This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json) Hash identifier: YKfLHf7wWUcyRLmzc5tHR0+AhfK8Gh+4sLBSUwPOXj0= Subject key identifier: 25:E5:52:37:BF:E4:06:23:B8:70:D6:F3:9F:A4:F5:F7:EB:40:0E:CD Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171 Certificate serial: 019B72917FEF3F19262C2BADD31F35FAFA1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft Manifest number: 129C Signing time: Wed 31 Dec 2025 04:01:36 +0000 Manifest this update: Wed 31 Dec 2025 04:01:36 +0000 Manifest next update: Thu 01 Jan 2026 04:01:36 +0000 Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: 5QDRSaodj22s4p/OwELUHhGLIlv3/Zh/jhFx2aaolqw=) 2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:7f:ef:3f:19:26:2c:2b:ad:d3:1f:35:fa:fa:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171 Validity Not Before: Dec 31 04:01:36 2025 GMT Not After : Jan 1 04:01:36 2026 GMT Subject: CN=25e55237bfe40623b870d6f39fa4f5f7eb400ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:d0:5c:ff:26:a6:a4:b8:a1:9e:43:c3:54: e1:7d:bd:13:c9:1d:09:a3:1e:7f:df:9d:02:6a:47: 51:c6:cd:7b:61:93:74:f3:46:f3:7b:19:1a:08:cf: 17:9e:a1:f6:39:7c:b7:81:f5:de:ca:b6:28:48:71: b4:65:7a:85:6a:4f:57:e8:17:bd:f5:2a:ad:fd:08: fa:66:b1:4d:2e:37:3e:c2:92:c3:15:64:28:0f:63: 44:4b:a9:da:7d:f9:8e:6f:0a:7c:62:4a:97:0c:b5: 19:f0:e1:3a:b3:d8:3f:e9:9c:05:e5:a6:43:90:bb: a2:27:19:3e:1c:9a:94:d2:8b:41:6d:39:3c:7f:c1: 8a:27:0e:12:bf:e5:b6:4d:cb:4f:78:35:05:67:39: c8:04:aa:01:2b:37:ec:90:5d:74:74:6c:fc:cb:d3: e6:d3:52:c4:b6:23:0d:91:fd:c8:21:85:08:b6:22: c0:23:c4:07:3a:c2:d8:f9:e6:4c:1d:d9:a3:4b:20: 92:14:b7:6d:c8:7b:5e:75:3f:32:99:b8:a5:9e:e7: 98:d7:ce:bf:77:e0:91:34:ef:96:ba:f3:a0:b3:c7: e4:fa:32:6e:e6:c3:9d:71:bd:04:4f:a0:f7:6e:96: 96:fe:f0:b4:88:d4:4b:b5:9f:b8:2f:00:ac:5b:d6: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E5:52:37:BF:E4:06:23:B8:70:D6:F3:9F:A4:F5:F7:EB:40:0E:CD X509v3 Authority Key Identifier: keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f5:42:d9:d8:55:4a:b5:18:5f:91:18:4b:a1:43:6c:2a:13: 97:48:ed:b8:6f:f5:80:f6:15:01:ea:2c:c8:49:70:7c:27:22: 36:32:2c:8d:cb:84:56:f8:30:ee:24:a1:cd:93:83:8c:c8:ff: 95:18:f7:ad:a9:ce:ce:10:4a:6f:ee:bf:b7:32:b8:a1:5b:4a: 7c:37:56:e7:76:0f:89:93:37:f7:1a:34:69:fb:30:c4:31:a5: 82:80:e0:28:d7:4a:74:8d:97:e1:d0:72:85:c5:f8:6c:1f:da: 0a:7c:60:69:1f:19:4c:2c:d8:25:8a:7a:bc:7e:e4:4e:f5:73: 74:dd:90:b0:b8:f8:cd:f1:92:d6:df:87:31:a2:3b:00:0e:53: 97:e7:21:06:06:19:c7:b4:92:78:31:c6:0c:51:30:ff:09:a5: a6:b9:84:57:82:5f:3c:b8:48:e9:fc:ca:55:16:e6:c4:93:08: db:94:fa:41:5d:4c:e2:30:77:28:97:6f:48:c0:27:9d:6d:0a: ef:38:f7:f7:94:8a:2f:27:97:b0:fd:81:9c:a0:a4:63:30:24: b4:52:fb:f4:3e:8f:4a:d3:f8:74:66:d4:db:95:39:69:da:06: bd:59:d8:fd:59:a0:67:07:57:d2:1b:ce:b7:e8:fe:fe:93:c0: f1:a2:52:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykX/vPxkmLCut0x81+vofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1 OTkxNzEwHhcNMjUxMjMxMDQwMTM2WhcNMjYwMTAxMDQwMTM2WjAzMTEwLwYDVQQD EygyNWU1NTIzN2JmZTQwNjIzYjg3MGQ2ZjM5ZmE0ZjVmN2ViNDAwZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUjQXP8mpqS4oZ5Dw1Thfb0TyR0J ox5/350CakdRxs17YZN080bzexkaCM8XnqH2OXy3gfXeyrYoSHG0ZXqFak9X6Be9 9Sqt/Qj6ZrFNLjc+wpLDFWQoD2NES6naffmObwp8YkqXDLUZ8OE6s9g/6ZwF5aZD kLuiJxk+HJqU0otBbTk8f8GKJw4Sv+W2TctPeDUFZznIBKoBKzfskF10dGz8y9Pm 01LEtiMNkf3IIYUItiLAI8QHOsLY+eZMHdmjSyCSFLdtyHtedT8ymbilnueY186/ d+CRNO+WuvOgs8fk+jJu5sOdcb0ET6D3bpaW/vC0iNRLtZ+4LwCsW9YCzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXlUje/5AYjuHDW85+k9ffrQA7NMB8GA1UdIwQY MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct ZjliNzgzNmYyMzkxLzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafVC2dhV SrUYX5EYS6FDbCoTl0jtuG/1gPYVAeosyElwfCciNjIsjcuEVvgw7iShzZODjMj/ lRj3ranOzhBKb+6/tzK4oVtKfDdW53YPiZM39xo0afswxDGlgoDgKNdKdI2X4dBy hcX4bB/aCnxgaR8ZTCzYJYp6vH7kTvVzdN2QsLj4zfGS1t+HMaI7AA5Tl+chBgYZ x7SSeDHGDFEw/wmlprmEV4JfPLhI6fzKVRbmxJMI25T6QV1M4jB3KJdvSMAnnW0K 7zj395SKLyeXsP2BnKCkYzAktFL79D6PStP4dGbU25U5adoGvVnY/VmgZwdX0hvO t+j+/pPA8aJSTA== -----END CERTIFICATE-----Generated at Wed Dec 31 10:29:13 2025 by rpki-client