This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json) Hash identifier: GiqczqZvgzWD0UwbYuMEEfNzBbVyEypC3g/YnfKi+Pw= Subject key identifier: 61:45:66:CC:A2:EA:EE:3A:DF:32:41:ED:0E:07:F1:9C:0A:ED:C0:9F Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac Certificate serial: 019BFB4061B79DF82E9AA0701F5029EBA8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft Manifest number: 15FB Signing time: Mon 26 Jan 2026 17:00:58 +0000 Manifest this update: Mon 26 Jan 2026 17:00:58 +0000 Manifest next update: Tue 27 Jan 2026 17:00:58 +0000 Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: WwkeF1Z2QOwGiD5SVBcVYLk+QJoCnUqmelNQVYl3p/o=) 2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=) 3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:61:b7:9d:f8:2e:9a:a0:70:1f:50:29:eb:a8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac Validity Not Before: Jan 26 17:00:58 2026 GMT Not After : Jan 27 17:00:58 2026 GMT Subject: CN=614566cca2eaee3adf3241ed0e07f19c0aedc09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:a4:09:3e:de:c8:c1:51:ff:27:fe:bd:d0: 5b:e5:9b:78:95:66:bd:6c:21:05:57:6d:34:e0:ad: fb:8b:79:3a:bb:81:8c:0d:b4:c4:a3:fe:ae:d5:63: b8:7b:2b:b9:65:72:a3:95:92:fb:71:5e:8d:34:73: 3f:af:de:85:86:cc:40:54:73:06:17:4a:a8:d4:4e: f6:24:7f:d5:9d:d9:84:c5:e0:67:5c:d6:9f:3d:e3: f4:34:c9:4a:71:3c:49:17:e5:b4:8b:99:7a:15:7a: 05:04:94:e1:e6:7a:7a:28:e3:30:3d:79:df:c7:d5: 13:a3:6c:a5:60:3e:a0:83:64:e1:6e:79:7e:69:1a: 1a:0d:49:b6:0c:0a:00:cf:a2:ed:d6:39:3b:c4:31: 2b:a8:39:32:16:62:cb:2d:9e:98:51:24:79:c8:8b: ce:77:12:5d:ce:9a:5c:fb:d2:a3:8c:48:3f:5d:53: 9b:c8:17:92:42:28:99:6e:5b:14:53:48:4a:fd:90: 95:3d:26:19:ac:26:e0:f2:7a:a9:4a:ab:ea:a3:8c: e7:25:81:a6:b1:da:f1:6b:37:92:7d:4f:93:d3:26: 69:54:31:4f:2a:b7:50:4a:d7:e0:e6:a8:6f:dd:b3: dd:88:b4:f1:e1:d1:f2:c6:3b:36:2e:eb:74:d3:94: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:66:CC:A2:EA:EE:3A:DF:32:41:ED:0E:07:F1:9C:0A:ED:C0:9F X509v3 Authority Key Identifier: keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:dc:c1:a8:68:ff:a1:23:d6:1f:d3:15:46:b7:27:37:e0: f3:e3:eb:26:38:de:e2:76:0b:1b:50:f8:23:c1:c4:67:f4:7d: f5:1c:ef:89:65:47:5b:cc:e9:90:04:1b:8f:e5:7a:0b:1d:a5: ed:48:52:ec:f0:8d:30:7f:47:b7:e7:ae:ec:4b:a9:03:e0:53: 92:2a:eb:cb:bf:d8:ae:0c:ff:9b:92:4e:54:c9:e9:23:b4:1a: 59:2b:37:0a:45:87:b8:fa:5b:84:b1:7d:16:8f:fd:6a:40:9b: f0:d9:24:f8:6e:c6:31:76:11:a8:0a:07:7a:ae:84:59:b5:d7: 37:9b:28:1d:9b:91:53:47:dd:40:5b:33:10:15:40:14:c4:24: c7:d1:3f:01:e5:09:97:aa:3e:5c:d0:7c:ad:04:43:48:ef:db: 5b:33:0a:ff:96:3a:1f:25:1b:74:07:e1:4d:8a:20:c7:21:85: 18:19:90:61:43:6e:17:98:43:81:b8:34:b3:ef:2b:db:a3:84: 7d:b5:4b:4b:1d:fc:17:38:38:1c:f1:a0:96:fa:21:1c:4d:7c: f7:ec:7d:f1:9d:74:44:d0:12:fc:7c:85:fc:9a:4d:30:1b:5f: ad:8a:3b:26:40:36:9a:d5:23:54:10:22:8e:bd:65:c3:c2:20: 15:60:97:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QGG3nfgumqBwH1Ap66jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk MzMxYWMwHhcNMjYwMTI2MTcwMDU4WhcNMjYwMTI3MTcwMDU4WjAzMTEwLwYDVQQD Eyg2MTQ1NjZjY2EyZWFlZTNhZGYzMjQxZWQwZTA3ZjE5YzBhZWRjMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6akCT7eyMFR/yf+vdBb5Zt4lWa9 bCEFV2004K37i3k6u4GMDbTEo/6u1WO4eyu5ZXKjlZL7cV6NNHM/r96FhsxAVHMG F0qo1E72JH/VndmExeBnXNafPeP0NMlKcTxJF+W0i5l6FXoFBJTh5np6KOMwPXnf x9UTo2ylYD6gg2Thbnl+aRoaDUm2DAoAz6Lt1jk7xDErqDkyFmLLLZ6YUSR5yIvO dxJdzppc+9KjjEg/XVObyBeSQiiZblsUU0hK/ZCVPSYZrCbg8nqpSqvqo4znJYGm sdrxazeSfU+T0yZpVDFPKrdQStfg5qhv3bPdiLTx4dHyxjs2Lut005TUDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFFZsyi6u463zJB7Q4H8ZwK7cCfMB8GA1UdIwQY MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4 LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZPcwaho /6Ej1h/TFUa3Jzfg8+PrJjje4nYLG1D4I8HEZ/R99RzviWVHW8zpkAQbj+V6Cx2l 7UhS7PCNMH9Ht+eu7EupA+BTkirry7/Yrgz/m5JOVMnpI7QaWSs3CkWHuPpbhLF9 Fo/9akCb8Nkk+G7GMXYRqAoHeq6EWbXXN5soHZuRU0fdQFszEBVAFMQkx9E/AeUJ l6o+XNB8rQRDSO/bWzMK/5Y6HyUbdAfhTYogxyGFGBmQYUNuF5hDgbg0s+8r26OE fbVLSx38Fzg4HPGglvohHE189+x98Z10RNAS/HyF/JpNMBtfrYo7JkA2mtUjVBAi jr1lw8IgFWCXfw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:18:09 2026 by rpki-client