This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json) Hash identifier: TkX75VF/YUWlc1ThtrSxC6gHao603SuB6p54MCvl/+E= Subject key identifier: 0C:C8:88:75:98:55:00:EA:19:B8:7D:74:BC:AA:EC:12:D4:DC:9F:9C Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41 Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541 Certificate serial: 019B522A6F017BF207B1EF5C64B50C191088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 21:01:11 +0000 Manifest this update: Wed 24 Dec 2025 21:01:11 +0000 Manifest next update: Thu 25 Dec 2025 21:01:11 +0000 Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: s0STx0sxyv0eR5XekovZ4Av7BfIrVfPwwOfdF0CVuAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:6f:01:7b:f2:07:b1:ef:5c:64:b5:0c:19:10:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541 Validity Not Before: Dec 24 21:01:11 2025 GMT Not After : Dec 25 21:01:11 2025 GMT Subject: CN=0cc88875985500ea19b87d74bcaaec12d4dc9f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:5d:5d:b7:47:f1:7a:8a:a4:de:ea:56:8e: df:c1:91:fb:cd:d5:fd:64:14:8a:07:71:56:10:c8: a4:26:e4:37:e9:e7:b2:71:20:d7:49:bc:11:06:95: bd:92:c0:6d:77:10:7a:48:07:af:a9:61:54:6c:ba: 67:01:22:9f:0c:8f:48:48:07:0a:4f:4f:4d:3c:c3: 74:78:30:f3:15:0f:a7:36:7e:f3:c1:1a:fe:40:3e: 06:3c:03:47:08:69:c8:91:6b:bb:78:93:50:9e:b8: ce:55:34:98:e8:00:cf:05:16:2a:1d:f9:b6:39:94: e0:c3:d8:ad:76:de:3b:bc:50:c5:d5:f2:2c:dd:24: 37:b2:9a:fc:90:68:3c:2d:30:ef:f0:39:c2:68:01: 35:59:13:15:40:4a:db:8f:30:06:a1:a5:1a:31:23: 7e:d1:50:e2:31:79:4f:35:20:9c:4b:7b:27:2b:7d: 5e:a0:22:fa:9b:92:5b:e2:0b:d0:39:ad:4f:53:96: 69:f1:f6:dd:82:c6:14:c8:0c:07:bb:16:2a:3a:e0: 11:84:22:ed:5e:2e:62:e4:fc:b3:41:4b:57:27:d8: af:3b:bd:f5:b1:67:44:47:53:60:9d:4c:f6:81:2b: 07:52:44:4f:22:db:04:b7:5d:dc:24:bc:e7:1a:d1: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C8:88:75:98:55:00:EA:19:B8:7D:74:BC:AA:EC:12:D4:DC:9F:9C X509v3 Authority Key Identifier: keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:16:8d:5e:c8:e3:18:da:10:92:de:b5:90:1a:56:fe:61:de: 29:c7:8d:06:45:c0:0c:75:d5:d7:1c:d5:15:ce:c4:f8:e8:9b: 2b:56:2d:0c:7f:46:5f:8a:f8:d1:d1:b6:cc:73:a4:3a:2e:88: af:06:e7:90:21:7f:01:bb:b3:e6:d5:c7:42:0c:37:1f:b4:e0: dd:e2:5b:de:b1:eb:fd:4b:52:e3:3a:fc:50:7b:fe:e2:0c:59: f0:ee:a2:67:45:af:18:93:9b:c2:a4:cb:17:b4:39:ca:7c:9a: e3:df:54:42:e5:12:69:d0:ff:fe:5e:72:29:73:48:57:7b:ea: 27:21:54:1e:a0:d1:df:1e:e1:2e:12:d4:d8:38:c5:f3:3b:85: 04:0d:9b:d4:b1:b2:e9:90:44:1c:00:2e:04:ef:7f:c7:dd:b7: 2a:56:be:fb:58:31:7e:12:af:df:bd:96:d6:5c:00:b7:5e:cc: 31:30:8c:a8:e9:e6:0c:26:0e:bc:95:02:56:1e:45:29:54:b1: de:65:c1:fa:42:2b:f9:77:10:dc:f4:82:a6:8c:65:01:37:e2: 7d:7a:4c:1e:73:6d:64:00:ae:e7:0d:12:65:df:c3:88:2f:bb: 19:76:9a:e9:a7:b6:d5:50:af:31:14:a5:77:0c:8e:cd:dd:21: 10:a6:6a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKm8Be/IHse9cZLUMGRCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz MGY1NDEwHhcNMjUxMjI0MjEwMTExWhcNMjUxMjI1MjEwMTExWjAzMTEwLwYDVQQD EygwY2M4ODg3NTk4NTUwMGVhMTliODdkNzRiY2FhZWMxMmQ0ZGM5ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0NdXbdH8XqKpN7qVo7fwZH7zdX9 ZBSKB3FWEMikJuQ36eeycSDXSbwRBpW9ksBtdxB6SAevqWFUbLpnASKfDI9ISAcK T09NPMN0eDDzFQ+nNn7zwRr+QD4GPANHCGnIkWu7eJNQnrjOVTSY6ADPBRYqHfm2 OZTgw9itdt47vFDF1fIs3SQ3spr8kGg8LTDv8DnCaAE1WRMVQErbjzAGoaUaMSN+ 0VDiMXlPNSCcS3snK31eoCL6m5Jb4gvQOa1PU5Zp8fbdgsYUyAwHuxYqOuARhCLt Xi5i5PyzQUtXJ9ivO731sWdER1NgnUz2gSsHUkRPItsEt13cJLznGtGV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzIiHWYVQDqGbh9dLyq7BLU3J+cMB8GA1UdIwQY MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBaNXsjj GNoQkt61kBpW/mHeKceNBkXADHXV1xzVFc7E+OibK1YtDH9GX4r40dG2zHOkOi6I rwbnkCF/Abuz5tXHQgw3H7Tg3eJb3rHr/UtS4zr8UHv+4gxZ8O6iZ0WvGJObwqTL F7Q5ynya499UQuUSadD//l5yKXNIV3vqJyFUHqDR3x7hLhLU2DjF8zuFBA2b1LGy 6ZBEHAAuBO9/x923Kla++1gxfhKv372W1lwAt17MMTCMqOnmDCYOvJUCVh5FKVSx 3mXB+kIr+XcQ3PSCpoxlATfifXpMHnNtZACu5w0SZd/DiC+7GXaa6ae21VCvMRSl dwyOzd0hEKZqTA== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:32 2025 by rpki-client