This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json) Hash identifier: 2MjoUKNgaw710UCXOH2OOlSkuU6Qdhdwqz6wwoFRZQk= Subject key identifier: 8C:B4:E3:2E:86:C0:D0:43:91:F0:FD:F3:F5:78:CF:39:5B:F3:C1:6A Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac Certificate serial: 019B0F00F760C2B44C278E48971D5E7719F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft Manifest number: 1580 Signing time: Thu 11 Dec 2025 20:01:20 +0000 Manifest this update: Thu 11 Dec 2025 20:01:20 +0000 Manifest next update: Fri 12 Dec 2025 20:01:20 +0000 Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: 71MWm/LYUA21fX/427g7ky6hKEBHYqF2QWnYR9WsAAc=) 2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=) 3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:f7:60:c2:b4:4c:27:8e:48:97:1d:5e:77:19:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac Validity Not Before: Dec 11 20:01:20 2025 GMT Not After : Dec 12 20:01:20 2025 GMT Subject: CN=8cb4e32e86c0d04391f0fdf3f578cf395bf3c16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b7:e6:07:61:a5:c6:c8:e1:2a:b9:4f:f9:c9: 26:0f:4e:40:1e:99:53:66:94:db:30:57:62:67:88: 22:4c:65:8c:0b:e1:ef:a3:f6:ca:3e:d7:8c:d0:bb: 02:32:b2:72:95:14:8e:96:c4:52:f5:fe:79:c1:48: 3b:80:da:7e:20:47:5a:47:7e:8c:1f:1f:2e:bb:8e: ec:69:67:4c:5d:83:ad:4b:39:95:fe:55:62:89:8c: 80:6b:9c:5e:a4:16:09:f9:a2:7f:a2:2e:c5:6d:d6: e6:7b:fa:74:00:27:17:79:c8:73:71:be:e3:7a:e5: f2:28:5c:43:53:79:40:3c:26:7b:52:3b:cf:5e:3e: f2:65:f4:69:e5:40:7b:05:9e:44:3e:a5:da:f3:70: a7:c4:87:a9:aa:a7:04:76:f0:11:af:57:85:1e:91: 98:ee:4f:63:77:78:28:23:f5:80:3b:90:e9:3a:4f: b7:09:58:0f:e0:2d:75:a5:77:23:f8:5f:57:9f:70: 3b:67:39:70:7b:2d:73:ff:c8:db:7d:f6:2e:80:10: c9:a5:db:fb:2e:c9:4a:06:a7:97:c3:d1:d2:cf:bc: b7:4b:13:9d:c8:69:ef:ed:d9:c8:52:eb:9d:cc:51: 49:c7:b9:43:7b:8b:d8:44:d0:4a:61:a6:f3:ee:e3: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B4:E3:2E:86:C0:D0:43:91:F0:FD:F3:F5:78:CF:39:5B:F3:C1:6A X509v3 Authority Key Identifier: keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2b:e8:76:ee:ad:93:7d:bd:bd:7e:44:a1:60:33:39:08:45: b1:9a:09:11:1b:89:43:19:43:54:35:95:29:d6:0a:67:89:9e: 85:52:b9:0d:cd:3f:fd:d3:5c:c2:51:7d:6d:4b:a6:ee:57:3b: 88:28:7f:c6:93:01:6d:e1:3c:1c:8e:ff:e8:6d:79:52:33:8e: 41:a4:a6:7a:d9:c4:35:1b:00:92:5e:60:70:22:1d:b2:65:63: 7c:fb:0d:b0:fa:46:81:3e:b8:a5:a6:8f:24:bb:4a:51:10:ab: 11:d4:7d:4f:98:50:04:76:b2:1e:ba:38:98:da:0d:d9:99:e9: 45:e1:9b:c7:97:cd:57:79:9e:bc:cd:3f:b4:63:d5:1f:8c:7b: 7c:f4:c0:46:7e:c1:52:4e:94:24:f5:8b:c3:f9:3f:4d:5c:6a: b3:6c:9f:9c:41:7e:44:38:88:bc:7e:69:47:9b:09:14:ca:e0: 8d:e3:2e:89:4d:a0:e3:55:54:44:07:83:d7:af:e9:3b:8b:02: da:a5:c6:5b:85:21:c4:1c:92:82:36:40:75:5d:8b:cd:84:b2: 3e:8b:9a:7a:26:75:53:08:6f:06:7e:5e:73:bf:73:7e:d2:72: 91:d7:0e:e9:77:ae:b2:e6:14:68:86:61:df:69:0d:e3:25:7d: 9f:64:82:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAPdgwrRMJ45Ilx1edxn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk MzMxYWMwHhcNMjUxMjExMjAwMTIwWhcNMjUxMjEyMjAwMTIwWjAzMTEwLwYDVQQD Eyg4Y2I0ZTMyZTg2YzBkMDQzOTFmMGZkZjNmNTc4Y2YzOTViZjNjMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bfmB2GlxsjhKrlP+ckmD05AHplT ZpTbMFdiZ4giTGWMC+Hvo/bKPteM0LsCMrJylRSOlsRS9f55wUg7gNp+IEdaR36M Hx8uu47saWdMXYOtSzmV/lViiYyAa5xepBYJ+aJ/oi7Fbdbme/p0ACcXechzcb7j euXyKFxDU3lAPCZ7UjvPXj7yZfRp5UB7BZ5EPqXa83CnxIepqqcEdvARr1eFHpGY 7k9jd3goI/WAO5DpOk+3CVgP4C11pXcj+F9Xn3A7Zzlwey1z/8jbffYugBDJpdv7 LslKBqeXw9HSz7y3SxOdyGnv7dnIUuudzFFJx7lDe4vYRNBKYabz7uNy/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy04y6GwNBDkfD98/V4zzlb88FqMB8GA1UdIwQY MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4 LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCvodu6t k329vX5EoWAzOQhFsZoJERuJQxlDVDWVKdYKZ4mehVK5Dc0//dNcwlF9bUum7lc7 iCh/xpMBbeE8HI7/6G15UjOOQaSmetnENRsAkl5gcCIdsmVjfPsNsPpGgT64paaP JLtKURCrEdR9T5hQBHayHro4mNoN2ZnpReGbx5fNV3mevM0/tGPVH4x7fPTARn7B Uk6UJPWLw/k/TVxqs2yfnEF+RDiIvH5pR5sJFMrgjeMuiU2g41VURAeD16/pO4sC 2qXGW4UhxBySgjZAdV2LzYSyPouaeiZ1UwhvBn5ec79zftJykdcO6XeusuYUaIZh 32kN4yV9n2SCtw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:52 2025 by rpki-client