This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier: 0T1NabPF/qIaIB1fOAy74U9EdsPI1dKl3PddsAnkiM4=
Subject key identifier: 15:AD:B3:B5:97:1C:89:CE:7E:98:65:E7:FD:1A:ED:8A:04:74:53:2F
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 019BF6BF378D080B29C6013BFB83CCAAEFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number: 17F0
Signing time: Sun 25 Jan 2026 20:01:25 +0000
Manifest this update: Sun 25 Jan 2026 20:01:25 +0000
Manifest next update: Mon 26 Jan 2026 20:01:25 +0000
Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=)
2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=)
3: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: xpI7yd/qKzmS7EEgyiQQ8JwEkUXVYgLePWphwDX40zE=)
4: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=)
5: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=)
6: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=)
7: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:37:8d:08:0b:29:c6:01:3b:fb:83:cc:aa:ef:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 25 20:01:25 2026 GMT
Not After : Jan 26 20:01:25 2026 GMT
Subject: CN=15adb3b5971c89ce7e9865e7fd1aed8a0474532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:96:11:59:82:a2:52:1e:1b:75:f0:f7:6d:
42:e3:6b:fa:06:8f:50:e2:3b:00:f6:fc:02:e4:84:
52:92:90:64:f8:87:7e:44:81:ce:c0:64:aa:a5:07:
2d:49:41:e9:41:b0:66:b6:ed:52:c2:27:14:f9:6e:
9f:58:a2:36:d5:d0:2d:e4:71:da:16:8e:9f:95:d5:
21:4d:ff:72:d1:2f:1c:af:af:24:b9:fa:0a:55:c7:
af:38:9f:40:cb:7f:3c:5e:89:a1:81:5c:4f:15:2f:
4d:c8:01:5a:65:e2:ed:3f:bd:be:98:8c:a1:d8:76:
f9:38:7e:78:5a:77:aa:40:01:99:9a:f3:68:02:03:
79:99:19:c5:49:d3:c9:a5:5d:95:f8:aa:94:6f:97:
f4:2c:4d:1f:b1:9b:15:e0:e6:ef:77:15:dc:ef:06:
2a:d4:e9:21:18:d3:f5:7a:2f:ab:68:f4:0c:f8:30:
5e:45:6e:9e:b6:1f:de:5a:46:e4:3f:d9:a3:4a:b7:
3b:3d:a0:69:b8:af:97:c0:57:c9:88:66:fa:ed:ec:
f5:0e:92:1c:ce:1c:23:93:e5:78:05:57:72:67:2a:
ed:ff:cb:30:bd:c1:45:64:a3:e0:c0:d3:ac:8a:96:
37:85:6c:81:80:19:0f:35:f8:82:76:a4:10:2d:b4:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:B3:B5:97:1C:89:CE:7E:98:65:E7:FD:1A:ED:8A:04:74:53:2F
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:01:b5:94:1c:73:eb:16:79:79:01:67:5b:6e:54:40:4e:
e3:78:9d:5d:6d:24:33:ac:7a:bd:85:a3:0d:0a:21:41:33:78:
53:ef:4f:e0:6b:46:bf:3a:99:44:73:45:62:8d:94:94:42:9b:
67:04:82:b2:76:05:60:f9:a8:cd:cb:87:ff:53:09:85:bd:88:
15:29:be:0e:f4:99:2f:70:fb:be:47:42:3c:b9:14:12:18:19:
f5:6d:19:b5:bd:81:9e:63:b1:a0:bf:bd:66:7a:b6:e2:7f:0e:
ed:5c:30:03:0b:e8:33:db:ec:bd:38:f0:2f:6f:fd:22:59:21:
6d:ab:d8:e2:30:9e:f6:33:eb:54:ef:74:49:d6:c6:71:22:a0:
f2:0a:42:ad:ed:67:61:48:82:c4:bd:87:f4:e7:f9:99:ab:92:
9f:b7:ff:53:58:0b:66:39:3d:b5:0a:df:56:12:d8:06:19:cc:
3e:dd:0b:5c:ff:7d:e8:19:66:50:1f:33:87:7d:6e:e0:b2:08:
c4:33:a4:84:9a:01:af:98:51:be:a7:f6:65:56:4c:31:20:f6:
79:f0:db:a1:18:15:12:f6:09:ec:f7:72:1a:ad:c3:78:1e:8e:
ec:6b:a5:77:f3:52:71:bb:0d:fd:61:9e:7c:ee:60:7a:35:e7:
76:63:f4:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vzeNCAspxgE7+4PMqu/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm
YjYzMmYwHhcNMjYwMTI1MjAwMTI1WhcNMjYwMTI2MjAwMTI1WjAzMTEwLwYDVQQD
EygxNWFkYjNiNTk3MWM4OWNlN2U5ODY1ZTdmZDFhZWQ4YTA0NzQ1MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumCWEVmColIeG3Xw921C42v6Bo9Q
4jsA9vwC5IRSkpBk+Id+RIHOwGSqpQctSUHpQbBmtu1SwicU+W6fWKI21dAt5HHa
Fo6fldUhTf9y0S8cr68kufoKVcevOJ9Ay388XomhgVxPFS9NyAFaZeLtP72+mIyh
2Hb5OH54WneqQAGZmvNoAgN5mRnFSdPJpV2V+KqUb5f0LE0fsZsV4ObvdxXc7wYq
1OkhGNP1ei+raPQM+DBeRW6eth/eWkbkP9mjSrc7PaBpuK+XwFfJiGb67ez1DpIc
zhwjk+V4BVdyZyrt/8swvcFFZKPgwNOsipY3hWyBgBkPNfiCdqQQLbRe9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWts7WXHInOfphl5/0a7YoEdFMvMB8GA1UdIwQY
MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt
MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl
LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU34BtZQc
c+sWeXkBZ1tuVEBO43idXW0kM6x6vYWjDQohQTN4U+9P4GtGvzqZRHNFYo2UlEKb
ZwSCsnYFYPmozcuH/1MJhb2IFSm+DvSZL3D7vkdCPLkUEhgZ9W0Ztb2BnmOxoL+9
Znq24n8O7VwwAwvoM9vsvTjwL2/9IlkhbavY4jCe9jPrVO90SdbGcSKg8gpCre1n
YUiCxL2H9Of5mauSn7f/U1gLZjk9tQrfVhLYBhnMPt0LXP996BlmUB8zh31u4LII
xDOkhJoBr5hRvqf2ZVZMMSD2efDboRgVEvYJ7PdyGq3DeB6O7Guld/NScbsN/WGe
fO5gejXndmP0vA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:12 2026 by rpki-client