This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: wyduB5+U8ReEAzJheCB7IwWLVUBzhqxVhMYARUBsYTU= Subject key identifier: F9:94:98:24:59:80:DE:8C:EE:69:BF:95:20:35:9E:BC:A5:BE:01:FC Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019AF46510E645D0984B8273DD0BF91BAF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 16:00:55 +0000 Manifest this update: Sat 06 Dec 2025 16:00:55 +0000 Manifest next update: Sun 07 Dec 2025 16:00:55 +0000 Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=) 2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=) 3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=) 4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=) 5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=) 6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=) 7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=) 8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=) 9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=) 10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: SoIjtFvQE0Dac0HrUGLb795KxQBkhyL5xtGg5loRNDk=) 11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=) 12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=) 13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:10:e6:45:d0:98:4b:82:73:dd:0b:f9:1b:af:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Dec 6 16:00:55 2025 GMT Not After : Dec 7 16:00:55 2025 GMT Subject: CN=f99498245980de8cee69bf9520359ebca5be01fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:70:49:ea:67:b3:80:e7:0c:66:41:36:6a: 50:04:1a:c2:d3:06:0c:6e:11:75:2c:e1:2e:25:50: 08:46:54:95:c5:e1:23:77:f1:81:8d:66:e2:72:f8: 0c:0d:5c:dd:3e:49:29:c2:e7:ad:fd:46:3a:1e:31: 21:43:8d:6e:83:f2:6d:66:d4:d7:92:49:a1:f2:c1: ef:9a:31:5c:5d:b7:4b:16:89:ec:46:ff:ea:8d:ef: 8a:e1:84:60:3b:51:6f:40:67:6c:29:8a:f2:58:56: 1e:64:33:6c:55:7d:da:75:b4:1d:e6:da:7c:14:8b: 3a:a9:cc:12:99:e5:45:62:eb:e0:67:07:39:97:ad: 75:e0:2d:fd:76:b5:2c:a9:76:2a:66:fa:bd:71:71: cb:b0:02:df:d5:de:6b:59:a6:ba:a8:e3:20:bb:e5: ef:1f:f2:9d:8f:9a:08:43:77:06:63:68:b7:6a:ed: 48:3a:d2:89:7d:63:f5:40:d5:e0:fa:98:2b:b6:22: 2c:42:2a:41:6f:5a:42:20:1c:19:a4:55:50:7e:23: 6a:ee:b8:4a:63:6e:00:0d:d4:1f:c9:91:92:da:e6: 7c:7d:a1:d8:f7:18:c7:41:50:86:d9:92:19:4e:73: 98:3c:4b:a1:ef:f2:da:3a:5b:ee:47:0d:e7:ac:62: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:94:98:24:59:80:DE:8C:EE:69:BF:95:20:35:9E:BC:A5:BE:01:FC X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:53:e4:49:c1:4b:17:80:aa:3e:7b:7b:4a:8d:b2:cf:11:07: fe:fb:bb:bb:dd:60:2e:79:02:04:d3:1d:30:37:1f:8f:22:1b: 64:50:47:a0:0b:6a:72:28:6e:b4:77:bf:63:c4:10:e4:08:a5: ea:c8:0e:19:ca:71:d5:95:5e:4f:60:bd:9c:ec:ec:c9:b3:35: 96:6c:ce:ae:f0:09:99:16:1f:30:73:e7:99:91:af:8f:53:36: 19:3e:22:12:a6:a9:4f:81:d0:4f:8d:3a:0d:f0:9c:83:c7:4b: 32:e4:d4:70:52:c8:13:f1:9c:fb:74:6a:b2:05:a4:f5:e4:7d: f7:95:b5:1b:34:5a:23:21:13:6f:76:19:b0:8a:d2:c6:40:d9: 65:78:af:fa:2a:5d:cb:1e:3b:15:8e:1e:df:e6:dd:59:52:57: 87:75:56:16:19:9e:5f:90:6f:f8:0c:d1:1f:d1:61:c0:a8:b0: 81:c3:0e:84:02:10:7b:5b:cf:da:19:5c:f5:2b:19:e7:e8:c0: a5:e6:b8:dc:b9:35:c2:12:15:58:74:ae:29:05:4f:8e:6c:51: 20:f9:91:68:54:f0:29:6c:40:49:92:8d:70:2b:97:db:25:aa: c1:62:95:d5:52:b6:3e:06:7d:fb:21:dd:c9:08:0c:2f:9f:b0: 17:72:c8:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRDmRdCYS4Jz3Qv5G68mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjUxMjA2MTYwMDU1WhcNMjUxMjA3MTYwMDU1WjAzMTEwLwYDVQQD EyhmOTk0OTgyNDU5ODBkZThjZWU2OWJmOTUyMDM1OWViY2E1YmUwMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlERwSepns4DnDGZBNmpQBBrC0wYM bhF1LOEuJVAIRlSVxeEjd/GBjWbicvgMDVzdPkkpwuet/UY6HjEhQ41ug/JtZtTX kkmh8sHvmjFcXbdLFonsRv/qje+K4YRgO1FvQGdsKYryWFYeZDNsVX3adbQd5tp8 FIs6qcwSmeVFYuvgZwc5l6114C39drUsqXYqZvq9cXHLsALf1d5rWaa6qOMgu+Xv H/Kdj5oIQ3cGY2i3au1IOtKJfWP1QNXg+pgrtiIsQipBb1pCIBwZpFVQfiNq7rhK Y24ADdQfyZGS2uZ8faHY9xjHQVCG2ZIZTnOYPEuh7/LaOlvuRw3nrGJsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmUmCRZgN6M7mm/lSA1nrylvgH8MB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVPkScFL F4CqPnt7So2yzxEH/vu7u91gLnkCBNMdMDcfjyIbZFBHoAtqcihutHe/Y8QQ5Ail 6sgOGcpx1ZVeT2C9nOzsybM1lmzOrvAJmRYfMHPnmZGvj1M2GT4iEqapT4HQT406 DfCcg8dLMuTUcFLIE/Gc+3RqsgWk9eR995W1GzRaIyETb3YZsIrSxkDZZXiv+ipd yx47FY4e3+bdWVJXh3VWFhmeX5Bv+AzRH9FhwKiwgcMOhAIQe1vP2hlc9SsZ5+jA pea43Lk1whIVWHSuKQVPjmxRIPmRaFTwKWxASZKNcCuX2yWqwWKV1VK2PgZ9+yHd yQgML5+wF3LIxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:10 2025 by rpki-client