This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier: qPaDsCxPmm/veDW1ATBM8urpUs4/r+k1B68tscDDFEg=
Subject key identifier: DF:ED:D4:F7:33:77:06:0D:08:30:6F:49:F2:DA:74:D1:5C:B3:E3:20
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019BF50794615AB3C4FBF48979826C9F9BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number: 17F0
Signing time: Sun 25 Jan 2026 12:01:13 +0000
Manifest this update: Sun 25 Jan 2026 12:01:13 +0000
Manifest next update: Mon 26 Jan 2026 12:01:13 +0000
Files and hashes: 1: 1-2ntxM7Wji529DJOYLflZIRfZ3I.roa (hash: LLb5LuZm3YOIGsTuGBMZEbvgAboSLWz6Cy6RFfdyMpY=)
2: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
3: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: qn9PmuHlwy4vn52y7/z5DSK1C9kSziIqkbJrYdgamBY=)
4: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
5: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
6: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
7: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:94:61:5a:b3:c4:fb:f4:89:79:82:6c:9f:9b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 25 12:01:13 2026 GMT
Not After : Jan 26 12:01:13 2026 GMT
Subject: CN=dfedd4f73377060d08306f49f2da74d15cb3e320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:e7:e3:0e:7c:e3:51:a5:32:57:c1:a5:c0:
46:1b:0c:c4:4e:dd:ca:5e:e0:c6:2f:c9:c2:25:e9:
0a:85:1f:12:16:bb:c6:07:f2:7a:a0:d3:c1:76:f8:
5b:0e:fe:95:fc:f8:86:13:c3:3a:b0:2a:2a:ca:9c:
cd:3f:9f:85:f8:90:fe:a4:dc:31:48:de:c5:1b:64:
d5:46:84:dc:26:c8:58:ff:7c:c0:16:eb:c8:38:a0:
7f:49:14:e6:16:95:c2:3d:91:41:cd:15:5d:19:a8:
96:0f:28:31:41:f3:e0:63:51:e5:97:53:eb:4d:15:
4b:37:ff:0b:3b:e2:ed:2e:4a:5b:ef:30:ee:14:85:
d0:8a:35:9c:df:a1:d6:fe:6b:be:6c:58:79:86:de:
c3:ff:82:82:45:87:7c:05:93:66:aa:05:39:e7:97:
81:43:f8:f8:29:c9:96:33:88:b3:e6:7f:d8:f0:2a:
b7:02:9a:e4:31:cc:81:37:8e:e2:4d:0f:d1:5a:a2:
ea:c5:d4:ba:6b:72:d9:c5:70:e7:b0:df:97:58:de:
d3:df:62:89:15:28:02:60:d5:15:12:19:69:bf:09:
1b:7b:98:e5:68:00:a8:a3:3d:11:34:8d:48:1e:4b:
12:0d:44:12:43:c5:3a:7a:5a:9e:6e:c9:43:22:2f:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:D4:F7:33:77:06:0D:08:30:6F:49:F2:DA:74:D1:5C:B3:E3:20
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:aa:42:38:bb:e7:9c:6d:30:5b:63:af:81:c1:b3:ec:a3:01:
3c:da:41:e0:8e:ac:a8:e3:8a:d4:6f:d7:2a:26:7a:bc:bb:cd:
63:6e:b0:05:46:d8:4e:2b:17:da:99:8e:50:8e:f3:af:33:e9:
b3:e8:07:18:ce:bc:57:d4:c2:de:b2:64:c2:74:75:84:a5:9b:
28:6c:6a:4f:14:d9:4a:ca:14:b1:d4:4d:62:46:ca:2d:d3:d4:
9f:7e:07:a7:65:de:16:2c:27:af:4f:6f:9d:9f:fd:04:75:5d:
75:27:cb:cb:13:c7:81:d4:4a:e8:be:bf:2b:70:fc:bf:16:9e:
b5:3e:a5:2b:17:7f:38:a7:f1:a1:14:e4:16:c1:ad:7f:73:0d:
58:c9:c9:d7:e7:db:32:5b:ef:a8:8a:c2:7c:a0:0b:61:51:65:
c6:24:8e:fb:0a:70:78:6b:35:4c:eb:38:7b:39:27:39:66:6e:
28:60:17:f8:a9:38:e0:7d:27:22:6e:f5:ed:18:7d:e5:bf:d4:
7d:91:f1:16:7b:ed:5d:86:2e:cd:4c:e0:7f:22:60:41:65:37:
71:08:6f:a7:28:2b:c6:d2:3a:04:15:33:b0:8e:c1:6d:6e:5f:
97:ee:ee:56:83:42:15:6a:8f:57:f9:eb:bf:71:72:16:bc:bf:
4b:ca:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:19 2026 by rpki-client