This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier: SUzZ4TKGq5CeMasnirTkowzwohu0GOYIYIBnbXRDTqE=
Subject key identifier: 0C:DF:98:1C:28:35:0C:1F:92:97:FC:1F:D5:B5:65:06:D3:7F:F5:0B
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019C389E31958BF2A0DB48EB0E5A7286AB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number: 1813
Signing time: Sat 07 Feb 2026 15:00:17 +0000
Manifest this update: Sat 07 Feb 2026 15:00:17 +0000
Manifest next update: Sun 08 Feb 2026 15:00:17 +0000
Files and hashes: 1: 1-2ntxM7Wji529DJOYLflZIRfZ3I.roa (hash: LLb5LuZm3YOIGsTuGBMZEbvgAboSLWz6Cy6RFfdyMpY=)
2: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
3: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: 930X8878GazDAzxprj4ce9QeBOQwRdAbrtCUPwXWUXQ=)
4: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
5: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
6: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
7: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:38:9e:31:95:8b:f2:a0:db:48:eb:0e:5a:72:86:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Feb 7 15:00:17 2026 GMT
Not After : Feb 8 15:00:17 2026 GMT
Subject: CN=0cdf981c28350c1f9297fc1fd5b56506d37ff50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:6f:e4:68:11:65:a5:09:06:18:30:27:20:
3b:7a:12:03:1a:7f:36:90:b4:1f:de:89:ad:af:a0:
b5:d0:19:db:c4:26:fb:b3:36:4e:c8:20:27:b8:15:
99:5f:41:36:23:ee:4a:e4:4e:f1:ff:59:5b:f4:1a:
4f:ec:c9:eb:f0:3b:f8:65:7e:5f:37:27:fd:7a:fb:
6d:f8:86:d3:7a:e6:ac:87:09:0b:76:82:8f:31:4d:
2f:35:f5:f6:fa:2c:b2:68:36:3d:ca:1e:a1:ec:e4:
10:b5:a1:75:10:d0:96:21:3e:d6:50:16:09:eb:c4:
8e:dd:e6:fa:ef:bd:c7:d3:6d:7f:95:ad:81:d4:0b:
bb:ca:13:21:4f:08:7d:0a:b3:c7:0e:01:c3:b4:bc:
05:3f:89:08:87:30:c0:2e:c9:dc:20:13:cd:1c:a5:
e4:72:af:d1:71:32:93:d4:49:5f:4b:8f:3c:04:63:
2c:8c:14:16:e3:d7:34:95:94:fd:80:ad:1f:db:2f:
0a:02:e5:e6:43:b9:c0:1b:f9:13:e7:b6:17:c0:85:
72:95:63:df:fa:7d:60:3c:91:d9:92:48:3b:62:8e:
9e:c7:14:0c:d0:d2:de:c6:27:0b:15:86:93:0a:b2:
d5:66:69:cb:52:a3:c1:9d:59:da:04:3d:0b:6f:8d:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DF:98:1C:28:35:0C:1F:92:97:FC:1F:D5:B5:65:06:D3:7F:F5:0B
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:0c:25:ee:ff:8c:47:22:f9:ac:b7:ad:27:4b:4a:a3:cd:
72:31:81:5e:7f:3f:48:9b:37:57:cb:bb:26:63:13:81:42:24:
c4:a2:4f:5f:21:bd:71:a6:a6:c4:69:84:3e:aa:ba:a4:ec:90:
e6:9e:6f:49:2e:b7:98:e5:02:da:a3:c3:c1:34:ff:3c:b4:54:
cb:4d:15:43:91:c6:ee:be:b7:01:dd:90:25:05:01:7b:16:d0:
3d:20:c0:a6:98:75:c9:a8:81:2f:7d:39:d2:30:5e:f6:20:32:
1b:39:a4:3f:36:84:4b:74:7e:25:09:f5:7d:52:ca:7d:57:b2:
a7:03:89:ee:57:45:88:27:2d:89:b5:a5:9e:c5:b3:25:a8:47:
50:e7:7a:00:d7:8e:05:18:cb:2d:c5:b4:08:46:c7:8d:a1:25:
c0:a6:d8:7b:44:ed:75:75:5d:73:99:8c:82:96:95:94:4f:c5:
3a:c6:2c:ec:10:84:be:d7:57:3c:3b:2e:6e:15:f6:f3:a2:64:
30:2c:1e:1f:22:75:89:b4:a5:82:30:36:65:48:46:06:a7:1b:
35:58:50:cd:38:38:a7:32:33:d9:56:84:31:b4:8c:3c:aa:b5:
82:96:d3:34:1e:00:4d:b1:2c:67:b0:0f:b9:ee:04:d6:e4:05:
03:78:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 20:52:38 2026 by rpki-client