This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: Gn6BPk/ZLM8nASoUE7NBWbCMgmxO+zZNh8LsikeDJIk= Subject key identifier: A3:F5:F6:A4:34:D6:24:24:70:D9:80:10:36:15:34:19:C4:55:ED:BE Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B3BD929C21A1BE9C62385E7EBE822A753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 13:00:46 +0000 Manifest this update: Sat 20 Dec 2025 13:00:46 +0000 Manifest next update: Sun 21 Dec 2025 13:00:46 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: cqIouexts5hV4pq87GSAIyzmLe+KqeJqsBTMAzNYNlI=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:29:c2:1a:1b:e9:c6:23:85:e7:eb:e8:22:a7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Dec 20 13:00:46 2025 GMT Not After : Dec 21 13:00:46 2025 GMT Subject: CN=a3f5f6a434d6242470d9801036153419c455edbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:4d:44:ed:a4:0b:4e:bb:09:d2:33:5c:e8: 37:7b:d2:4f:a0:01:88:63:2a:32:90:0b:2d:cc:28: c5:00:97:e8:3b:d3:3f:14:48:f7:2f:f1:c7:b0:ef: 74:a2:a2:27:9d:b0:9d:a0:f9:19:15:35:ea:c8:99: 90:a8:e4:a1:7c:bd:65:03:85:2b:b7:d4:1b:3b:71: b0:c8:7f:8f:0d:6b:b1:d2:85:87:96:10:c1:0d:c8: ca:7e:f3:07:80:83:e4:fe:4d:91:5d:ce:0c:f3:84: 96:b9:ab:72:c2:98:51:f1:1a:f3:8b:9a:f0:a3:e8: 84:65:bc:6e:c5:da:09:02:0f:13:68:bc:61:9c:2f: e0:e8:8d:8f:62:6b:99:f1:ee:07:6b:d3:00:38:22: c7:e5:28:54:3c:9a:cd:77:93:cf:4d:0c:48:c0:77: a9:58:8b:64:7a:99:0e:84:c0:c2:53:63:50:e8:e6: 8c:bc:65:d7:1e:b7:1a:3d:99:1e:86:aa:38:b8:a9: 21:dc:64:7a:f1:ed:8c:8d:bb:71:7d:5a:6c:29:25: 96:17:d8:26:64:89:91:a4:0c:43:93:2d:30:e6:ca: 0f:d5:17:61:19:c9:3a:3c:20:ec:38:bd:d7:20:dd: d0:f4:97:5a:c6:f7:43:09:3d:f4:c3:95:ca:5f:1b: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F5:F6:A4:34:D6:24:24:70:D9:80:10:36:15:34:19:C4:55:ED:BE X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f3:8c:77:37:b1:8c:6c:3f:46:5b:13:fe:07:db:57:53:ca: a7:ad:bb:7a:33:42:07:d7:29:38:92:13:e5:ff:6f:1a:2d:bb: 75:2f:a8:b9:a1:b7:31:d4:b7:b9:b8:56:4d:b9:0a:2c:ee:c7: 38:89:e6:7c:ae:6c:d4:69:fc:76:a3:07:44:a2:c1:5d:77:a8: 26:ec:e8:7d:2b:a3:d3:5e:59:0f:4b:02:59:67:51:f3:31:24: b7:b9:a6:3e:86:83:9f:c7:0f:87:ce:d5:24:b2:db:78:dc:3b: 63:83:d8:e8:6a:ec:bc:ee:1e:dd:ac:9d:3e:9a:08:76:61:1c: 0d:a5:a0:40:c4:37:fc:aa:e5:5e:db:41:71:78:13:aa:c2:bf: 89:80:d7:80:e0:3f:b3:b5:fc:76:07:73:70:4d:06:1f:22:31: 8d:fa:bb:83:c6:41:81:21:7d:4e:69:2a:e3:e8:e9:d4:6a:c7: 36:87:88:ed:fb:8d:a0:e5:45:7f:cc:99:73:88:b9:df:bb:03: 30:79:59:c1:91:cf:1d:2a:dc:4b:e7:40:4f:52:1c:a6:34:f3: ea:74:00:84:0b:42:9e:cf:9f:1a:8b:4d:e4:fc:3d:71:fd:af: 17:d2:78:50:29:17:4d:5b:92:6e:c2:52:6a:78:95:e6:5f:c1: db:9a:dc:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SnCGhvpxiOF5+voIqdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMjIwMTMwMDQ2WhcNMjUxMjIxMTMwMDQ2WjAzMTEwLwYDVQQD EyhhM2Y1ZjZhNDM0ZDYyNDI0NzBkOTgwMTAzNjE1MzQxOWM0NTVlZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatNRO2kC067CdIzXOg3e9JPoAGI YyoykAstzCjFAJfoO9M/FEj3L/HHsO90oqInnbCdoPkZFTXqyJmQqOShfL1lA4Ur t9QbO3GwyH+PDWux0oWHlhDBDcjKfvMHgIPk/k2RXc4M84SWuatywphR8Rrzi5rw o+iEZbxuxdoJAg8TaLxhnC/g6I2PYmuZ8e4Ha9MAOCLH5ShUPJrNd5PPTQxIwHep WItkepkOhMDCU2NQ6OaMvGXXHrcaPZkehqo4uKkh3GR68e2MjbtxfVpsKSWWF9gm ZImRpAxDky0w5soP1RdhGck6PCDsOL3XIN3Q9JdaxvdDCT30w5XKXxvp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP19qQ01iQkcNmAEDYVNBnEVe2+MB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPOMdzex jGw/RlsT/gfbV1PKp627ejNCB9cpOJIT5f9vGi27dS+ouaG3MdS3ubhWTbkKLO7H OInmfK5s1Gn8dqMHRKLBXXeoJuzofSuj015ZD0sCWWdR8zEkt7mmPoaDn8cPh87V JLLbeNw7Y4PY6GrsvO4e3aydPpoIdmEcDaWgQMQ3/KrlXttBcXgTqsK/iYDXgOA/ s7X8dgdzcE0GHyIxjfq7g8ZBgSF9Tmkq4+jp1GrHNoeI7fuNoOVFf8yZc4i537sD MHlZwZHPHSrcS+dAT1IcpjTz6nQAhAtCns+fGotN5Pw9cf2vF9J4UCkXTVuSbsJS aniV5l/B25rcWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:54:06 2025 by rpki-client