This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json) Hash identifier: NX/fCXbXdgY5bF9ot4wpCVf0da/4ZDIQdKPtWjJH7/4= Subject key identifier: 01:8F:B3:64:59:AA:99:8C:C2:35:F2:E2:AC:F3:36:C8:34:97:E5:50 Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171 Certificate serial: 019AF50AC39331BBBB4E92137E7CFC458193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft Manifest number: 125B Signing time: Sat 06 Dec 2025 19:01:54 +0000 Manifest this update: Sat 06 Dec 2025 19:01:54 +0000 Manifest next update: Sun 07 Dec 2025 19:01:54 +0000 Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: p6mXtD/ZfaeLQ9vG2pi+20HqNJir6Hn+cquM/tV9r2E=) 2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c3:93:31:bb:bb:4e:92:13:7e:7c:fc:45:81:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171 Validity Not Before: Dec 6 19:01:54 2025 GMT Not After : Dec 7 19:01:54 2025 GMT Subject: CN=018fb36459aa998cc235f2e2acf336c83497e550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:4f:79:ae:39:04:2a:10:20:7a:d2:ed:75: b1:f7:42:60:32:d2:ac:53:1e:7c:1f:46:de:5a:16: 58:c0:aa:3c:02:30:77:54:0d:5f:0c:45:81:87:fb: 20:1a:99:3f:03:d1:66:ad:dd:b6:a1:4f:87:d0:3b: 33:fa:3c:cb:98:8d:82:9c:9f:d6:52:db:15:5e:fa: 67:5f:e2:78:96:82:0a:6d:01:15:08:76:a6:a4:d9: 12:9b:ab:c3:5a:59:30:ac:a8:a5:4a:aa:b6:16:34: 82:ce:a5:02:97:67:f1:13:cd:e6:d8:d8:1d:d2:29: 5c:52:00:02:fa:be:9a:19:ec:5d:98:eb:b3:66:10: 9b:58:cf:fb:c9:89:dc:d5:0d:46:dc:7b:65:34:b1: 6c:56:f0:16:67:5d:8b:86:5b:71:f7:c4:b5:45:3f: 96:9b:07:8d:65:36:a9:ff:4c:4c:3d:fb:45:3f:11: 75:f5:27:1e:f8:10:b9:14:b2:81:5b:c1:1a:a7:6e: 7f:9d:da:1a:f1:07:7c:8e:f4:48:87:00:53:b7:ca: 8d:3b:79:20:37:22:8b:3f:f4:e6:3a:7c:63:3a:39: 58:e6:13:7d:5e:45:56:1a:7a:c2:b7:87:07:a1:b5: dd:47:02:bd:dd:0a:fa:47:11:b7:87:53:50:6a:3d: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:B3:64:59:AA:99:8C:C2:35:F2:E2:AC:F3:36:C8:34:97:E5:50 X509v3 Authority Key Identifier: keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:65:26:f2:84:ef:69:3f:55:82:76:a8:7f:f8:34:39:2d:a4: c2:99:6c:49:74:4b:95:0a:ac:09:31:7c:85:aa:f7:b0:9f:5f: 5c:3e:1d:e1:71:81:0b:87:17:34:b6:55:ae:5e:60:a9:9d:52: e3:17:82:fa:02:56:f6:48:b7:0d:a2:3d:1e:b1:3e:2d:1d:50: 86:86:ab:45:49:de:fb:4f:92:df:66:d0:df:4a:23:cc:bb:a8: bf:7d:19:2f:a1:e8:36:d1:48:ae:e0:bb:40:15:d6:92:ef:6f: 3f:6b:90:43:e7:ad:c9:e4:0f:8b:dc:46:a6:c9:50:bc:08:30: d7:f4:fb:00:2a:45:1d:5d:be:7d:c6:a4:fb:48:61:45:a8:5e: 8e:d8:88:58:0d:28:2e:fc:c7:e7:af:8f:94:7b:de:9c:9f:7d: b9:db:b7:40:d5:e1:99:57:1a:0e:88:20:74:35:ee:d8:de:b9: cc:1e:87:f4:d7:db:22:b9:d1:d0:75:a1:21:a6:86:64:d6:a7: 8e:e5:62:7f:a5:bc:64:90:87:0b:42:8d:47:ac:ac:71:7f:49: 00:80:65:77:e4:a0:92:5e:5d:6f:fa:8a:f8:c4:f9:8d:21:cf: 00:e9:f9:32:80:31:f9:b6:f6:ae:09:a9:78:31:25:b7:6e:a3: e5:9b:fe:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsOTMbu7TpITfnz8RYGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1 OTkxNzEwHhcNMjUxMjA2MTkwMTU0WhcNMjUxMjA3MTkwMTU0WjAzMTEwLwYDVQQD EygwMThmYjM2NDU5YWE5OThjYzIzNWYyZTJhY2YzMzZjODM0OTdlNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykpPea45BCoQIHrS7XWx90JgMtKs Ux58H0beWhZYwKo8AjB3VA1fDEWBh/sgGpk/A9Fmrd22oU+H0Dsz+jzLmI2CnJ/W UtsVXvpnX+J4loIKbQEVCHampNkSm6vDWlkwrKilSqq2FjSCzqUCl2fxE83m2Ngd 0ilcUgAC+r6aGexdmOuzZhCbWM/7yYnc1Q1G3HtlNLFsVvAWZ12Lhltx98S1RT+W mweNZTap/0xMPftFPxF19Sce+BC5FLKBW8Eap25/ndoa8Qd8jvRIhwBTt8qNO3kg NyKLP/TmOnxjOjlY5hN9XkVWGnrCt4cHobXdRwK93Qr6RxG3h1NQaj1tdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGPs2RZqpmMwjXy4qzzNsg0l+VQMB8GA1UdIwQY MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct ZjliNzgzNmYyMzkxLzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmUm8oTv aT9Vgnaof/g0OS2kwplsSXRLlQqsCTF8har3sJ9fXD4d4XGBC4cXNLZVrl5gqZ1S 4xeC+gJW9ki3DaI9HrE+LR1QhoarRUne+0+S32bQ30ojzLuov30ZL6HoNtFIruC7 QBXWku9vP2uQQ+etyeQPi9xGpslQvAgw1/T7ACpFHV2+fcak+0hhRahejtiIWA0o LvzH56+PlHvenJ99udu3QNXhmVcaDoggdDXu2N65zB6H9NfbIrnR0HWhIaaGZNan juVif6W8ZJCHC0KNR6yscX9JAIBld+Sgkl5db/qK+MT5jSHPAOn5MoAx+bb2rgmp eDElt26j5Zv+Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:15 2025 by rpki-client