This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json) Hash identifier: 5PzkPaOC72F9pTk4U+S71H8EOBZ2ft+9H1xh6+MQ0XU= Subject key identifier: 37:98:29:B5:8F:34:B9:99:26:DD:04:36:2C:F1:BF:23:AB:D4:FE:BC Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171 Certificate serial: 019B2174AADF67F12E9C03B4BE8367143937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft Manifest number: 1272 Signing time: Mon 15 Dec 2025 10:00:52 +0000 Manifest this update: Mon 15 Dec 2025 10:00:52 +0000 Manifest next update: Tue 16 Dec 2025 10:00:52 +0000 Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: oY8nzLxfq4jR8nTmS++NjRIEeOKnJaW5KgWCWM0UaiY=) 2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:aa:df:67:f1:2e:9c:03:b4:be:83:67:14:39:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171 Validity Not Before: Dec 15 10:00:52 2025 GMT Not After : Dec 16 10:00:52 2025 GMT Subject: CN=379829b58f34b99926dd04362cf1bf23abd4febc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:86:59:e9:43:1c:4b:5c:26:59:d9:01:6e: ce:5e:87:04:b8:08:b6:60:63:2f:3f:68:ea:33:91: 9f:b1:b0:e2:8a:a9:41:76:56:d1:bd:67:d9:2d:9c: 62:d4:c4:fb:49:03:e1:c9:cf:cc:f0:ee:07:c1:d4: 68:13:cc:ad:12:e4:0d:bc:5d:79:e5:6d:04:93:19: 72:af:ae:d4:ce:13:5a:90:9f:dc:63:09:a4:98:88: e3:ef:25:75:5e:aa:75:20:60:8b:95:e2:52:b3:8c: 1f:76:ba:d8:af:4c:38:ba:aa:01:a3:ba:4f:f2:09: 89:5b:ee:ab:77:ef:ed:28:cf:ab:69:e0:ca:e5:42: b4:d7:d4:b9:bc:e4:06:b5:92:9f:0f:ea:2f:b2:75: df:4e:ce:4b:19:eb:d7:3f:c8:3c:7e:64:44:2d:95: 0d:45:36:5d:35:33:b7:d6:76:91:96:4f:83:ba:44: 95:42:51:4a:fb:78:5d:58:4e:ad:65:0f:ef:1b:45: b2:23:2b:68:df:92:b7:d9:30:70:c9:0d:e2:88:3c: 08:ae:bf:39:ba:15:c7:9c:e3:d6:f5:85:ec:31:c8: fe:ae:77:c9:cc:65:d6:8c:b7:93:6c:e8:d6:41:e6: 77:8d:79:5a:5f:70:df:a2:a7:87:5d:fe:bd:63:40: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:98:29:B5:8F:34:B9:99:26:DD:04:36:2C:F1:BF:23:AB:D4:FE:BC X509v3 Authority Key Identifier: keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8b:a4:a4:db:de:bb:28:0c:40:d1:1f:86:36:e8:7f:3a:43: 1a:69:b8:b7:27:74:6e:b7:6f:e9:4d:93:63:2c:f4:44:ab:48: 0c:09:cc:e2:c2:a4:6e:58:a0:26:2b:6f:0e:21:a1:ab:fe:8a: 22:8c:19:ea:25:07:67:c2:15:aa:f6:df:fc:d3:ca:8f:63:b0: 4f:fc:75:55:34:b7:c7:21:05:94:0a:5c:87:20:5e:b6:0d:ec: 1c:d6:08:d4:22:6b:6c:0f:be:14:51:c1:8c:04:d3:ba:35:98: 3f:10:e2:23:63:a1:58:5b:c5:ec:9c:df:98:7a:7a:fe:66:a4: a1:84:a2:7f:64:c2:87:5f:95:08:be:cb:de:a6:b2:61:bb:0d: 4a:dc:ef:3e:2b:e8:af:ae:73:93:67:f2:9b:be:be:5a:7e:04: 4f:c1:33:02:e7:c2:4d:91:42:bf:b7:13:b9:25:10:13:74:b1: e6:23:f9:12:77:b2:cd:84:3f:ef:56:0e:df:ad:fd:ad:04:35: 99:44:09:8a:2a:7f:7a:85:e7:56:3f:ae:66:6d:9e:c6:6c:00: d2:1e:95:ef:30:73:db:db:46:fc:b6:da:57:69:1d:54:24:65: 6f:bd:62:d4:f0:87:c2:c1:c8:75:e7:26:aa:f7:44:0f:7a:7e: d5:fd:8d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdKrfZ/EunAO0voNnFDk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1 OTkxNzEwHhcNMjUxMjE1MTAwMDUyWhcNMjUxMjE2MTAwMDUyWjAzMTEwLwYDVQQD EygzNzk4MjliNThmMzRiOTk5MjZkZDA0MzYyY2YxYmYyM2FiZDRmZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6+GWelDHEtcJlnZAW7OXocEuAi2 YGMvP2jqM5GfsbDiiqlBdlbRvWfZLZxi1MT7SQPhyc/M8O4HwdRoE8ytEuQNvF15 5W0Ekxlyr67UzhNakJ/cYwmkmIjj7yV1Xqp1IGCLleJSs4wfdrrYr0w4uqoBo7pP 8gmJW+6rd+/tKM+raeDK5UK019S5vOQGtZKfD+ovsnXfTs5LGevXP8g8fmRELZUN RTZdNTO31naRlk+DukSVQlFK+3hdWE6tZQ/vG0WyIyto35K32TBwyQ3iiDwIrr85 uhXHnOPW9YXsMcj+rnfJzGXWjLeTbOjWQeZ3jXlaX3DfoqeHXf69Y0BNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeYKbWPNLmZJt0ENizxvyOr1P68MB8GA1UdIwQY MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct ZjliNzgzNmYyMzkxLzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoukpNve uygMQNEfhjbofzpDGmm4tyd0brdv6U2TYyz0RKtIDAnM4sKkbligJitvDiGhq/6K IowZ6iUHZ8IVqvbf/NPKj2OwT/x1VTS3xyEFlApchyBetg3sHNYI1CJrbA++FFHB jATTujWYPxDiI2OhWFvF7JzfmHp6/makoYSif2TCh1+VCL7L3qayYbsNStzvPivo r65zk2fym76+Wn4ET8EzAufCTZFCv7cTuSUQE3Sx5iP5EneyzYQ/71YO3639rQQ1 mUQJiip/eoXnVj+uZm2exmwA0h6V7zBz29tG/LbaV2kdVCRlb71i1PCHwsHIdecm qvdED3p+1f2Nkg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:16 2025 by rpki-client