This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft File: 28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json) Hash identifier: UcYjqtxswGiAoP5a253SnO/e9VOxx0p0e6M9jeLDy58= Subject key identifier: 46:52:37:59:C5:46:84:3C:C5:D2:0A:55:2D:BD:B3:F2:96:D0:48:EE Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Certificate serial: 019BF46349D8FED0859F1EC17C0829339F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft Manifest number: 17D3 Signing time: Sun 25 Jan 2026 09:01:46 +0000 Manifest this update: Sun 25 Jan 2026 09:01:46 +0000 Manifest next update: Mon 26 Jan 2026 09:01:46 +0000 Files and hashes: 1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: JogohZMDzQ0rWNprldZ8zvV/ZyerUP8EVLCXEOKB6lg=) 2: DP7T_q2dH40UAoEeaOyilRTarIc.roa (hash: eI6A0wd8tTUmEmNVJN3J+AgyOo9pOZ6DcargfGd5ggE=) 3: sxE81xLDEQT0P-TPsy-WofGvQHg.roa (hash: DGA+4dzkewtJxSyfNRDqxt+xT7jcUam8PPEoRnh0nXE=) 4: zkEx11XO93N85vwrTCOs3PDbZd0.roa (hash: Qdd6ijsBLwMFkDU5X4d6hXWxnnXx+SCnTnhqOiOzcAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:49:d8:fe:d0:85:9f:1e:c1:7c:08:29:33:9f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333 Validity Not Before: Jan 25 09:01:46 2026 GMT Not After : Jan 26 09:01:46 2026 GMT Subject: CN=46523759c546843cc5d20a552dbdb3f296d048ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:86:3d:25:7d:df:c7:c3:e8:d1:3b:13:65: ae:50:ed:45:0d:85:e0:ef:e7:90:aa:eb:e2:a2:0a: 93:64:da:3d:8a:df:52:f2:51:a3:fe:d9:30:bd:be: 5f:9b:b0:1d:d1:8a:21:4c:7a:bc:34:69:3d:12:a8: 10:a9:24:18:28:06:c2:0d:ac:54:b4:d7:d2:af:d1: e2:8a:3f:6b:84:8d:af:d5:e5:b9:9f:98:f6:2f:f4: 3c:66:48:aa:23:d8:e5:94:fc:96:14:89:d2:fe:7d: 5d:cd:11:ce:e9:99:3c:d1:0a:1b:34:51:a7:fe:49: 9c:c4:73:05:5e:6f:ac:15:f2:1c:41:fc:d4:c8:a6: 1e:9d:30:81:46:82:68:46:96:cd:e8:13:39:cc:73: 34:b8:1c:5d:99:15:30:4f:c8:1c:5c:8e:8d:8d:ae: a3:f0:e6:47:c4:df:fa:72:6e:49:d4:45:5a:b6:97: eb:3f:6b:3f:36:1a:13:46:b1:7a:60:6b:ee:fd:4a: 8c:91:64:b1:48:43:26:10:4a:fb:a5:cf:6b:27:ad: c2:b0:bd:23:a6:1f:e9:b4:5c:65:22:2e:55:a5:5b: 00:83:d3:51:27:d1:41:2f:4b:17:2f:24:76:94:c3: fb:fe:dd:75:69:94:0e:ca:d9:62:ee:07:7a:85:53: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:52:37:59:C5:46:84:3C:C5:D2:0A:55:2D:BD:B3:F2:96:D0:48:EE X509v3 Authority Key Identifier: keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:82:50:9d:89:2c:61:15:2d:32:53:69:07:5a:91:2e:ed:32: 27:79:15:ee:11:85:20:f3:e7:d6:87:9a:60:17:7c:80:63:76: e9:8a:ac:4c:1f:ff:9d:29:84:05:31:e5:13:b8:e6:09:13:25: b4:e0:8e:c9:18:61:3e:24:1f:54:b6:99:60:ea:48:5b:a6:3b: 7a:3a:c6:da:1f:27:ab:b0:78:01:b4:37:8b:16:3e:dc:28:61: 24:e0:a0:4b:8d:6a:82:25:98:96:4d:eb:44:b9:c6:cf:02:c8: d2:9f:f0:ac:67:af:b4:3f:d2:cd:28:cf:28:9f:b6:7d:f1:53: 13:90:5c:34:0f:9c:83:40:25:d1:28:e5:8b:6f:83:3c:11:34: 97:6f:f9:a4:98:e9:d6:8c:a6:0c:25:58:0a:a6:03:c4:68:bc: 23:31:10:cc:78:61:6f:b9:6b:2b:ac:b1:92:d8:14:1c:b2:b6: cd:09:99:38:e1:17:1d:37:a9:a2:63:84:eb:ab:f7:15:9f:b5: 23:9a:12:70:09:81:6a:a5:d8:fe:5e:a2:21:29:f1:c2:16:5c: 13:e6:d0:16:30:59:5e:3b:48:68:f7:f5:1c:50:96:f2:f2:29: 7a:41:6e:c1:ea:1a:8f:f4:95:27:07:22:5f:66:bb:31:9a:d4: 9e:79:0d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Y0nY/tCFnx7BfAgpM58vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYzE0NGNlMTU0ZWVlOWRiYjM1NjJjZTRjZDMyMjgzMzg2 NDEzMzMwHhcNMjYwMTI1MDkwMTQ2WhcNMjYwMTI2MDkwMTQ2WjAzMTEwLwYDVQQD Eyg0NjUyMzc1OWM1NDY4NDNjYzVkMjBhNTUyZGJkYjNmMjk2ZDA0OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1eGPSV938fD6NE7E2WuUO1FDYXg 7+eQquviogqTZNo9it9S8lGj/tkwvb5fm7Ad0YohTHq8NGk9EqgQqSQYKAbCDaxU tNfSr9Hiij9rhI2v1eW5n5j2L/Q8ZkiqI9jllPyWFInS/n1dzRHO6Zk80QobNFGn /kmcxHMFXm+sFfIcQfzUyKYenTCBRoJoRpbN6BM5zHM0uBxdmRUwT8gcXI6Nja6j 8OZHxN/6cm5J1EVatpfrP2s/NhoTRrF6YGvu/UqMkWSxSEMmEEr7pc9rJ63CsL0j ph/ptFxlIi5VpVsAg9NRJ9FBL0sXLyR2lMP7/t11aZQOytli7gd6hVMyiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZSN1nFRoQ8xdIKVS29s/KW0EjuMB8GA1UdIwQY MBaAFNvBRM4VTu6duzVizkzTIoM4ZBMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQt NDg5NGY4OGJlZGRjLzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hMjJjZmEtMDFmMy00ZjEyLWI2ZmQtNDg5NGY4OGJlZGRj LzEvMjhGRXpoVk83cDI3TldMT1ROTWlnemhrRXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoJQnYks YRUtMlNpB1qRLu0yJ3kV7hGFIPPn1oeaYBd8gGN26YqsTB//nSmEBTHlE7jmCRMl tOCOyRhhPiQfVLaZYOpIW6Y7ejrG2h8nq7B4AbQ3ixY+3ChhJOCgS41qgiWYlk3r RLnGzwLI0p/wrGevtD/SzSjPKJ+2ffFTE5BcNA+cg0Al0Sjli2+DPBE0l2/5pJjp 1oymDCVYCqYDxGi8IzEQzHhhb7lrK6yxktgUHLK2zQmZOOEXHTepomOE66v3FZ+1 I5oScAmBaqXY/l6iISnxwhZcE+bQFjBZXjtIaPf1HFCW8vIpekFuweoaj/SVJwci X2a7MZrUnnkNAg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:02:44 2026 by rpki-client