This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier: 2xZ/CMKhyeeLPUSXgTdm+ompaR+XRSgZdcGFu8VYAZA=
Subject key identifier: 82:A6:05:5D:1C:96:05:15:02:16:1D:90:68:B1:D6:CE:8E:D0:4E:9C
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019B37FC6C1A21CDA99B9CA25B101624CF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number: 178E
Signing time: Fri 19 Dec 2025 19:00:48 +0000
Manifest this update: Fri 19 Dec 2025 19:00:48 +0000
Manifest next update: Sat 20 Dec 2025 19:00:48 +0000
Files and hashes: 1: 1-MtYecbQ5nydz9Q7p2zKs0oBUcc.roa (hash: CtlIuKuvYDEtGCGQZMgx28GF32m4dZeG+gekHUxXYEo=)
2: 7kxx2BBz7AU7G57NMIxNGY5ERvQ.roa (hash: D9NBopAMel9qgWV5EZU8eHpvHG0gWlNEBeX4N+E0BIY=)
3: 8YB_bDbMxAK_OjHI0ya3v5E4Ve0.roa (hash: CRNZ00DmhPw21nI9dlfmLovEnpoGS/zuVs09CgdF+Ps=)
4: 9ARDgcW6W1kDzazf5TCC4ro-iT0.roa (hash: i+TRQo1rBP2tBaUv24Yhn0yQTb8yQiBVPdtPMtmjd+Q=)
5: AvnxlNtMf1mjljF0Z9KN2zVY_1Q.roa (hash: b+2KezT5XoOVrcPkpsJoH6QEKr1tioPIOPe6rbXH61o=)
6: DhpjYYnnQRX_gH1jOgohiF5w7_g.roa (hash: 6epCnUc7MHwWt7dT4YK5/Hy4X2KplE/XQWzoTMH6bb8=)
7: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (hash: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=)
8: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (hash: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=)
9: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (hash: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=)
10: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: cNFBdSyEqXYnmGgJQ7LNaZv6SBFgem01xldmPGTvdeM=)
11: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (hash: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=)
12: VRhNfgI9-BwH8m7ksh2m3MATykA.roa (hash: wejBUeK3+S3Mz6iwzpBhD87O0DPRFfKNaXI/JYMbNt8=)
13: nNaCo93qTJERaT_zB3sD2IERlDU.roa (hash: +6lYQMW0tJQv7x9VPZiAqYcASqdUzyG3bb2sUUjUY8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:fc:6c:1a:21:cd:a9:9b:9c:a2:5b:10:16:24:cf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Dec 19 19:00:48 2025 GMT
Not After : Dec 20 19:00:48 2025 GMT
Subject: CN=82a6055d1c96051502161d9068b1d6ce8ed04e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:4e:1a:58:8f:26:31:bf:45:e1:31:60:57:
3a:31:ff:c7:b7:25:6c:b4:5a:a7:45:73:ea:e3:da:
b3:33:10:62:54:96:49:01:37:7a:b2:ee:52:3c:f4:
5b:9f:2e:3d:fd:7f:e5:7e:22:a2:6f:5f:e5:73:3f:
c2:43:34:ef:5f:b8:09:42:f9:4d:98:c5:71:1f:19:
8c:b1:67:60:7e:58:3e:35:fb:09:bd:ed:48:22:bd:
59:e0:c6:37:77:46:ed:75:a8:c8:38:3e:de:95:c5:
55:85:78:1e:cf:0f:ce:6f:02:e8:d4:2e:d4:5b:2c:
58:96:31:9f:5b:ee:fe:bc:30:b2:3e:76:b6:73:79:
10:f8:2b:f6:9a:6c:59:32:12:c0:84:ee:ae:50:d9:
fe:e1:6b:ef:a7:11:4c:f4:bc:05:a4:07:34:c1:21:
86:42:a5:dc:79:78:91:1f:ce:50:fd:13:d4:46:9a:
fe:d1:06:a7:c6:03:aa:fc:4e:0c:63:98:c2:40:1c:
68:fe:2a:03:5e:ef:77:02:05:bb:b0:0f:60:17:80:
b7:fc:18:50:65:05:b0:10:5b:5d:86:20:e3:5d:15:
8c:28:2f:89:7a:81:da:9f:db:97:12:b2:8a:d0:21:
82:54:11:b3:d7:d9:55:2d:56:2e:90:47:84:ef:d6:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:05:5D:1C:96:05:15:02:16:1D:90:68:B1:D6:CE:8E:D0:4E:9C
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4c:bf:84:fc:1b:34:cc:71:a2:31:80:9a:41:19:73:21:11:
50:bc:23:d2:27:9a:51:07:fb:e8:ae:7f:38:37:3e:e6:49:03:
0c:b3:5e:c1:a8:f3:85:cd:60:1e:36:89:a8:d4:af:dc:de:c1:
b4:1a:bf:8a:e1:4e:5f:84:9d:19:bf:3c:22:ff:df:fc:90:9b:
ae:fc:86:28:33:a4:0b:0a:f9:86:36:82:ee:2a:7b:a6:cc:60:
82:a1:66:8b:f8:71:9e:a8:a1:7b:2e:05:59:ca:cc:74:2b:e3:
6e:ab:b5:91:df:35:99:7c:f5:2c:be:49:c0:36:c8:d3:2c:c3:
1e:75:08:dd:07:48:3e:ca:87:f1:a1:35:69:67:ef:44:ce:a0:
51:63:5e:c6:5b:bb:29:d1:f7:8a:3a:0c:a3:db:81:7c:64:b1:
48:a0:67:ed:2f:b1:9d:08:0b:b2:8e:76:7f:f3:ae:34:17:2a:
cf:e2:86:ce:60:5e:83:f5:10:47:9c:38:ec:bb:2b:fc:6c:07:
d5:e7:eb:a1:9a:44:66:28:03:8e:7e:92:bf:42:89:e4:bf:a8:
25:22:d8:d5:9e:55:7a:a2:c2:b3:f0:0e:27:ed:00:69:29:c6:
c3:82:35:f5:bb:48:66:e6:f1:ec:85:a5:af:22:e1:cd:b1:d4:
2b:af:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:30:49 2025 by rpki-client