This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json) Hash identifier: 9pEhLHFVPwRLJC1TuezQ6QBdvUTITn/DeZcnBhjCgcE= Subject key identifier: F4:63:16:87:92:CF:14:49:77:D5:17:32:E5:BE:AC:09:44:00:6F:48 Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b Certificate serial: 019B3042F07D9D8CE2D04581E334BAB0A740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft Manifest number: 01B5 Signing time: Thu 18 Dec 2025 07:00:51 +0000 Manifest this update: Thu 18 Dec 2025 07:00:51 +0000 Manifest next update: Fri 19 Dec 2025 07:00:51 +0000 Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: /I2aEB3hk/RqnlAaDZYBqetgGykzP1mLTZbWlJuH8es=) 2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:f0:7d:9d:8c:e2:d0:45:81:e3:34:ba:b0:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b Validity Not Before: Dec 18 07:00:51 2025 GMT Not After : Dec 19 07:00:51 2025 GMT Subject: CN=f463168792cf144977d51732e5beac0944006f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:f3:22:e8:8e:67:04:96:6e:8b:3d:62:ca: dc:05:55:a3:e8:ee:66:b7:ab:3e:d5:b2:2f:a6:92: 9b:bf:09:3b:4f:29:f7:dc:c1:48:ff:e3:ea:8c:1a: ca:18:0d:72:96:39:8f:10:32:b3:f0:02:61:ef:00: af:d2:f1:86:f1:9a:72:51:67:63:8b:58:5e:7b:07: be:34:4b:bb:a5:3b:16:e6:c5:30:5d:0e:c2:64:86: ce:cd:2e:11:ac:42:77:dc:29:9f:20:a2:5d:cf:49: af:5a:ab:2c:f5:ce:a9:d6:59:f6:3f:0a:e9:4b:49: 2e:c4:28:82:10:71:b3:6f:64:7c:22:98:9a:78:d9: 87:fc:5e:4d:01:b7:8f:be:a9:2f:54:11:a7:43:b9: 1d:5a:24:7c:3c:25:c8:ab:d7:5a:62:4a:45:44:af: 50:0a:3d:7b:7c:80:06:63:a5:75:6f:35:b5:d0:6c: c7:11:8c:cb:10:1b:fa:f6:9d:9f:eb:20:6f:0a:1e: 7a:d8:e0:6c:8b:5f:89:ca:44:38:1f:e0:46:3d:8c: dd:52:29:8b:d8:50:79:0f:75:fa:ed:b7:2a:97:76: fc:95:77:09:46:d2:8c:2c:1c:17:12:1a:12:d4:c9: e2:dc:35:f1:56:65:3d:79:65:fb:cb:26:14:df:22: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:16:87:92:CF:14:49:77:D5:17:32:E5:BE:AC:09:44:00:6F:48 X509v3 Authority Key Identifier: keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a2:2a:ea:78:19:04:b4:87:9b:3c:e3:eb:da:0a:bb:d9:ac: 9a:a8:ce:96:45:68:6f:48:53:ef:2d:58:70:3f:74:ac:78:5b: 9a:f4:61:06:1d:6c:ad:25:8f:c4:d6:f4:1a:37:47:3e:ef:e8: 2e:1a:e7:bc:e7:90:9c:63:1e:cb:c7:6b:e7:ed:02:91:13:80: c7:6f:88:40:bd:bc:3f:17:12:23:e5:a2:d8:8c:49:83:9b:5f: fa:39:f8:91:ca:b2:1b:ee:86:c3:2a:60:31:db:a1:db:c7:1b: fb:f2:a3:af:72:e3:00:28:21:41:f5:8c:5a:40:b7:82:78:12: a2:d7:da:ea:a1:26:8c:32:24:88:32:7b:c0:3f:82:05:8b:f2: 3f:7d:c1:2c:e7:c9:1b:3d:94:75:96:77:55:2e:d1:d8:7e:ac: 72:bb:5f:40:46:1b:25:02:03:46:86:90:08:99:de:95:bd:15: 21:9b:11:0d:09:42:ef:a6:dd:69:c7:e2:7d:08:0a:10:42:e4: ea:95:2b:af:ab:28:88:cb:86:84:f6:a4:0f:1d:f9:db:59:b4: 5a:e9:51:fc:65:2e:72:4a:bc:86:88:2e:e9:d6:84:09:6c:5d: 60:4a:18:d1:28:57:23:67:5a:28:3a:11:58:81:02:85:ae:6f: 19:54:82:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQvB9nYzi0EWB4zS6sKdAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTA2NDdkOTUyZTkxMjEyMjBmNDE0ZTg4YTVkZGQ2MmJj ODIzN2IwHhcNMjUxMjE4MDcwMDUxWhcNMjUxMjE5MDcwMDUxWjAzMTEwLwYDVQQD EyhmNDYzMTY4NzkyY2YxNDQ5NzdkNTE3MzJlNWJlYWMwOTQ0MDA2ZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4bzIuiOZwSWbos9YsrcBVWj6O5m t6s+1bIvppKbvwk7Tyn33MFI/+PqjBrKGA1yljmPEDKz8AJh7wCv0vGG8ZpyUWdj i1heewe+NEu7pTsW5sUwXQ7CZIbOzS4RrEJ33CmfIKJdz0mvWqss9c6p1ln2Pwrp S0kuxCiCEHGzb2R8IpiaeNmH/F5NAbePvqkvVBGnQ7kdWiR8PCXIq9daYkpFRK9Q Cj17fIAGY6V1bzW10GzHEYzLEBv69p2f6yBvCh562OBsi1+JykQ4H+BGPYzdUimL 2FB5D3X67bcql3b8lXcJRtKMLBwXEhoS1Mni3DXxVmU9eWX7yyYU3yIrRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRjFoeSzxRJd9UXMuW+rAlEAG9IMB8GA1UdIwQY MBaAFEQQZH2VLpEhIg9BToil3dYryCN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgt NTQ1ZGNhODBiZjQ5LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgtNTQ1ZGNhODBiZjQ5 LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqIq6ngZ BLSHmzzj69oKu9msmqjOlkVob0hT7y1YcD90rHhbmvRhBh1srSWPxNb0GjdHPu/o LhrnvOeQnGMey8dr5+0CkROAx2+IQL28PxcSI+Wi2IxJg5tf+jn4kcqyG+6Gwypg Mduh28cb+/Kjr3LjACghQfWMWkC3gngSotfa6qEmjDIkiDJ7wD+CBYvyP33BLOfJ Gz2UdZZ3VS7R2H6scrtfQEYbJQIDRoaQCJnelb0VIZsRDQlC76bdacfifQgKEELk 6pUrr6soiMuGhPakDx3521m0WulR/GUuckq8hogu6daECWxdYEoY0ShXI2daKDoR WIECha5vGVSCBg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:30:07 2025 by rpki-client