This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: y63CYobyVNsqB5/1M1xxN+w7BVP4A8F5RNQgq7AHTd0=
Subject key identifier: 97:6E:B1:EC:95:38:E1:86:FB:B8:29:6B:BA:69:BA:92:0B:6E:7E:13
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019BF98956BD20C03A656E965DA98DC47587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 17EB
Signing time: Mon 26 Jan 2026 09:01:25 +0000
Manifest this update: Mon 26 Jan 2026 09:01:25 +0000
Manifest next update: Tue 27 Jan 2026 09:01:25 +0000
Files and hashes: 1: 32FLh-2sl2eJtIOGk05i3sfElJU.roa (hash: HsUbHhV9ZeMlUBS5nClbq2bfx/JXEoBIkb5zGIiCc2U=)
2: 6y02T8isddrk35I82aQnZfza2hw.roa (hash: 6Bwcv1vQHggut1Ym2FRTt/C0CVvJQpNdaHy95CBYlLc=)
3: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: Y8wsuBhSWEO2buyZ5OO6J/M6kMJBkdTXW8r6+9dJvDc=)
4: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (hash: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:89:56:bd:20:c0:3a:65:6e:96:5d:a9:8d:c4:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jan 26 09:01:25 2026 GMT
Not After : Jan 27 09:01:25 2026 GMT
Subject: CN=976eb1ec9538e186fbb8296bba69ba920b6e7e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:eb:f9:96:6b:9a:13:08:70:58:be:e9:f0:
5a:f2:e9:fc:4d:9a:98:e9:52:5d:01:5e:6f:6a:1e:
cf:6e:4b:65:32:75:55:f5:7f:80:41:0e:d8:e7:5c:
35:f1:e5:12:3a:ac:71:66:36:68:0a:26:11:45:19:
21:2d:0e:ab:46:a5:34:fc:ef:c9:57:bc:6b:5d:47:
2c:98:a5:9b:ed:28:a3:76:e1:7a:cf:c5:a5:2f:83:
a3:da:e5:3f:df:ee:9e:a1:49:0c:19:0f:99:31:6d:
d7:da:24:6a:72:a2:b1:8b:87:15:b2:e2:3f:38:63:
9b:e0:bc:d6:09:91:84:83:24:17:5c:3e:31:e8:f9:
ad:9e:6f:02:ef:56:1e:47:fe:0b:88:ac:21:81:ea:
7c:fb:27:4e:ca:5e:04:50:b4:2d:bb:8f:85:1f:88:
ed:49:47:ef:7b:29:ec:13:29:7c:29:1a:c1:12:5a:
96:5b:4b:fd:19:b7:6d:b3:d4:e3:ed:e2:71:6a:63:
05:93:a3:cd:fc:4d:f2:20:da:17:16:4a:6a:fa:c6:
af:af:ff:b0:85:80:48:1a:af:4f:f4:ef:d0:dd:56:
4e:8a:16:64:93:29:fa:da:9b:c8:ce:81:1c:ee:3e:
d9:96:de:4f:fe:64:b0:bf:d9:31:73:27:a5:b3:13:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6E:B1:EC:95:38:E1:86:FB:B8:29:6B:BA:69:BA:92:0B:6E:7E:13
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:8e:8f:54:2d:14:4f:4d:65:f5:a1:17:de:9f:fd:a8:3d:
a2:09:3f:9a:22:28:79:fe:62:2f:b2:77:b7:40:9f:ea:8d:88:
c6:83:1f:b2:32:37:21:12:e1:33:5e:28:e4:91:0e:5c:d2:26:
80:23:ba:6b:55:0e:bc:81:ac:8a:3e:3e:39:a2:07:6d:be:4f:
88:a3:15:0a:a0:92:df:d3:2f:02:69:b9:02:a0:b9:93:9b:ea:
d5:78:6b:f8:fc:40:b3:32:12:f7:df:a2:05:24:b6:55:16:a1:
68:50:f1:6d:9f:ac:0d:af:2d:db:a3:82:77:9b:3c:b8:08:c8:
a4:b1:7e:4b:64:4d:91:7b:af:1e:96:b6:0c:8e:87:6f:fa:59:
c9:10:88:fe:b2:65:4c:43:96:8c:03:33:ae:c9:3b:ee:30:39:
2f:2f:29:d7:d5:a1:4d:7f:06:e0:43:26:ce:f3:5c:f5:6c:71:
3f:e7:cf:f2:71:dd:98:e3:9e:b2:4f:f2:10:0c:ef:23:15:88:
2a:8c:6e:00:ea:f1:e3:48:51:fa:e0:cd:77:69:da:33:7f:3b:
15:78:1b:8d:91:bc:04:d8:fa:58:14:a4:72:e4:e5:e7:bf:49:
1e:aa:b1:d5:ee:20:5c:05:ba:25:6a:16:69:4c:75:29:8c:67:
1d:6f:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:49:29 2026 by rpki-client