This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json) Hash identifier: LEKEqjJDyEWg07yJiRi+50mYMsJ5x7mDQ7aiWOG+HHA= Subject key identifier: 62:3F:E7:22:C6:5F:93:8D:16:9A:66:70:36:5B:61:B3:C1:4F:CE:73 Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac Certificate serial: 019B3B6BF411DFFBB251A9FDACA84F5F762F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft Manifest number: 1597 Signing time: Sat 20 Dec 2025 11:01:29 +0000 Manifest this update: Sat 20 Dec 2025 11:01:29 +0000 Manifest next update: Sun 21 Dec 2025 11:01:29 +0000 Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: 7b5v8tvzAV7uhAtS85hWz6N3OyXxHsIGVRBYvyNiuWA=) 2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=) 3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f4:11:df:fb:b2:51:a9:fd:ac:a8:4f:5f:76:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac Validity Not Before: Dec 20 11:01:29 2025 GMT Not After : Dec 21 11:01:29 2025 GMT Subject: CN=623fe722c65f938d169a6670365b61b3c14fce73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:20:40:fb:2a:3c:27:6a:96:98:89:4d:2d: 10:82:ab:4c:22:ed:61:46:8e:f1:d4:b9:55:e2:99: 37:69:8f:e1:dd:b6:1c:7b:f7:80:2a:57:f7:9c:24: e4:e9:39:f3:99:92:60:7b:ec:66:56:68:45:d1:b9: 1c:e7:d7:45:f6:2c:50:ff:cb:15:f2:dc:09:76:15: 7d:29:9e:56:d2:f8:8f:10:e0:f8:29:c7:d2:23:38: 9a:d5:d5:e6:3c:e3:03:ad:b2:57:cc:1f:04:be:06: 53:68:b0:51:6e:45:4a:95:c3:64:09:d7:31:eb:e2: 98:92:0a:8b:83:0c:2c:55:83:fd:f5:ff:fe:35:d7: bd:76:4c:4a:0a:53:3a:6d:98:46:1a:82:8d:67:34: df:28:d6:d0:7f:6d:db:c4:66:ef:4b:e4:a9:82:83: ca:f5:c8:e1:7b:ec:0e:7b:fa:15:3d:9e:1a:30:f0: d7:64:87:81:4d:90:ae:3e:d7:6d:4b:63:d2:b2:cf: 21:91:64:ad:8b:e2:e5:b7:c2:93:e1:38:bc:ef:f6: c4:c5:07:3c:28:2b:5a:db:ff:4f:36:a1:75:5d:2e: ec:99:0d:c7:62:0a:27:44:f6:dd:e1:7a:69:0e:70: 6f:74:8b:db:9a:cb:b0:85:29:e7:cd:23:c6:c8:19: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:E7:22:C6:5F:93:8D:16:9A:66:70:36:5B:61:B3:C1:4F:CE:73 X509v3 Authority Key Identifier: keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8e:c7:b3:66:f7:0b:74:44:81:36:eb:01:07:cf:94:2a:bd: 7c:a3:b4:b4:9d:2a:28:e4:bd:44:18:f2:21:c4:4a:a9:93:8f: 85:58:d4:3f:96:d7:ac:ed:f6:0e:60:44:14:8a:37:56:7b:b6: 73:26:ba:73:30:e0:f6:0f:14:fc:e0:6f:3c:63:a7:54:b9:fc: ee:9f:77:5f:33:c5:21:48:4e:8f:7d:9d:7f:76:1c:f8:95:92: cb:8c:c8:c4:83:d0:07:b3:74:34:34:06:30:08:13:d3:fa:17: 79:43:d2:25:8c:2d:ea:c3:0a:c2:e3:1a:c9:d7:34:c9:c0:53: b8:a2:dc:c3:b9:cf:79:69:2b:2c:5e:10:46:72:6f:6a:70:8f: a1:7e:ae:b7:27:ee:50:8d:78:6f:b9:5c:63:25:4b:af:f5:de: 55:e1:43:1b:4d:93:f0:f3:b4:b7:96:3e:54:45:fa:45:68:fd: 08:65:7f:4f:22:52:b1:de:40:bb:58:2f:0d:b9:f9:a3:f6:55: 13:88:55:84:18:91:14:c4:05:7a:81:6b:ec:9a:68:d0:12:23: eb:ef:78:03:67:96:a4:2d:91:8f:b4:fb:0d:ce:5f:e9:bb:d3: 24:d3:74:f1:32:c0:30:6c:82:f6:3f:af:ae:c9:5e:70:04:64: 46:1f:7f:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/QR3/uyUan9rKhPX3YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk MzMxYWMwHhcNMjUxMjIwMTEwMTI5WhcNMjUxMjIxMTEwMTI5WjAzMTEwLwYDVQQD Eyg2MjNmZTcyMmM2NWY5MzhkMTY5YTY2NzAzNjViNjFiM2MxNGZjZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYgQPsqPCdqlpiJTS0QgqtMIu1h Ro7x1LlV4pk3aY/h3bYce/eAKlf3nCTk6TnzmZJge+xmVmhF0bkc59dF9ixQ/8sV 8twJdhV9KZ5W0viPEOD4KcfSIzia1dXmPOMDrbJXzB8EvgZTaLBRbkVKlcNkCdcx 6+KYkgqLgwwsVYP99f/+Nde9dkxKClM6bZhGGoKNZzTfKNbQf23bxGbvS+SpgoPK 9cjhe+wOe/oVPZ4aMPDXZIeBTZCuPtdtS2PSss8hkWSti+Llt8KT4Ti87/bExQc8 KCta2/9PNqF1XS7smQ3HYgonRPbd4XppDnBvdIvbmsuwhSnnzSPGyBmnUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI/5yLGX5ONFppmcDZbYbPBT85zMB8GA1UdIwQY MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4 LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK47Hs2b3 C3REgTbrAQfPlCq9fKO0tJ0qKOS9RBjyIcRKqZOPhVjUP5bXrO32DmBEFIo3Vnu2 cya6czDg9g8U/OBvPGOnVLn87p93XzPFIUhOj32df3Yc+JWSy4zIxIPQB7N0NDQG MAgT0/oXeUPSJYwt6sMKwuMaydc0ycBTuKLcw7nPeWkrLF4QRnJvanCPoX6utyfu UI14b7lcYyVLr/XeVeFDG02T8PO0t5Y+VEX6RWj9CGV/TyJSsd5Au1gvDbn5o/ZV E4hVhBiRFMQFeoFr7Jpo0BIj6+94A2eWpC2Rj7T7Dc5f6bvTJNN08TLAMGyC9j+v rslecARkRh9/ZA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:49 2025 by rpki-client