This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json) Hash identifier: rZGsSilX0/YK/gQbGKZuDcVnfkJEBaSIK98U1i2lue4= Subject key identifier: E1:CF:7A:CC:6E:81:F4:43:DB:43:99:30:EC:30:DF:F5:A2:16:71:35 Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171 Certificate serial: 019B2EFA248510876B1306FB38102BD0AEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft Manifest number: 1279 Signing time: Thu 18 Dec 2025 01:01:43 +0000 Manifest this update: Thu 18 Dec 2025 01:01:43 +0000 Manifest next update: Fri 19 Dec 2025 01:01:43 +0000 Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: 1HgO/ZNcINWOPFqO7GJht+34SN4g0UPRNTETcEf2u1I=) 2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:24:85:10:87:6b:13:06:fb:38:10:2b:d0:ae:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171 Validity Not Before: Dec 18 01:01:43 2025 GMT Not After : Dec 19 01:01:43 2025 GMT Subject: CN=e1cf7acc6e81f443db439930ec30dff5a2167135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:54:94:6e:b8:4a:6f:ed:58:74:88:76:7f: 96:10:29:40:09:1f:4f:17:56:50:b5:ec:22:7b:93: 01:80:b1:ef:21:e2:2b:2c:e6:05:42:7a:73:fa:73: eb:58:32:9f:e3:62:6f:86:23:5f:46:91:8f:ef:e1: a3:6e:83:c7:94:41:be:8b:74:a9:2e:11:8d:0d:e2: df:e8:83:9a:39:de:e1:ac:89:ac:fc:5e:8f:d4:ad: db:3f:8e:80:4c:23:e8:39:21:11:79:cb:bf:0b:17: a5:75:f7:ce:72:7b:56:6c:4a:1d:c5:a4:d3:59:51: 57:c2:ce:7a:64:27:14:48:a6:06:ec:52:6e:bf:79: 2b:99:e2:f4:df:a4:0d:ae:15:f4:bd:a3:07:0d:c9: 9c:f0:ac:55:5e:76:00:7b:e5:58:79:b5:2a:16:f1: a5:db:4e:e0:a7:f2:b8:db:10:39:46:88:7a:91:00: 41:49:d8:13:e2:c1:e5:1b:ef:b0:57:fd:64:60:78: 49:e4:57:1d:d3:71:b3:7a:24:a6:45:ef:ee:ee:15: d6:3c:87:9b:0d:1f:17:8a:52:76:b6:e7:d3:ce:f8: b9:1e:12:1f:da:06:5f:53:7b:63:d0:6f:49:59:7e: 78:d6:d1:08:ea:d6:0b:ed:a3:f9:a5:b1:94:c4:2b: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CF:7A:CC:6E:81:F4:43:DB:43:99:30:EC:30:DF:F5:A2:16:71:35 X509v3 Authority Key Identifier: keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c4:ea:e6:0a:40:a8:87:6a:0e:0d:a4:5c:64:5e:ca:7d:ae: ab:c9:e3:56:73:56:26:c2:09:7b:25:d9:07:49:33:82:b1:18: a8:fc:b4:25:8d:2d:bf:9a:84:e5:bb:b0:ed:bc:b8:59:ad:bb: 4c:06:25:77:a1:7f:ac:98:56:ea:c0:a5:70:13:56:8b:80:72: eb:33:56:9a:54:c3:c7:64:e7:41:d1:11:b2:2d:1c:ca:18:a4: f6:b3:2e:d7:02:2d:8f:17:1d:11:05:99:ac:b6:0a:0c:8d:4a: 68:7a:b9:9a:63:f9:30:a1:d8:ee:29:80:a0:b5:6d:89:ff:fa: 2c:8f:a4:25:cc:51:20:5f:f3:c9:e1:da:ff:16:f0:2c:15:f6: 46:a4:e5:c0:91:c6:59:c2:17:1f:93:72:5d:7f:eb:b4:4a:04: 30:eb:85:02:65:fd:77:86:70:df:0a:33:8a:ab:e8:fc:63:b3: 4b:d2:30:b5:b1:2f:61:ea:12:3e:c3:53:55:ce:c2:b9:25:aa: 61:be:4b:c8:66:17:bf:ad:b6:b6:5d:5d:0d:e5:3f:57:63:c9: 3f:1a:fe:62:38:c7:f1:ef:f9:22:5c:2b:39:ab:d0:aa:32:22: ab:65:aa:e2:e7:de:c5:a6:06:ed:95:73:db:2b:d8:40:08:cc: 36:3b:ed:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+iSFEIdrEwb7OBAr0K7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1 OTkxNzEwHhcNMjUxMjE4MDEwMTQzWhcNMjUxMjE5MDEwMTQzWjAzMTEwLwYDVQQD EyhlMWNmN2FjYzZlODFmNDQzZGI0Mzk5MzBlYzMwZGZmNWEyMTY3MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8tUlG64Sm/tWHSIdn+WEClACR9P F1ZQtewie5MBgLHvIeIrLOYFQnpz+nPrWDKf42JvhiNfRpGP7+GjboPHlEG+i3Sp LhGNDeLf6IOaOd7hrIms/F6P1K3bP46ATCPoOSERecu/CxeldffOcntWbEodxaTT WVFXws56ZCcUSKYG7FJuv3krmeL036QNrhX0vaMHDcmc8KxVXnYAe+VYebUqFvGl 207gp/K42xA5Roh6kQBBSdgT4sHlG++wV/1kYHhJ5Fcd03GzeiSmRe/u7hXWPIeb DR8XilJ2tufTzvi5HhIf2gZfU3tj0G9JWX541tEI6tYL7aP5pbGUxCvfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHPesxugfRD20OZMOww3/WiFnE1MB8GA1UdIwQY MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct ZjliNzgzNmYyMzkxLzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMTq5gpA qIdqDg2kXGReyn2uq8njVnNWJsIJeyXZB0kzgrEYqPy0JY0tv5qE5buw7by4Wa27 TAYld6F/rJhW6sClcBNWi4By6zNWmlTDx2TnQdERsi0cyhik9rMu1wItjxcdEQWZ rLYKDI1KaHq5mmP5MKHY7imAoLVtif/6LI+kJcxRIF/zyeHa/xbwLBX2RqTlwJHG WcIXH5NyXX/rtEoEMOuFAmX9d4Zw3woziqvo/GOzS9IwtbEvYeoSPsNTVc7CuSWq Yb5LyGYXv622tl1dDeU/V2PJPxr+YjjH8e/5IlwrOavQqjIiq2Wq4ufexaYG7ZVz 2yvYQAjMNjvtOg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:52 2025 by rpki-client