This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: hZnK7H8b7sEP+NI0F8H/wEP61TkV/hsqtBEKt3lN1Og= Subject key identifier: FC:86:51:1D:3A:FC:BB:7C:61:78:21:26:39:76:08:18:D1:5D:05:C7 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B511762C32521B5A54CC6041190898D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 179B Signing time: Wed 24 Dec 2025 16:00:45 +0000 Manifest this update: Wed 24 Dec 2025 16:00:45 +0000 Manifest next update: Thu 25 Dec 2025 16:00:45 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: mTSw61V/4H1WYan0zSFq5yKV0qFkZoyMWLaMnH1/ivQ=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:62:c3:25:21:b5:a5:4c:c6:04:11:90:89:8d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Dec 24 16:00:45 2025 GMT Not After : Dec 25 16:00:45 2025 GMT Subject: CN=fc86511d3afcbb7c6178212639760818d15d05c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:95:18:71:30:28:ab:28:93:e3:19:a0:b9: 6b:23:f5:4b:b8:09:67:a5:dc:2f:cd:db:c0:2a:b0: 67:f9:19:17:80:e3:44:89:7a:fa:cf:75:1c:bd:ef: 61:e9:65:2e:8f:bc:6c:8e:8e:0a:58:ee:a6:38:5a: a8:60:34:01:e0:f3:ec:ac:7f:17:9c:ae:dc:06:3a: e6:c9:28:57:a0:20:42:f6:a8:c3:8e:e2:32:9e:b1: b9:27:a4:4c:32:fc:c9:ff:d8:36:e3:8b:9d:46:9f: 30:20:5a:0a:20:88:98:2e:66:16:f7:51:c9:78:a5: a7:75:9a:ac:92:1b:06:c8:3d:43:92:5f:07:93:bf: db:3f:34:0f:2e:06:72:a3:75:44:cd:bd:10:7e:c6: 80:ae:e2:3b:c0:22:06:12:c8:39:7a:d8:fd:53:06: 64:4f:60:6f:23:69:72:e8:9c:49:25:4e:f6:b2:93: c7:cf:6d:f0:9f:4e:5f:83:ab:9a:23:e7:0e:04:43: df:33:bc:17:94:25:ef:9f:a1:0b:19:a3:0c:5d:4d: ff:d8:7a:65:4d:20:d9:92:57:a2:9e:86:59:41:d5: ba:60:8d:d2:cd:e0:45:28:2f:fd:53:de:c8:08:46: e2:44:b4:ac:15:46:68:20:db:9a:8c:4d:72:ee:57: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:51:1D:3A:FC:BB:7C:61:78:21:26:39:76:08:18:D1:5D:05:C7 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5d:c2:df:5b:dd:69:d6:b2:50:d0:ce:5c:5d:d0:a7:dc:dc: e7:2b:60:3b:41:09:b7:e2:a4:1f:b2:97:c8:89:59:ce:78:8f: 07:95:b6:36:31:96:6e:25:f9:fc:4b:3e:72:31:51:66:e4:45: 7c:4e:7c:dd:ac:7b:ea:9e:29:13:5c:13:a6:01:c8:85:e6:be: 78:e7:da:09:b7:14:25:2e:ff:7f:c3:03:98:36:96:57:36:81: fd:3c:b3:79:89:b3:97:e9:44:0d:d6:f0:02:eb:cb:d3:0c:12: ae:b1:82:64:54:11:50:56:5b:e4:23:d0:34:79:78:3d:a7:3d: 89:8d:08:19:75:39:0e:bd:17:66:e8:3f:f3:37:c2:ed:2b:ef: a6:fc:8c:b0:04:ec:45:4b:4b:62:04:80:e6:17:f1:17:50:74: 45:78:e5:92:08:fc:16:3f:b7:c0:e4:3f:bb:44:3a:40:b9:cd: 56:0f:8c:4d:65:fe:bf:e8:7b:8b:b3:48:53:ce:90:e2:ce:d2: e1:24:df:b3:8d:a8:98:c3:5d:cd:5f:12:44:5e:ee:07:0e:c9: c5:90:17:0b:71:71:15:04:1c:91:4f:10:d3:f8:f7:35:d5:f1: 99:2b:ac:30:bb:3a:a1:73:1f:34:ff:1e:38:93:4d:11:6d:14: 8d:f3:f4:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF2LDJSG1pUzGBBGQiY0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMjI0MTYwMDQ1WhcNMjUxMjI1MTYwMDQ1WjAzMTEwLwYDVQQD EyhmYzg2NTExZDNhZmNiYjdjNjE3ODIxMjYzOTc2MDgxOGQxNWQwNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCVGHEwKKsok+MZoLlrI/VLuAln pdwvzdvAKrBn+RkXgONEiXr6z3Ucve9h6WUuj7xsjo4KWO6mOFqoYDQB4PPsrH8X nK7cBjrmyShXoCBC9qjDjuIynrG5J6RMMvzJ/9g244udRp8wIFoKIIiYLmYW91HJ eKWndZqskhsGyD1Dkl8Hk7/bPzQPLgZyo3VEzb0QfsaAruI7wCIGEsg5etj9UwZk T2BvI2ly6JxJJU72spPHz23wn05fg6uaI+cOBEPfM7wXlCXvn6ELGaMMXU3/2Hpl TSDZkleinoZZQdW6YI3SzeBFKC/9U97ICEbiRLSsFUZoINuajE1y7ldHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyGUR06/Lt8YXghJjl2CBjRXQXHMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF3C31vd adayUNDOXF3Qp9zc5ytgO0EJt+KkH7KXyIlZzniPB5W2NjGWbiX5/Es+cjFRZuRF fE583ax76p4pE1wTpgHIhea+eOfaCbcUJS7/f8MDmDaWVzaB/TyzeYmzl+lEDdbw AuvL0wwSrrGCZFQRUFZb5CPQNHl4Pac9iY0IGXU5Dr0XZug/8zfC7SvvpvyMsATs RUtLYgSA5hfxF1B0RXjlkgj8Fj+3wOQ/u0Q6QLnNVg+MTWX+v+h7i7NIU86Q4s7S 4STfs42omMNdzV8SRF7uBw7JxZAXC3FxFQQckU8Q0/j3NdXxmSusMLs6oXMfNP8e OJNNEW0UjfP0Ew== -----END CERTIFICATE-----Generated at Wed Dec 24 18:09:16 2025 by rpki-client