This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft File: 28wruvPg1DQqAU-LcPhzzumoysU.mft (raw, json) Hash identifier: QkiHaUylXTFJCenUTjStwofyMNYKzolMXj3DW0CMl+M= Subject key identifier: A1:D6:42:0D:98:EE:BA:7B:0D:2F:93:96:87:33:7E:98:1C:FF:1A:82 Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Certificate serial: 019C42EB86E2E3C84BB11C5ED5B43087DF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:57 +0000 Manifest this update: Mon 09 Feb 2026 15:00:57 +0000 Manifest next update: Tue 10 Feb 2026 15:00:57 +0000 Files and hashes: 1: 28wruvPg1DQqAU-LcPhzzumoysU.crl (hash: 4wYETl/I8LpzY7gpeSO7GdWkfYpE/7opKV22h7RxJwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:86:e2:e3:c8:4b:b1:1c:5e:d5:b4:30:87:df:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5 Validity Not Before: Feb 9 15:00:57 2026 GMT Not After : Feb 10 15:00:57 2026 GMT Subject: CN=a1d6420d98eeba7b0d2f939687337e981cff1a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:19:47:ea:77:d0:ae:5c:4c:30:53:80:b0: 0f:28:c0:2e:3f:8c:f1:53:70:34:16:de:63:d8:ee: 23:6b:06:58:39:a5:ca:fc:af:85:42:65:70:d2:d6: b7:53:f6:11:e9:ec:21:a6:60:38:ea:4e:49:43:81: 19:53:19:bc:5d:b7:cf:96:04:56:03:54:71:05:c2: bb:bb:54:1e:47:46:8e:9c:fe:c7:49:48:27:44:e0: 56:bf:8f:ea:8c:33:e5:ad:37:2a:61:fa:d3:a7:49: f1:bf:03:3a:ab:bc:c0:58:91:57:92:99:48:10:88: 68:d6:5e:b9:6a:3f:33:4e:7f:c9:ce:11:3b:f9:20: e9:6e:18:2c:22:b5:ee:5e:fc:55:26:61:ce:f9:45: 86:70:fb:bd:d8:0c:fa:53:bb:99:86:6d:8f:d5:f9: 1d:23:99:49:f6:b8:28:87:59:ec:0a:1a:fb:47:a6: dc:d1:04:e0:42:77:19:5b:90:92:0d:77:ee:eb:3e: 2c:c4:73:88:a4:d1:79:83:6f:a8:aa:4b:40:fc:ca: 41:28:19:d2:fb:57:3e:0b:35:45:90:9d:97:3e:78: 32:58:d4:3c:b9:80:39:f8:da:d5:cb:1c:90:1e:d4: 2d:e4:e3:9c:a2:74:ce:05:2d:ce:94:f5:53:85:fb: 42:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:42:0D:98:EE:BA:7B:0D:2F:93:96:87:33:7E:98:1C:FF:1A:82 X509v3 Authority Key Identifier: keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:1f:2e:e2:37:49:6c:87:a5:a1:49:c9:a4:f2:30:c3:cc:5f: f0:56:97:f0:7b:06:60:c2:d8:3e:15:bf:40:f4:1c:69:5a:d1: a9:0b:f1:c4:97:d9:12:46:48:89:dd:55:5c:2d:a1:c4:72:af: 42:8c:6b:37:72:78:8b:18:0d:b6:7b:77:6d:f3:75:50:59:00: 58:71:73:9c:bb:d2:b2:c4:08:77:09:53:bd:4c:a1:e7:fb:c2: f9:db:9e:fb:f9:57:3f:ab:8c:f7:37:e7:14:27:85:e3:8f:aa: ae:6f:de:7a:94:10:08:13:34:f6:e7:9c:97:90:d7:e7:26:2c: ba:93:f8:8f:37:81:57:10:87:a2:47:72:ff:06:8a:20:26:a6: 32:3e:c8:b9:e5:42:72:62:97:80:ff:14:83:cc:ba:c2:95:d3: 48:24:8c:50:bb:e2:b8:93:03:b6:83:e5:8b:d6:67:89:4d:d5: 57:1c:9c:d9:31:21:d7:a8:3e:24:34:cb:2f:84:cc:ff:44:25: 37:0c:f5:09:d6:d6:ef:cd:dd:8f:98:c3:14:75:e8:27:a1:5e: 65:e8:6f:88:27:75:87:24:7f:12:1a:a6:9a:04:db:b6:ed:5a: e2:29:b2:95:83:05:9b:72:ef:96:1b:d4:65:3b:0b:6b:78:23: c6:c5:c5:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64bi48hLsRxe1bQwh99OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh OGNhYzUwHhcNMjYwMjA5MTUwMDU3WhcNMjYwMjEwMTUwMDU3WjAzMTEwLwYDVQQD EyhhMWQ2NDIwZDk4ZWViYTdiMGQyZjkzOTY4NzMzN2U5ODFjZmYxYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/0ZR+p30K5cTDBTgLAPKMAuP4zx U3A0Ft5j2O4jawZYOaXK/K+FQmVw0ta3U/YR6ewhpmA46k5JQ4EZUxm8XbfPlgRW A1RxBcK7u1QeR0aOnP7HSUgnROBWv4/qjDPlrTcqYfrTp0nxvwM6q7zAWJFXkplI EIho1l65aj8zTn/JzhE7+SDpbhgsIrXuXvxVJmHO+UWGcPu92Az6U7uZhm2P1fkd I5lJ9rgoh1nsChr7R6bc0QTgQncZW5CSDXfu6z4sxHOIpNF5g2+oqktA/MpBKBnS +1c+CzVFkJ2XPngyWNQ8uYA5+NrVyxyQHtQt5OOconTOBS3OlPVThftCrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHWQg2Y7rp7DS+Tloczfpgc/xqCMB8GA1UdIwQY MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt ZjRkNWU4NGFjMWRkLzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApx8u4jdJ bIeloUnJpPIww8xf8FaX8HsGYMLYPhW/QPQcaVrRqQvxxJfZEkZIid1VXC2hxHKv QoxrN3J4ixgNtnt3bfN1UFkAWHFznLvSssQIdwlTvUyh5/vC+due+/lXP6uM9zfn FCeF44+qrm/eepQQCBM09uecl5DX5yYsupP4jzeBVxCHokdy/waKICamMj7IueVC cmKXgP8Ug8y6wpXTSCSMULviuJMDtoPli9ZniU3VVxyc2TEh16g+JDTLL4TM/0Ql Nwz1CdbW783dj5jDFHXoJ6FeZehviCd1hyR/EhqmmgTbtu1a4imylYMFm3LvlhvU ZTsLa3gjxsXFkw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:17 2026 by rpki-client