This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json) Hash identifier: B30laRSsn+Bp7kErsz5HbkfPIc78HL++joaWW7cxZu4= Subject key identifier: 5E:C6:E8:1D:52:0B:52:12:68:0B:4F:5F:D3:A4:67:50:85:C0:BD:B6 Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296 Certificate serial: 019B0E2522AA71ACD1078D6A783CDD9A27AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft Manifest number: 1778 Signing time: Thu 11 Dec 2025 16:01:13 +0000 Manifest this update: Thu 11 Dec 2025 16:01:13 +0000 Manifest next update: Fri 12 Dec 2025 16:01:13 +0000 Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=) 2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=) 3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: /Qlo9mtnRwNDSGCKB3EFLg+EgHQlj+owl+o+O4hYZ9I=) 4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:22:aa:71:ac:d1:07:8d:6a:78:3c:dd:9a:27:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296 Validity Not Before: Dec 11 16:01:13 2025 GMT Not After : Dec 12 16:01:13 2025 GMT Subject: CN=5ec6e81d520b5212680b4f5fd3a4675085c0bdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:50:c8:8c:91:be:a8:62:7f:d7:9b:3d:03: 34:b5:2f:cb:9d:fc:cd:8d:44:33:0a:30:eb:86:0c: 86:85:f2:29:7a:de:e2:1d:4f:a4:57:6d:89:4a:08: ff:71:92:8e:74:d1:d2:e5:24:e3:4a:c8:43:c4:32: 11:fc:fa:8b:a7:4f:9e:b7:eb:31:45:a9:8a:8e:9d: 08:8d:98:9c:8c:32:38:71:6f:b2:13:e7:e3:e9:93: 28:a2:98:57:f1:ff:50:95:b3:ca:d7:c5:63:42:29: 99:ed:79:0e:07:13:1c:36:a4:34:28:c5:f3:36:f6: a6:b2:bb:02:44:d4:2f:de:93:ef:1c:0a:7c:fd:17: a0:e1:e3:8c:a5:05:24:8e:ba:35:44:ed:48:a4:13: 18:9f:05:e5:fa:e4:ee:3c:3a:06:b7:aa:98:7a:1b: f3:7f:e7:f3:e1:e4:46:2f:14:2b:89:ab:2b:b4:01: 18:3b:8b:a2:4d:66:5e:18:17:f6:ad:f8:b3:16:af: ad:80:8c:63:8c:85:11:c2:49:fb:03:7c:74:bf:ed: 6e:bf:7e:62:c0:b4:01:50:8c:c5:60:f6:a5:19:90: e2:ea:40:62:dd:40:54:63:cf:7e:69:7c:09:18:29: 6a:41:0b:d1:d5:fd:8b:4e:07:3e:32:80:ef:f7:c7: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:E8:1D:52:0B:52:12:68:0B:4F:5F:D3:A4:67:50:85:C0:BD:B6 X509v3 Authority Key Identifier: keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8b:0d:14:1c:bd:1a:29:07:d7:ff:8d:13:e9:f8:fb:d8:66: 82:d6:2c:43:0a:8d:15:76:cb:76:6e:98:49:9d:36:1f:28:f5: 5f:9b:1a:27:c1:1b:78:25:b9:c2:e1:b5:d1:d4:2a:81:86:2e: 51:f0:48:f2:8b:cf:49:33:3b:59:33:ed:a2:0e:7b:7b:73:de: d5:da:d6:78:f2:85:31:b7:7e:be:96:cc:92:ff:99:7e:9a:6c: bf:18:df:4a:a7:ca:f7:4d:ac:87:59:ac:45:8d:8a:6c:60:96: c4:d5:4c:6c:af:e5:a1:0d:a3:69:34:4c:7b:bf:e7:a1:91:53: 96:89:d2:86:15:51:ca:71:4d:22:f3:25:18:ba:00:79:cb:f8: d2:13:71:d8:95:4f:32:91:6d:d8:00:a0:7d:78:81:86:ed:9c: 86:73:31:c2:53:a4:bd:ca:72:b4:01:06:16:eb:80:3e:e4:e9: f0:3d:e1:3d:e8:44:fa:90:a7:7e:6b:c5:43:78:b9:af:95:2d: ed:b2:ec:95:56:2f:8b:fb:92:a5:be:dc:81:dc:2c:bd:1b:76: bb:9f:6f:90:3e:e0:d6:7c:b1:59:a6:fa:1d:64:80:a4:55:3a: fb:f7:ab:ee:51:fc:26:19:9e:c4:24:8b:eb:f0:2a:03:c7:bf: a2:65:9d:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJSKqcazRB41qeDzdmieqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw YTUyOTYwHhcNMjUxMjExMTYwMTEzWhcNMjUxMjEyMTYwMTEzWjAzMTEwLwYDVQQD Eyg1ZWM2ZTgxZDUyMGI1MjEyNjgwYjRmNWZkM2E0Njc1MDg1YzBiZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlRQyIyRvqhif9ebPQM0tS/LnfzN jUQzCjDrhgyGhfIpet7iHU+kV22JSgj/cZKOdNHS5STjSshDxDIR/PqLp0+et+sx RamKjp0IjZicjDI4cW+yE+fj6ZMoophX8f9QlbPK18VjQimZ7XkOBxMcNqQ0KMXz NvamsrsCRNQv3pPvHAp8/Reg4eOMpQUkjro1RO1IpBMYnwXl+uTuPDoGt6qYehvz f+fz4eRGLxQriasrtAEYO4uiTWZeGBf2rfizFq+tgIxjjIURwkn7A3x0v+1uv35i wLQBUIzFYPalGZDi6kBi3UBUY89+aXwJGClqQQvR1f2LTgc+MoDv98eMOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7G6B1SC1ISaAtPX9OkZ1CFwL22MB8GA1UdIwQY MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4sNFBy9 GikH1/+NE+n4+9hmgtYsQwqNFXbLdm6YSZ02Hyj1X5saJ8EbeCW5wuG10dQqgYYu UfBI8ovPSTM7WTPtog57e3Pe1drWePKFMbd+vpbMkv+ZfppsvxjfSqfK902sh1ms RY2KbGCWxNVMbK/loQ2jaTRMe7/noZFTlonShhVRynFNIvMlGLoAecv40hNx2JVP MpFt2ACgfXiBhu2chnMxwlOkvcpytAEGFuuAPuTp8D3hPehE+pCnfmvFQ3i5r5Ut 7bLslVYvi/uSpb7cgdwsvRt2u59vkD7g1nyxWab6HWSApFU6+/er7lH8JhmexCSL 6/AqA8e/omWdnQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:42 2025 by rpki-client