This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json) Hash identifier: 7Ts6Jw9O+qznCwh3yHCi/i2taRlW4L/4r5xj7dedyqk= Subject key identifier: B4:D6:E6:DA:48:38:F0:03:C2:56:78:63:61:96:26:C8:1C:9D:BA:B4 Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41 Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541 Certificate serial: 019B619D7A9DC819791C076918AA517CDA76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 21:01:09 +0000 Manifest this update: Sat 27 Dec 2025 21:01:09 +0000 Manifest next update: Sun 28 Dec 2025 21:01:09 +0000 Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: M7D8k5gvVm4lqXMcP5eiL1q1oge1dtgG245KI9/IPw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:7a:9d:c8:19:79:1c:07:69:18:aa:51:7c:da:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541 Validity Not Before: Dec 27 21:01:09 2025 GMT Not After : Dec 28 21:01:09 2025 GMT Subject: CN=b4d6e6da4838f003c2567863619626c81c9dbab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:a5:00:33:52:46:cf:8f:82:e8:32:8f:7b: b9:96:a0:45:6d:7b:fe:ac:94:9b:d3:16:4e:d7:f8: 07:78:52:aa:eb:d2:8c:8a:d4:62:3d:0e:78:07:d6: b1:d2:69:ce:2d:64:76:e0:a0:04:f8:91:fc:6c:7e: 05:c8:12:0e:7f:66:e4:e1:c6:94:b8:87:12:2d:94: 3c:2e:de:0c:96:b9:bd:7d:f3:70:56:4d:d6:de:94: b8:4b:6a:8c:11:c1:ad:71:f7:62:5d:ad:8b:ce:0c: f0:17:15:cf:db:34:e4:ea:32:ac:11:8e:28:ca:93: 5e:9f:bf:25:f9:e5:5a:35:a6:81:30:85:50:67:5b: b4:87:aa:e1:50:93:10:f2:f0:a6:a7:3c:79:d7:b4: 36:b1:94:9e:14:66:7b:4a:8f:f6:83:3e:6f:f4:92: 6f:ae:6a:0e:87:dc:b2:62:55:af:f1:ef:20:e6:16: c8:c8:84:9f:35:8c:35:c4:4b:45:ff:cc:62:3e:5b: 25:99:b4:0b:92:74:f7:3b:b2:c9:98:05:c2:4d:f2: e3:69:01:5c:cf:54:68:6b:4a:4f:0c:36:c3:0a:6e: e5:cb:c2:fd:ac:ba:80:f2:1e:94:b8:bb:05:74:0c: f3:51:8c:20:a6:a1:19:fb:df:53:d9:58:8d:51:05: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D6:E6:DA:48:38:F0:03:C2:56:78:63:61:96:26:C8:1C:9D:BA:B4 X509v3 Authority Key Identifier: keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:45:cc:b1:5e:05:06:a1:e4:48:3e:82:47:42:ee:86:c2:8a: 82:1d:6b:4f:50:d4:97:7d:87:27:63:8c:66:3e:86:4e:0f:5f: 6f:8f:98:ae:aa:d0:21:b9:ba:fa:0a:68:80:2c:6c:6a:eb:f0: 2a:96:39:a7:7e:c6:1f:6b:84:fa:69:84:9b:f7:80:bf:54:9f: 4d:ca:ad:4c:b0:76:08:0c:aa:a8:5a:d9:af:93:12:db:63:5c: a6:91:86:fc:46:ea:12:f6:8d:36:c3:43:c9:e4:32:68:d9:6f: 99:cb:8d:28:3f:f8:f7:30:91:05:f0:b6:97:0b:5c:2c:3c:8c: 90:15:cd:fa:f7:2a:70:3e:92:5d:cd:3b:b7:04:6b:85:b9:10: 09:87:be:09:2a:58:ad:10:bd:36:33:b0:93:ed:48:c8:c7:19: 21:d5:f7:50:cb:1a:08:88:ba:8f:4c:fa:1a:4f:29:ab:88:dc: c0:dd:68:65:41:4b:64:dc:8e:1b:be:d3:6d:af:60:43:e1:70: 36:e1:c5:5d:6e:f7:b2:3f:af:a3:a8:43:25:7e:00:bd:46:4d: d4:15:e4:a8:86:d7:b2:78:5e:48:66:11:70:3a:ee:46:e3:79: 11:0b:5a:95:ce:57:a8:68:f4:4a:02:b2:98:02:59:cf:ba:54: 54:12:9e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnXqdyBl5HAdpGKpRfNp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz MGY1NDEwHhcNMjUxMjI3MjEwMTA5WhcNMjUxMjI4MjEwMTA5WjAzMTEwLwYDVQQD EyhiNGQ2ZTZkYTQ4MzhmMDAzYzI1Njc4NjM2MTk2MjZjODFjOWRiYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszqlADNSRs+Pgugyj3u5lqBFbXv+ rJSb0xZO1/gHeFKq69KMitRiPQ54B9ax0mnOLWR24KAE+JH8bH4FyBIOf2bk4caU uIcSLZQ8Lt4Mlrm9ffNwVk3W3pS4S2qMEcGtcfdiXa2LzgzwFxXP2zTk6jKsEY4o ypNen78l+eVaNaaBMIVQZ1u0h6rhUJMQ8vCmpzx517Q2sZSeFGZ7So/2gz5v9JJv rmoOh9yyYlWv8e8g5hbIyISfNYw1xEtF/8xiPlslmbQLknT3O7LJmAXCTfLjaQFc z1Roa0pPDDbDCm7ly8L9rLqA8h6UuLsFdAzzUYwgpqEZ+99T2ViNUQXB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTW5tpIOPADwlZ4Y2GWJsgcnbq0MB8GA1UdIwQY MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEXMsV4F BqHkSD6CR0LuhsKKgh1rT1DUl32HJ2OMZj6GTg9fb4+YrqrQIbm6+gpogCxsauvw KpY5p37GH2uE+mmEm/eAv1SfTcqtTLB2CAyqqFrZr5MS22NcppGG/EbqEvaNNsND yeQyaNlvmcuNKD/49zCRBfC2lwtcLDyMkBXN+vcqcD6SXc07twRrhbkQCYe+CSpY rRC9NjOwk+1IyMcZIdX3UMsaCIi6j0z6Gk8pq4jcwN1oZUFLZNyOG77Tba9gQ+Fw NuHFXW73sj+vo6hDJX4AvUZN1BXkqIbXsnheSGYRcDruRuN5EQtalc5XqGj0SgKy mAJZz7pUVBKe5g== -----END CERTIFICATE-----Generated at Sun Dec 28 03:16:20 2025 by rpki-client