This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: x8J5z3wS6gaUJrlpQCqpZNWN/u+791hbjNg/1CtuCKQ=
Subject key identifier: AF:EB:8F:52:37:E3:CB:AA:39:B3:F0:4E:AA:DB:12:FE:4F:41:89:3B
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019BD80F8430DC8E3F8DF0D39B06DBE9A76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 17DB
Signing time: Mon 19 Jan 2026 21:00:54 +0000
Manifest this update: Mon 19 Jan 2026 21:00:54 +0000
Manifest next update: Tue 20 Jan 2026 21:00:54 +0000
Files and hashes: 1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: xlQsrtN/C9NS3rtaFjgZfSJpd6FRkyv3YILP9Vd6+6w=)
3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:0f:84:30:dc:8e:3f:8d:f0:d3:9b:06:db:e9:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 19 21:00:54 2026 GMT
Not After : Jan 20 21:00:54 2026 GMT
Subject: CN=afeb8f5237e3cbaa39b3f04eaadb12fe4f41893b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:61:a2:16:69:d4:27:ff:9c:ed:d5:e7:08:
a8:d4:a8:21:dc:bc:7e:8e:43:00:81:7f:98:ae:94:
fb:c7:21:15:ef:65:44:6d:20:eb:eb:66:c1:e7:0b:
b4:df:4f:58:9c:6d:ea:05:4b:a1:c9:78:37:e6:f3:
e3:52:b8:f8:e8:a2:0a:ce:20:8c:40:c8:15:86:12:
ff:0b:96:b4:2f:74:84:18:82:aa:0c:57:67:3a:7d:
6a:95:b9:0e:61:c5:1b:fe:2d:ca:33:b5:f0:5b:3f:
16:81:8f:87:d4:c2:ea:a0:58:98:c7:5d:8a:b3:b2:
9a:0b:49:10:ad:1b:32:5d:c8:3e:04:80:62:4a:12:
a4:eb:07:67:ba:61:8a:6f:2c:2d:90:87:34:73:13:
5c:ad:f3:ac:5f:de:9a:37:31:1f:fa:c2:f1:d6:8b:
42:fc:a9:c3:11:71:23:a6:21:7e:ce:7e:1c:56:4a:
49:15:22:81:de:3c:7f:87:fa:3c:4b:ea:2b:ab:c1:
e4:30:62:1d:bf:bc:7a:e0:c6:dd:a4:6d:8a:ec:f5:
ed:dc:49:93:63:c7:8c:cf:a4:76:24:18:42:bb:95:
5a:88:cd:27:37:ee:0e:a2:b6:4d:eb:e0:5d:04:14:
3a:93:f8:f3:66:f2:8b:ae:bd:27:34:59:93:e7:b5:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EB:8F:52:37:E3:CB:AA:39:B3:F0:4E:AA:DB:12:FE:4F:41:89:3B
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:56:39:af:88:2f:aa:34:36:0e:1c:45:44:17:ea:7d:1d:59:
bf:94:f1:8d:c9:8a:6c:f7:29:05:b2:69:e4:29:ef:6d:55:1f:
ff:9a:64:9b:12:45:2e:a7:2d:c0:8b:0b:3c:41:ff:13:3e:c3:
cd:b9:ef:eb:77:12:24:af:0a:69:95:cc:e1:f2:a5:9c:49:4c:
dd:41:d9:3d:ea:bc:0d:41:f0:ec:35:55:02:5f:35:9a:e3:95:
0a:9f:f2:6b:cf:ca:d1:64:30:83:6c:fd:0b:61:c5:ef:30:4d:
18:44:5d:75:14:dc:8a:ab:d5:86:78:41:fc:fa:df:f3:c9:d4:
52:01:dd:d9:42:3a:26:03:4b:41:ff:00:31:43:59:32:2a:8d:
47:03:e8:dd:59:f4:f0:a6:93:7b:b1:cb:cb:78:9c:87:3b:6d:
93:8f:3a:14:d2:fa:b6:12:5d:12:49:d4:14:89:17:32:04:2a:
29:11:e4:55:c5:e8:37:4e:0a:71:29:93:2d:99:61:68:ca:2c:
4c:12:02:ac:46:8c:a1:c8:96:b8:ed:45:d3:b8:c9:b4:72:8e:
19:9a:db:c0:d8:70:92:cf:d1:44:20:55:34:f2:13:35:4d:dc:
2f:b8:55:19:f0:80:20:97:80:b2:8e:b4:a1:12:d5:f7:46:c6:
23:be:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:52 2026 by rpki-client