This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft File: 28eECSDRxwn_KZrtNoLCP7Qydn0.mft (raw, json) Hash identifier: HFCaUXsHrM3XECD2pDm2NkjE6LZFZtwvYMpsWKzYuGs= Subject key identifier: DE:20:47:4A:D8:B5:55:74:0E:D9:AF:50:FC:5C:8B:85:50:DA:40:18 Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d Certificate serial: 019BF42C05BB71781532358BA08CF28C74CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft Manifest number: 1435 Signing time: Sun 25 Jan 2026 08:01:24 +0000 Manifest this update: Sun 25 Jan 2026 08:01:24 +0000 Manifest next update: Mon 26 Jan 2026 08:01:24 +0000 Files and hashes: 1: 28eECSDRxwn_KZrtNoLCP7Qydn0.crl (hash: agm4OC7B4DBs7JjTq8V6xO3rBRgYptOzmmlTfiJzWGc=) 2: kqpgzMgdhr3wMyQEV2vtr2Mx3xc.roa (hash: 7vj+pBhw6vHaA4hoqmc9v21Rfqacj7MRpkM3sWCRjSM=) 3: sY3dVSVkXWMzR2tSbC-V9E4Evnw.roa (hash: 1/ojrG0Km94xlnnGfoOR3tAivEqLx9zkSlszKh6hu2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:05:bb:71:78:15:32:35:8b:a0:8c:f2:8c:74:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d Validity Not Before: Jan 25 08:01:24 2026 GMT Not After : Jan 26 08:01:24 2026 GMT Subject: CN=de20474ad8b555740ed9af50fc5c8b8550da4018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:a3:73:2e:61:ec:1d:96:68:bf:fd:18:45: 03:9f:d0:75:55:98:3f:6b:ff:61:5d:cb:54:72:3b: 17:25:32:92:a9:ef:02:2b:1a:10:c3:25:e1:8b:ce: 28:9d:d7:35:27:2a:29:94:a6:42:7a:40:13:87:ff: 8e:a6:8a:ac:11:9c:6d:d8:a8:d8:51:57:a0:e8:7d: 91:63:5c:14:4f:21:09:ee:28:52:28:a1:7f:e5:29: da:df:32:f6:61:99:ab:dd:1d:dc:a2:b1:d4:8a:22: dd:0a:ee:d1:68:53:6a:3f:7d:5d:e2:c3:50:9e:cf: 63:a8:ff:43:4f:3f:41:c2:af:9d:a2:68:6d:11:cf: 1b:99:05:73:74:d8:e9:1e:b6:a5:53:d9:a5:7a:fe: 3f:d0:7c:97:9e:6f:8b:1c:81:bc:83:6a:14:9f:ff: a0:b0:6c:08:94:ed:79:f8:11:d1:cf:a7:ea:c5:52: e2:1b:5a:e7:8b:19:8b:1d:e8:e1:da:46:b7:8b:a9: 51:d3:50:6b:e6:c4:2f:7f:b1:d4:96:c6:13:9b:16: 4a:ef:62:14:cd:eb:f2:eb:b9:e1:f5:8a:be:9e:fa: 36:d7:92:10:52:a6:6e:34:88:a2:85:c8:a0:c1:44: 7f:de:84:9e:a1:38:66:13:7f:c1:1d:fd:30:18:8b: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:20:47:4A:D8:B5:55:74:0E:D9:AF:50:FC:5C:8B:85:50:DA:40:18 X509v3 Authority Key Identifier: keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6c:55:c2:2c:3d:2e:ed:84:8d:ec:38:bd:ee:03:1e:6d:6c: 