XvV4g4D5DlThkvVawMLaCvdOrBqrzeGb3ncCNm9iuoaqG+s0gJeBPv1sbom8tm iYKEU+yC3zgWFRHQ4v1CpMbPfRopNDe+gayqMCI5d/P/nosyKxQxBwOz5K1gmboM T+9gF3tXu9JIms5OCf5EcP3e1JZSSMugcrkmMZpJiCJM1JmbCVMQ8salJLUM5PRQ osICPlNsMIW9xGz4NRHAMyPXZsVvm288ZMBF3njlgwi5KEZOfrwgvNVMfNPN5oVA 51cmiw9HyaxfUmDIIQ8RCD5z15zOfJBupb7Qh4+qAnNTJvMnDjRsJS2IUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnYeyTu4/Ch9iZ0Yan2mpQmBIi4MB8GA1UdIwQY MBaAFNvC/2pGEFDUjz/bC1E4cVS11s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt OWNjY2I3ZWYzYjViLzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi LzEvMjhMX2FrWVFVTlNQUDlzTFVUaHhWTFhXelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJqo2Gmp i5MNkj8v5I/vvzjrinyoHNjTQq40aoZINnhOrgVKK/YoMwdSdfTaaJFj1LjLL9M+ tH55PnmbOZs01ncfJySUbBRNSajMgms4WEFrf+4LSuqVlvYXui0PD6y/CdZ5Ze9Q O7uit6JXc8yPBgLNrlSPXn2dwaGOP4GZpEmXHUlmI0Nm69kvu1QgyTLM9xZLCq6t i3zgRhkiGC0LATnfocxMfCAUDkpctVwm5Ez9rB1Ofqq6bf+uMpLll4mmKK+K7oFa 5CNkXgTWSwJ3ggxBH6O5Kr7T1RCePvHa7phurXkT0zLSEXi7GlG09UQR4Ud1Jx4Y rX1dqxqLuwdVIw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:38:45 2026 by rpki-client