This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json) Hash identifier: P3dr0kH+z7PY22KPM6bif4FLyUDYEW7vALNhzdznl/w= Subject key identifier: 51:86:AE:55:D5:F1:03:F0:5E:58:49:29:38:B6:C3:52:11:B7:D9:44 Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296 Certificate serial: 019AF31B6596BA3C78D553E6B767E4700997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=) 2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=) 3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: xNF8bT+FU1gxGsEq6n5W+lciOvY4RLByQEmFsGEXOIg=) 4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:65:96:ba:3c:78:d5:53:e6:b7:67:e4:70:09:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=5186ae55d5f103f05e58492938b6c35211b7d944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c0:77:e2:2a:b9:db:bd:13:d9:e1:e5:fb:12: 48:e3:0b:7c:29:e1:ac:67:84:20:71:b1:aa:40:4c: 8d:22:a6:af:82:d1:4b:fc:b2:48:d5:e2:ad:d1:5f: 6f:b8:f0:fa:cd:2f:5f:64:42:68:29:bd:18:9a:42: 05:b6:3e:89:89:d3:b3:cd:44:17:c5:6b:c1:b0:90: 2b:d2:72:4d:31:66:5c:e0:62:d2:58:06:b9:ee:17: 8e:7b:03:96:e6:74:d5:5b:af:de:df:23:0a:6e:79: 92:4f:c5:fe:ba:dc:65:00:56:82:14:d1:b3:68:e5: bb:2d:bf:17:e8:4a:0b:db:d5:a6:30:cd:4c:39:1a: 66:c2:95:09:16:f0:9d:16:4e:8e:3a:ee:6a:b2:59: 9b:f6:43:77:10:5c:23:f8:d1:a6:0e:5c:9a:2d:02: 2e:40:2f:5d:5f:16:a3:2c:58:53:f1:7e:ef:b3:d6: 99:65:b9:b3:81:7c:7a:17:d9:fc:08:ed:19:31:75: 2d:54:af:a2:68:d5:6f:b6:1d:85:08:c0:25:c4:01: ab:6c:52:f4:e6:6d:a9:8d:af:c0:ff:0e:50:c2:6b: 45:4c:26:06:94:1d:3c:e2:ec:8b:90:ff:15:64:5d: fd:de:7e:02:93:b4:de:5e:67:77:8a:1b:55:eb:4c: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:86:AE:55:D5:F1:03:F0:5E:58:49:29:38:B6:C3:52:11:B7:D9:44 X509v3 Authority Key Identifier: keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:81:5e:f3:91:b3:fb:b3:3a:9b:b9:92:a1:a0:a1:c3:05: 19:be:3a:3d:78:5e:7b:c8:d5:a6:8e:77:4f:cc:77:a2:8e:57: 17:96:06:02:70:e4:ab:aa:79:f4:65:72:d6:fc:3f:4f:e4:c9: 34:ba:9c:a0:3f:10:de:d8:55:f6:36:1b:d6:31:13:9b:48:42: c5:dd:89:56:b1:94:9c:ff:13:c9:7f:5d:8e:5f:d7:49:f4:05: 01:13:c3:62:1c:fc:9d:0f:3a:8f:57:f3:10:20:02:6e:e2:61: 5e:66:31:02:8c:29:29:04:f6:85:4d:9e:60:3d:1b:cc:2e:a9: 7f:2e:de:1e:20:93:87:33:a5:93:c2:27:40:49:2a:0d:2e:b1: b9:4b:8c:02:1f:8c:72:cb:09:2f:e5:51:72:c8:db:7b:2b:3c: a3:0f:64:17:51:8f:f6:06:f5:43:84:bd:58:08:75:11:7c:44: 13:00:09:bb:6d:67:ad:0e:4c:1c:c3:89:d5:8b:a5:01:64:f5: 4c:83:f4:43:51:19:b9:9e:06:1c:15:22:74:44:a4:77:e4:b8: 75:c5:ab:56:be:82:43:70:86:d8:34:37:9f:0c:7b:b5:10:a3: 57:ea:a0:50:5a:02:0b:45:c1:1f:c7:04:e8:42:52:36:3c:b1: d9:df:e6:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2WWujx41VPmt2fkcAmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw YTUyOTYwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD Eyg1MTg2YWU1NWQ1ZjEwM2YwNWU1ODQ5MjkzOGI2YzM1MjExYjdkOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisB34iq5270T2eHl+xJI4wt8KeGs Z4QgcbGqQEyNIqavgtFL/LJI1eKt0V9vuPD6zS9fZEJoKb0YmkIFtj6JidOzzUQX xWvBsJAr0nJNMWZc4GLSWAa57heOewOW5nTVW6/e3yMKbnmST8X+utxlAFaCFNGz aOW7Lb8X6EoL29WmMM1MORpmwpUJFvCdFk6OOu5qslmb9kN3EFwj+NGmDlyaLQIu QC9dXxajLFhT8X7vs9aZZbmzgXx6F9n8CO0ZMXUtVK+iaNVvth2FCMAlxAGrbFL0 5m2pja/A/w5QwmtFTCYGlB084uyLkP8VZF393n4Ck7TeXmd3ihtV60wG1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGGrlXV8QPwXlhJKTi2w1IRt9lEMB8GA1UdIwQY MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYqBXvOR s/uzOpu5kqGgocMFGb46PXhee8jVpo53T8x3oo5XF5YGAnDkq6p59GVy1vw/T+TJ NLqcoD8Q3thV9jYb1jETm0hCxd2JVrGUnP8TyX9djl/XSfQFARPDYhz8nQ86j1fz ECACbuJhXmYxAowpKQT2hU2eYD0bzC6pfy7eHiCThzOlk8InQEkqDS6xuUuMAh+M cssJL+VRcsjbeys8ow9kF1GP9gb1Q4S9WAh1EXxEEwAJu21nrQ5MHMOJ1YulAWT1 TIP0Q1EZuZ4GHBUidESkd+S4dcWrVr6CQ3CG2DQ3nwx7tRCjV+qgUFoCC0XBH8cE 6EJSNjyx2d/mnw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:16 2025 by rpki-client