This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: 0pw2rLr0ehQB578H5PYvYTwAsOo2XR85nPqIQRsRCPM= Subject key identifier: 8F:0D:28:A4:74:81:E1:59:80:7E:3D:41:C9:34:A1:1A:4C:9D:AF:26 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B3DC78AEB216EA4EB3AF016CCB4EFFB6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 22:00:45 +0000 Manifest this update: Sat 20 Dec 2025 22:00:45 +0000 Manifest next update: Sun 21 Dec 2025 22:00:45 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: ibTauTy7pWjUDUcboTQwOmRaf//WeXTuQ/LkmTzbz0U=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:8a:eb:21:6e:a4:eb:3a:f0:16:cc:b4:ef:fb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Dec 20 22:00:45 2025 GMT Not After : Dec 21 22:00:45 2025 GMT Subject: CN=8f0d28a47481e159807e3d41c934a11a4c9daf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:55:1f:5c:66:1c:ec:74:5a:a2:de:4b:58: 7f:3a:45:58:44:e1:9c:5b:e4:ab:a0:59:43:2b:83: 7c:7f:c5:ab:ef:fb:6b:00:65:2a:85:6e:41:f2:59: 54:82:88:19:f7:d9:89:e8:5d:0c:56:b2:3e:3b:7a: a0:b2:95:e2:97:95:a7:0f:de:dc:74:4d:32:95:2d: 0c:38:aa:3c:40:52:87:d0:6e:e3:cc:c1:84:fb:bb: 75:ba:13:6a:ad:79:70:10:f6:76:47:13:b3:92:b9: 5d:b5:7b:39:15:80:91:1a:d9:2e:7d:0c:a2:5b:6f: 93:28:b8:6c:7d:f7:3b:9c:57:10:0e:9f:69:fc:a1: 13:48:3d:b5:59:e4:6b:9d:22:89:8f:40:d9:c7:6a: 3a:b1:c9:73:57:a4:4b:b4:99:e1:a9:f2:8e:b4:79: 5a:5d:8a:73:ce:4e:bd:d0:0a:d2:69:19:e2:c6:1a: 33:ba:51:81:0a:ee:fa:f8:5c:ab:33:20:99:eb:37: 71:d9:8f:27:f7:2f:4e:67:24:55:77:e8:d3:96:57: 5b:65:d9:b0:97:57:f7:47:64:84:73:e5:3a:c8:6d: bd:67:97:23:aa:bb:00:31:52:5c:59:2f:08:3b:f3: 8a:50:25:c0:4e:27:77:f2:12:f5:af:33:d2:48:78: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:28:A4:74:81:E1:59:80:7E:3D:41:C9:34:A1:1A:4C:9D:AF:26 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:24:5b:3b:94:b4:97:b3:5e:99:da:fd:59:85:31:b5:4e:1b: 17:74:a8:66:e3:21:57:50:1d:7a:d6:19:8f:5f:41:7a:95:2a: 4f:c5:f0:72:f3:f0:4f:3d:1e:19:f7:99:48:75:7d:b5:de:91: 38:60:fd:bb:2c:5b:dc:09:68:0f:e7:9b:d7:6c:36:55:63:a7: db:0b:1e:53:40:c5:91:5f:d2:1c:63:0f:ea:3a:fa:b0:51:e7: 36:0a:f8:49:cb:c9:c2:77:5d:9a:d1:d6:d9:c3:c6:40:89:26: a8:cf:6c:ce:bb:0b:79:4e:52:97:0c:39:5d:3d:eb:f4:bc:0a: e7:26:11:a5:a4:cc:7d:ed:91:f2:a6:95:ff:5c:77:d4:27:7d: 56:4c:eb:bd:f3:46:5f:fa:88:f1:6c:f3:f6:2e:ca:b1:1d:60: 20:73:7f:4f:f8:c3:ef:52:31:69:d8:36:eb:2d:29:9d:74:f9: 3d:80:6a:76:c0:e9:76:bd:47:07:a8:dc:f7:f4:88:e1:7b:dc: 30:0a:d9:73:0c:21:e5:10:5d:ef:2a:fc:2a:1c:d8:95:d1:75: 09:5f:6c:66:49:9b:40:03:2d:db:6c:89:9a:b3:74:71:f2:02: ce:40:1e:56:08:31:79:c9:c9:1b:80:67:42:8b:e4:b3:50:1f: 93:a8:e5:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4rrIW6k6zrwFsy07/tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMjIwMjIwMDQ1WhcNMjUxMjIxMjIwMDQ1WjAzMTEwLwYDVQQD Eyg4ZjBkMjhhNDc0ODFlMTU5ODA3ZTNkNDFjOTM0YTExYTRjOWRhZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/NVH1xmHOx0WqLeS1h/OkVYROGc W+SroFlDK4N8f8Wr7/trAGUqhW5B8llUgogZ99mJ6F0MVrI+O3qgspXil5WnD97c dE0ylS0MOKo8QFKH0G7jzMGE+7t1uhNqrXlwEPZ2RxOzkrldtXs5FYCRGtkufQyi W2+TKLhsffc7nFcQDp9p/KETSD21WeRrnSKJj0DZx2o6sclzV6RLtJnhqfKOtHla XYpzzk690ArSaRnixhozulGBCu76+FyrMyCZ6zdx2Y8n9y9OZyRVd+jTlldbZdmw l1f3R2SEc+U6yG29Z5cjqrsAMVJcWS8IO/OKUCXATid38hL1rzPSSHgDQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8NKKR0geFZgH49Qck0oRpMna8mMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCRbO5S0 l7Nemdr9WYUxtU4bF3SoZuMhV1AdetYZj19BepUqT8XwcvPwTz0eGfeZSHV9td6R OGD9uyxb3AloD+eb12w2VWOn2wseU0DFkV/SHGMP6jr6sFHnNgr4ScvJwnddmtHW 2cPGQIkmqM9szrsLeU5Slww5XT3r9LwK5yYRpaTMfe2R8qaV/1x31Cd9VkzrvfNG X/qI8Wzz9i7KsR1gIHN/T/jD71Ixadg26y0pnXT5PYBqdsDpdr1HB6jc9/SI4Xvc MArZcwwh5RBd7yr8KhzYldF1CV9sZkmbQAMt22yJmrN0cfICzkAeVggxecnJG4Bn Qovks1Afk6jlaw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:49 2025 by rpki-client