This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json) Hash identifier: +lvBvCMMUl/j/Z73KopPZlLRn9vjZAqDccyfw1CK2tw= Subject key identifier: BE:E1:38:33:13:1F:24:09:DB:E2:14:BD:43:25:B0:1F:80:6F:82:A8 Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac Certificate serial: 019B35A0306478E52323B66C2BE2E454DBBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft Manifest number: 1594 Signing time: Fri 19 Dec 2025 08:00:49 +0000 Manifest this update: Fri 19 Dec 2025 08:00:49 +0000 Manifest next update: Sat 20 Dec 2025 08:00:49 +0000 Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: b6v8aDkb3OFAcj6FoOe9rosc+KbaMm4vyQI8VcWh6P4=) 2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=) 3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:30:64:78:e5:23:23:b6:6c:2b:e2:e4:54:db:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac Validity Not Before: Dec 19 08:00:49 2025 GMT Not After : Dec 20 08:00:49 2025 GMT Subject: CN=bee13833131f2409dbe214bd4325b01f806f82a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:7f:f2:02:0b:cc:69:b5:3d:80:3c:14:9d: 0e:fc:43:b4:c8:5b:45:bd:6d:c0:69:55:4a:ab:4b: 13:70:64:0a:e9:f1:96:0a:a9:a8:e9:59:51:6b:f7: 47:81:4e:fd:4b:51:8d:62:f6:19:c2:eb:4d:c0:ec: 5c:36:f8:64:6f:7b:d0:11:5c:a2:ed:87:85:4b:13: a8:4a:9d:aa:e7:0d:f9:3d:25:5f:0a:cf:03:23:11: bb:6c:ef:bb:ba:b8:27:8f:2e:4f:2d:67:11:2f:f6: 9c:92:56:b8:20:16:b6:4b:1c:b4:9e:52:8c:df:d3: 63:d2:5e:c2:81:88:37:a1:24:1d:14:d0:80:bf:c6: 90:be:2b:ab:62:ab:f4:6b:3d:e1:b8:2a:d7:9d:fd: 1e:b1:61:3f:66:a3:14:c8:f6:94:88:72:c2:63:16: e7:90:1c:cc:c7:dd:71:96:35:de:09:55:d6:12:75: 65:18:46:b5:42:ac:96:cc:e1:39:bf:d4:ee:4e:29: a8:db:52:15:d7:e9:73:6d:6f:87:1c:5a:9c:f8:37: 79:00:a7:25:ea:61:f5:5e:2c:78:ae:10:fe:2b:6e: 84:87:ec:d3:2f:95:e8:fc:48:4c:8e:77:90:33:81: ca:f4:57:27:6e:8e:6a:98:e7:db:f9:1f:e3:dd:95: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E1:38:33:13:1F:24:09:DB:E2:14:BD:43:25:B0:1F:80:6F:82:A8 X509v3 Authority Key Identifier: keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:f9:20:8f:d8:2c:d4:4c:b5:a4:45:25:af:b3:b3:75:f0: 59:06:b1:50:3b:29:0f:08:34:d1:4b:9b:ec:4a:da:91:ba:dd: e9:95:1f:3f:33:2e:19:b0:a4:3a:23:75:8b:f4:8a:df:df:d1: 6b:a7:2a:2d:b5:bc:8d:22:6f:ee:08:ea:d2:12:e0:06:b7:6a: ee:ab:e7:09:4d:44:d5:7d:de:7a:fe:13:21:00:4a:63:f3:41: 43:5b:28:a4:6f:48:e9:82:1f:d7:c4:6c:a6:bb:94:eb:da:4b: a2:d3:cf:68:ef:a4:15:15:1c:5e:3f:04:9f:9d:7c:8f:2f:7a: b7:66:2c:f3:2e:cd:13:5d:9d:97:b4:44:25:77:53:a3:de:a9: 46:57:54:b5:71:ae:35:b0:a8:f3:fc:44:b7:12:ef:3e:c4:c4: 9c:86:cf:9d:db:00:62:dd:74:1d:92:58:89:cf:0f:2c:37:04: 0e:cb:99:21:1c:04:b3:70:72:ac:1c:dd:bf:ed:29:23:8f:3d: ee:39:ba:d3:18:1f:d9:39:6d:6e:1d:44:1c:94:f2:1b:35:56: cb:22:a3:68:3a:14:55:a0:f2:0b:4f:ab:fb:18:4f:67:88:73: bd:69:c0:7d:b2:cb:f3:a4:c9:05:7b:8a:d0:da:ca:f8:12:22: 31:76:94:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDBkeOUjI7ZsK+LkVNu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk MzMxYWMwHhcNMjUxMjE5MDgwMDQ5WhcNMjUxMjIwMDgwMDQ5WjAzMTEwLwYDVQQD EyhiZWUxMzgzMzEzMWYyNDA5ZGJlMjE0YmQ0MzI1YjAxZjgwNmY4MmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztp/8gILzGm1PYA8FJ0O/EO0yFtF vW3AaVVKq0sTcGQK6fGWCqmo6VlRa/dHgU79S1GNYvYZwutNwOxcNvhkb3vQEVyi 7YeFSxOoSp2q5w35PSVfCs8DIxG7bO+7urgnjy5PLWcRL/ackla4IBa2Sxy0nlKM 39Nj0l7CgYg3oSQdFNCAv8aQviurYqv0az3huCrXnf0esWE/ZqMUyPaUiHLCYxbn kBzMx91xljXeCVXWEnVlGEa1QqyWzOE5v9TuTimo21IV1+lzbW+HHFqc+Dd5AKcl 6mH1Xix4rhD+K26Eh+zTL5Xo/EhMjneQM4HK9Fcnbo5qmOfb+R/j3ZUCBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7hODMTHyQJ2+IUvUMlsB+Ab4KoMB8GA1UdIwQY MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4 LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXD5II/Y LNRMtaRFJa+zs3XwWQaxUDspDwg00Uub7Erakbrd6ZUfPzMuGbCkOiN1i/SK39/R a6cqLbW8jSJv7gjq0hLgBrdq7qvnCU1E1X3eev4TIQBKY/NBQ1sopG9I6YIf18Rs pruU69pLotPPaO+kFRUcXj8En518jy96t2Ys8y7NE12dl7REJXdTo96pRldUtXGu NbCo8/xEtxLvPsTEnIbPndsAYt10HZJYic8PLDcEDsuZIRwEs3ByrBzdv+0pI489 7jm60xgf2Tltbh1EHJTyGzVWyyKjaDoUVaDyC0+r+xhPZ4hzvWnAfbLL86TJBXuK 0NrK+BIiMXaUyQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:07:18 2025 by rpki-client