This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: m9k5rVXJml2tjIYF4MoQge5BYlftvYj2fCRM6LYgeXc=
Subject key identifier: 6C:54:FE:8C:2F:78:7D:F3:80:0D:EF:6E:6C:9D:E4:4F:D9:3E:DE:59
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019BF319471518A5CBA94F0E41E0003E8EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 03:01:18 +0000
Manifest this update: Sun 25 Jan 2026 03:01:18 +0000
Manifest next update: Mon 26 Jan 2026 03:01:18 +0000
Files and hashes: 1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: lmD+9UYV77SkQKt+84+M1zOoPTkvS/q1EI6pn7AtM6A=)
3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:19:47:15:18:a5:cb:a9:4f:0e:41:e0:00:3e:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 25 03:01:18 2026 GMT
Not After : Jan 26 03:01:18 2026 GMT
Subject: CN=6c54fe8c2f787df3800def6e6c9de44fd93ede59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:b5:ab:45:ed:4e:62:85:7d:ca:f4:43:5d:
3e:60:1c:ef:82:88:6a:ea:ce:59:26:bf:91:0a:d6:
18:f4:ef:8f:53:7c:e9:3a:b5:7e:35:ad:89:1f:43:
80:c8:e4:f7:8a:3c:1e:a1:7e:a8:35:5a:6d:35:62:
58:96:b6:2f:8b:80:e7:84:61:9c:06:a0:c2:94:a6:
db:08:c0:d2:0e:d0:1b:9a:d5:1a:cf:5b:d0:e2:41:
3e:43:0a:f9:cc:bb:79:bb:8f:21:96:03:eb:cb:a5:
eb:31:ca:50:e3:da:a0:ff:1f:c2:65:84:11:1a:14:
61:73:91:99:ec:e4:8b:14:82:3e:77:3c:88:96:13:
29:56:c3:c2:4b:55:8f:1b:0c:80:bb:7a:51:fe:f4:
66:0a:6f:ab:39:6c:31:57:ad:94:54:eb:8b:ce:e9:
e5:43:e1:36:c8:11:e0:b9:13:5b:4a:bf:0a:f8:f0:
a5:a8:73:25:47:ff:9b:5c:8e:ba:96:f2:10:49:d6:
46:9a:04:c5:d4:2a:a9:a1:bf:5c:f3:1f:e3:a9:2f:
a9:f5:3c:1f:11:3b:82:66:d8:4f:b7:71:21:6b:a1:
8d:9f:be:e2:65:d7:a1:18:00:92:55:a8:f4:ea:5c:
ee:e5:ad:9b:c4:f4:36:1f:00:87:40:1e:ff:07:95:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:FE:8C:2F:78:7D:F3:80:0D:EF:6E:6C:9D:E4:4F:D9:3E:DE:59
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:33:5c:e4:8d:e1:d4:84:58:f5:bb:de:0e:2d:10:5c:03:44:
b4:8b:20:5c:89:67:c8:48:17:f8:60:11:3d:c7:06:77:c8:3f:
46:7d:44:5c:78:93:ba:96:ed:9b:e2:07:17:e6:5f:d0:f6:1c:
09:71:af:e6:c2:9c:fa:a1:a0:ce:aa:a7:13:5b:55:aa:7b:51:
4d:da:eb:0b:54:37:c3:ad:a2:49:0d:df:fc:bf:96:67:55:ab:
76:70:b7:13:7b:6a:44:ff:25:54:04:67:6f:49:a1:a1:93:25:
f7:54:87:64:70:63:31:26:a9:cd:69:61:00:b2:dc:bb:d1:c3:
d0:9e:90:fb:2a:06:11:9b:61:d0:52:08:ca:62:85:4a:a3:b7:
03:73:83:6c:7a:dd:88:66:f1:b5:b7:58:7a:18:d9:23:0a:c4:
d4:f6:4b:c2:6c:99:00:63:58:09:74:f5:dd:76:72:1f:fe:9c:
23:c0:8e:d0:27:97:a8:95:6b:31:ff:bf:f2:23:3d:73:c8:b3:
32:69:59:7b:e4:46:b2:0e:08:9a:1d:8e:c3:11:c3:eb:89:5a:
37:e1:64:24:4f:88:a3:e6:f6:37:7c:dc:8e:bd:db:53:79:92:
1f:77:58:d1:d8:ff:3a:05:49:5b:df:8e:ea:0d:33:68:7a:38:
b2:a6:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:13 2026 by rpki-client