This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: r57PYavv4fv77fDLgcU+tizquJegu3HvI2S3vWvK3jQ= Subject key identifier: 12:5E:5F:A0:5A:BB:08:CA:87:3C:64:64:28:C9:77:46:46:A0:D8:BC Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B7F02D572AD1C8A16AE33E0B71E8A68AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 17B2 Signing time: Fri 02 Jan 2026 14:00:50 +0000 Manifest this update: Fri 02 Jan 2026 14:00:50 +0000 Manifest next update: Sat 03 Jan 2026 14:00:50 +0000 Files and hashes: 1: 5XqWU2BY3l73ZvQGC5hNw2s9gDo.roa (hash: c54pJsIlOXW3V5kUxXIRsQeC6LHU4KLVPi5buVcibgA=) 2: BxF8HMXQBXxPeu6jPcu-0Sirs0A.roa (hash: PQjNFAf7Xm48R/Vs0yAXVjhN/qJRsvV6yxIaJlLeL4g=) 3: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: g6/GeQC0pZbOWooVKM4GOkYIBvU8WVcx8UseYD80i+c=) 4: Y_b6JDjQLkBLDUyVDOPTFhvLCqE.roa (hash: UzUZm1Wl75Vh5Ryan69XiXnKqwgvWJFWzAMetkj80e4=) 5: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (hash: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o=) 6: tTZ9S0dCWBDHik__qcwSp9QHBUI.roa (hash: cr8Hr9mBGK1u9J7drnWyVHlm9qTXNpv9oeN2OtqiV5Y=) 7: zqNXKkeUMuTQJw20ff-7r2jRyGk.roa (hash: O2OK099UBcGWYmLHL0lDgCBhx041zWv28uU/Za00LT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:02:d5:72:ad:1c:8a:16:ae:33:e0:b7:1e:8a:68:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 2 14:00:50 2026 GMT Not After : Jan 3 14:00:50 2026 GMT Subject: CN=125e5fa05abb08ca873c646428c9774646a0d8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:06:5f:84:1f:95:ab:b5:46:2c:99:c1:35: 17:e8:f5:19:fa:bb:71:eb:4d:79:46:93:c9:80:c1: af:2a:c5:36:a8:91:d9:e1:27:10:51:e4:2c:70:a7: 89:92:de:b5:3f:8c:37:62:e9:11:20:70:36:72:c7: f6:7b:b0:b2:4e:89:bb:12:ff:f7:50:a6:27:4d:6c: 3c:b3:17:ce:ae:e5:da:9f:2c:25:d7:a0:20:af:e5: e2:37:86:92:e3:7c:2f:9c:84:77:e4:08:dc:6f:02: cf:04:52:5b:d0:25:26:d9:f4:eb:d8:e6:5c:57:4f: d0:7e:a7:9f:91:a8:af:63:9d:cc:eb:b0:f0:c1:fd: d2:92:c5:76:64:4a:b4:46:89:5f:77:c5:ab:48:5e: 3a:26:54:e7:cb:ae:fb:dc:b9:58:c0:db:10:20:4b: d2:92:4c:d6:20:bc:7f:e9:64:76:88:44:b9:77:23: 9f:6c:25:27:a5:a3:9f:7b:f8:f6:f7:0c:00:a3:16: af:0c:23:c2:6e:b8:7d:ef:59:e5:aa:7e:55:41:4e: a2:2c:35:1d:12:6b:23:a6:fd:6b:5d:4a:75:cd:a3: ca:ad:8b:4b:6a:b5:cd:43:5c:a3:be:e3:99:ae:f7: b3:88:7b:d6:37:44:2f:1d:0b:62:fe:fb:df:59:2b: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5E:5F:A0:5A:BB:08:CA:87:3C:64:64:28:C9:77:46:46:A0:D8:BC X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:db:27:97:ae:8d:9a:dc:24:fe:99:8a:96:fe:14:28:38:4d: 65:67:6f:2e:8b:c5:e0:00:03:8e:81:82:98:fe:45:ed:26:2d: 80:91:53:8b:be:3d:58:a6:69:36:50:6c:b3:cf:4c:82:c3:be: 33:98:f4:e8:d0:c0:b0:51:7e:27:ec:12:b4:3e:b6:1d:ca:a1: a9:c9:00:8d:52:ec:43:59:96:67:29:67:9c:21:a9:55:77:03: 52:33:53:92:57:9a:7a:02:ec:cc:64:06:7c:ea:6d:e4:58:cd: 97:46:00:86:cc:bc:00:de:dc:3e:8d:d7:66:85:61:6b:1e:1c: 8c:25:70:d7:02:cd:55:51:6e:b8:63:0f:a5:1a:10:a5:4b:4a: 5f:32:5e:da:8a:bc:13:6c:b1:ab:6c:0d:58:58:63:8e:5e:b7: 9f:f7:fa:5d:3b:93:9e:6e:53:3f:b8:ef:19:2e:8f:74:f3:ca: 42:31:10:ec:88:83:38:a9:92:f1:35:fa:c3:86:61:b0:22:7f: f1:76:be:ff:a8:12:c9:93:7c:3f:e1:47:56:da:cd:23:41:eb: ec:bf:5d:06:ed:d3:7d:2c:1a:ea:95:96:63:cf:aa:38:7c:f5: 58:a4:02:d2:ac:98:96:2f:15:6a:a8:61:04:f6:1e:42:74:c9: 7c:d9:d1:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/AtVyrRyKFq4z4LceimiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTAyMTQwMDUwWhcNMjYwMTAzMTQwMDUwWjAzMTEwLwYDVQQD EygxMjVlNWZhMDVhYmIwOGNhODczYzY0NjQyOGM5Nzc0NjQ2YTBkOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoIGX4Qflau1RiyZwTUX6PUZ+rtx 6015RpPJgMGvKsU2qJHZ4ScQUeQscKeJkt61P4w3YukRIHA2csf2e7CyTom7Ev/3 UKYnTWw8sxfOruXanywl16Agr+XiN4aS43wvnIR35AjcbwLPBFJb0CUm2fTr2OZc V0/QfqefkaivY53M67Dwwf3SksV2ZEq0Rolfd8WrSF46JlTny6773LlYwNsQIEvS kkzWILx/6WR2iES5dyOfbCUnpaOfe/j29wwAoxavDCPCbrh971nlqn5VQU6iLDUd Emsjpv1rXUp1zaPKrYtLarXNQ1yjvuOZrveziHvWN0QvHQti/vvfWSsV0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJeX6BauwjKhzxkZCjJd0ZGoNi8MB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdsnl66N mtwk/pmKlv4UKDhNZWdvLovF4AADjoGCmP5F7SYtgJFTi749WKZpNlBss89MgsO+ M5j06NDAsFF+J+wStD62HcqhqckAjVLsQ1mWZylnnCGpVXcDUjNTkleaegLszGQG fOpt5FjNl0YAhsy8AN7cPo3XZoVhax4cjCVw1wLNVVFuuGMPpRoQpUtKXzJe2oq8 E2yxq2wNWFhjjl63n/f6XTuTnm5TP7jvGS6PdPPKQjEQ7IiDOKmS8TX6w4ZhsCJ/ 8Xa+/6gSyZN8P+FHVtrNI0Hr7L9dBu3TfSwa6pWWY8+qOHz1WKQC0qyYli8Vaqhh BPYeQnTJfNnRcg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:25:23 2026 by rpki-client