This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json) Hash identifier: LNzyLUefKpv8GoFGiWPrJWW/VNOscxtaRhOY5QOpMFU= Subject key identifier: 3A:D7:79:DF:F8:4D:EB:C2:04:19:6C:9D:0E:42:F6:3C:D1:94:84:06 Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171 Certificate serial: 019B0E25E136FA356E0B3C0B0C8AD10C617E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft Manifest number: 1268 Signing time: Thu 11 Dec 2025 16:02:02 +0000 Manifest this update: Thu 11 Dec 2025 16:02:02 +0000 Manifest next update: Fri 12 Dec 2025 16:02:02 +0000 Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: zCjC+AQROXPoRk6rrAFUEoWW+HFove4ybzMJkH+A5m4=) 2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:e1:36:fa:35:6e:0b:3c:0b:0c:8a:d1:0c:61:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171 Validity Not Before: Dec 11 16:02:02 2025 GMT Not After : Dec 12 16:02:02 2025 GMT Subject: CN=3ad779dff84debc204196c9d0e42f63cd1948406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:60:9e:67:1f:72:72:cd:1b:9e:59:12:4f: 74:ad:ce:d2:6a:8c:91:60:ff:97:53:a9:ac:f4:43: 88:4b:e3:bd:7c:7d:ad:fc:26:1c:0f:0c:ab:37:cd: aa:68:a7:e0:fa:57:80:03:a9:34:00:16:16:33:b9: c2:f7:da:2a:4b:b8:be:53:1f:4c:3d:e0:09:43:b2: ea:b6:01:d9:53:f0:80:e9:01:a4:4f:e7:59:80:f9: a0:2d:26:2b:99:10:d4:f0:d2:e7:f6:2f:50:10:42: 17:81:e3:61:54:3d:49:37:da:83:eb:f0:2c:60:ed: 0b:e0:39:3b:96:52:c4:ee:07:30:0b:07:eb:2d:21: 42:d1:72:ae:31:37:d3:8e:b7:c2:84:bb:03:6b:87: e4:5d:29:ca:95:cf:8c:9c:cf:bb:b9:0a:da:2e:72: 47:31:05:1d:95:42:be:85:bc:7d:e2:e7:54:2c:39: 96:cf:74:85:b4:22:09:2e:44:40:9a:e5:73:15:d8: 5a:83:58:fb:b0:df:6b:6d:9d:cc:35:5c:d3:c8:b1: 5c:2f:24:4a:7e:d7:03:21:12:2e:3c:3e:21:f7:5f: 54:92:85:02:de:fe:a6:d9:7a:48:3f:d1:41:a8:a2: dc:23:ef:c4:63:df:24:f2:d2:0b:54:2d:c2:8c:d1: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:79:DF:F8:4D:EB:C2:04:19:6C:9D:0E:42:F6:3C:D1:94:84:06 X509v3 Authority Key Identifier: keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8b:80:b7:18:46:85:cd:dd:22:c8:4b:b0:3b:0c:40:83:ea: 2e:dc:b8:50:c7:19:15:43:b4:a2:15:cd:b5:4f:7a:1f:64:f4: 59:08:ba:48:ed:a7:86:dd:95:7b:11:ba:c1:5c:e7:7b:d2:16: 8b:b3:07:ce:13:2d:e0:66:4c:18:f1:92:87:86:a5:e8:b6:74: a7:2e:33:7d:3a:97:43:8b:56:bb:94:54:00:40:96:4c:6d:b8: f1:90:c2:b7:b2:d0:83:08:f0:12:b6:a3:b0:be:a8:87:98:e4: fb:21:5c:8d:bd:6b:8f:c0:d0:1b:61:5d:fb:b3:0f:ae:d2:0a: 38:5b:83:c2:e8:96:4d:6b:12:ef:43:6a:95:a9:72:fa:f5:24: 88:e3:d1:ad:6e:a1:bf:5b:91:34:78:06:09:ec:99:6c:2d:dd: 85:57:e8:32:0a:6a:2f:c4:88:a6:09:85:d4:4e:32:3d:92:6a: 87:f6:a1:11:f4:cd:3e:d7:80:59:c0:62:e0:8a:ea:48:38:0b: 65:df:7a:eb:51:c9:6c:3a:ae:d9:c3:f1:6e:f2:01:e4:b4:ea: da:df:bc:9c:f0:83:5d:4f:a0:a7:05:b3:5d:85:8b:56:6b:69: ab:e0:23:80:6f:cf:db:ec:86:9d:a9:d0:14:56:04:43:b4:3c: 05:00:93:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJeE2+jVuCzwLDIrRDGF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1 OTkxNzEwHhcNMjUxMjExMTYwMjAyWhcNMjUxMjEyMTYwMjAyWjAzMTEwLwYDVQQD EygzYWQ3NzlkZmY4NGRlYmMyMDQxOTZjOWQwZTQyZjYzY2QxOTQ4NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxdgnmcfcnLNG55ZEk90rc7SaoyR YP+XU6ms9EOIS+O9fH2t/CYcDwyrN82qaKfg+leAA6k0ABYWM7nC99oqS7i+Ux9M PeAJQ7LqtgHZU/CA6QGkT+dZgPmgLSYrmRDU8NLn9i9QEEIXgeNhVD1JN9qD6/As YO0L4Dk7llLE7gcwCwfrLSFC0XKuMTfTjrfChLsDa4fkXSnKlc+MnM+7uQraLnJH MQUdlUK+hbx94udULDmWz3SFtCIJLkRAmuVzFdhag1j7sN9rbZ3MNVzTyLFcLyRK ftcDIRIuPD4h919UkoUC3v6m2XpIP9FBqKLcI+/EY98k8tILVC3CjNHCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrXed/4TevCBBlsnQ5C9jzRlIQGMB8GA1UdIwQY MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct ZjliNzgzNmYyMzkxLzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOouAtxhG hc3dIshLsDsMQIPqLty4UMcZFUO0ohXNtU96H2T0WQi6SO2nht2VexG6wVzne9IW i7MHzhMt4GZMGPGSh4al6LZ0py4zfTqXQ4tWu5RUAECWTG248ZDCt7LQgwjwEraj sL6oh5jk+yFcjb1rj8DQG2Fd+7MPrtIKOFuDwuiWTWsS70Nqlaly+vUkiOPRrW6h v1uRNHgGCeyZbC3dhVfoMgpqL8SIpgmF1E4yPZJqh/ahEfTNPteAWcBi4IrqSDgL Zd9661HJbDqu2cPxbvIB5LTq2t+8nPCDXU+gpwWzXYWLVmtpq+AjgG/P2+yGnanQ FFYEQ7Q8BQCTPQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:26:00 2025 by rpki-client