52:de:85:9c:39:9b:41:ea:26:83:bc:0f:a1:77:67:1c:5b:ff: 06:06:d9:44:9a:a2:2e:a3:3c:1f:fd:c6:cf:08:f4:fa:a4:0a: 2e:23:8f:de:c2:7d:f6:f1:0c:2e:02:25:49:e1:36:e6:1d:34: 7a:85:9e:14:c1:e2:d9:48:5f:b7:28:65:ab:79:a6:b9:a0:35: 6b:d2:fa:0a:e0:29:c7:8a:b0:f8:d4:5e:e1:5c:53:7a:b4:64: fd:2c:6f:bb:3c:f1:cc:07:2c:25:25:99:19:17:38:e3:d9:12: 6d:f4:36:90:b6:69:a2:2e:03:c9:ed:0f:84:cc:e5:1c:53:94: e2:e0:b0:6f:17:a6:77:8c:22:55:77:31:96:9f:75:ef:3f:7c: a1:09:93:7c:c9:db:e2:60:5f:53:ba:24:ca:65:80:7d:61:ea: 26:ba:b7:39:a4:02:09:4a:8e:f9:a0:ef:e4:3a:de:8e:04:b8: 18:7a:54:56:26:80:1d:03:64:87:fc:a9:e8:d0:7d:ce:2c:6a: 24:5c:7a:dc:89:90:2c:4c:fe:8c:9f:94:34:ae:87:5a:69:92: 99:4d:5d:b8:1f:b2:b0:f7:2a:7c:dc:f9:f1:32:b9:bb:28:a9: b4:88:8b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LAW7cXgVMjWLoIzyjHTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzc4NDA5MjBkMWM3MDlmZjI5OWFlZDM2ODJjMjNmYjQz Mjc2N2QwHhcNMjYwMTI1MDgwMTI0WhcNMjYwMTI2MDgwMTI0WjAzMTEwLwYDVQQD EyhkZTIwNDc0YWQ4YjU1NTc0MGVkOWFmNTBmYzVjOGI4NTUwZGE0MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfujcy5h7B2WaL/9GEUDn9B1VZg/ a/9hXctUcjsXJTKSqe8CKxoQwyXhi84ondc1JyoplKZCekATh/+OpoqsEZxt2KjY UVeg6H2RY1wUTyEJ7ihSKKF/5Sna3zL2YZmr3R3corHUiiLdCu7RaFNqP31d4sNQ ns9jqP9DTz9Bwq+domhtEc8bmQVzdNjpHralU9mlev4/0HyXnm+LHIG8g2oUn/+g sGwIlO15+BHRz6fqxVLiG1rnixmLHejh2ka3i6lR01Br5sQvf7HUlsYTmxZK72IU zevy67nh9Yq+nvo215IQUqZuNIiihcigwUR/3oSeoThmE3/BHf0wGIu6iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4gR0rYtVV0DtmvUPxci4VQ2kAYMB8GA1UdIwQY MBaAFNvHhAkg0ccJ/yma7TaCwj+0MnZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMt NTFiZTJmOTYwOGJjLzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85NTIxZTEtNzYxMC00ZDQzLTg2ODMtNTFiZTJmOTYwOGJj LzEvMjhlRUNTRFJ4d25fS1pydE5vTENQN1F5ZG4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2xVwiw9 Lu2Ejew4ve4DHm1sUt6FnDmbQeomg7wPoXdnHFv/BgbZRJqiLqM8H/3Gzwj0+qQK LiOP3sJ99vEMLgIlSeE25h00eoWeFMHi2Uhftyhlq3mmuaA1a9L6CuApx4qw+NRe 4VxTerRk/SxvuzzxzAcsJSWZGRc449kSbfQ2kLZpoi4Dye0PhMzlHFOU4uCwbxem d4wiVXcxlp917z98oQmTfMnb4mBfU7okymWAfWHqJrq3OaQCCUqO+aDv5DrejgS4 GHpUViaAHQNkh/yp6NB9zixqJFx63ImQLEz+jJ+UNK6HWmmSmU1duB+ysPcqfNz5 8TK5uyiptIiLTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:33 2026 by rpki-client