This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft File: RBMe6Tam-kL_OvCmrobCxmU91XM.mft (raw, json) Hash identifier: cck4MPas7DLfqbToAG2JhgGuMD5KAz6r6zrlTNTky40= Subject key identifier: FA:18:37:1F:D6:E4:04:90:01:7F:3D:81:13:6C:7F:DA:B5:86:56:18 Authority key identifier: 44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73 Certificate issuer: /CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573 Certificate serial: 019B10B835D5BCE843F0176E865D8A82AD91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 04:01:06 +0000 Manifest this update: Fri 12 Dec 2025 04:01:06 +0000 Manifest next update: Sat 13 Dec 2025 04:01:06 +0000 Files and hashes: 1: RBMe6Tam-kL_OvCmrobCxmU91XM.crl (hash: 5gKsrmtFtGatXTgkt26Hl4d5sCgtKOKVNZBnz9ntowU=) 2: xHkJHzTD8_YsVJb1E014CGyqfNk.roa (hash: vU0FBIoesehMBLGSsYMRz2M7MHLMPr/AmIolqA/4dRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:35:d5:bc:e8:43:f0:17:6e:86:5d:8a:82:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44131ee936a6fa42ff3af0a6ae86c2c6653dd573 Validity Not Before: Dec 12 04:01:06 2025 GMT Not After : Dec 13 04:01:06 2025 GMT Subject: CN=fa18371fd6e40490017f3d81136c7fdab5865618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:e3:40:98:52:c6:38:02:f1:e4:6b:04:4e: ae:e0:b9:7f:c4:24:48:c9:d5:e8:0e:2c:2c:25:29: ee:2c:24:32:78:e8:3d:0c:01:cf:f1:d5:0a:df:26: c2:32:50:1f:59:aa:b7:a5:7b:b7:b9:4a:b5:5b:7c: fb:49:bd:d7:4a:ee:00:7d:75:d3:b6:a9:dd:ad:3b: bb:59:b6:f4:8d:1a:a1:fd:86:2d:ad:97:3f:99:48: c7:13:80:cb:30:c1:86:7f:11:22:38:5c:28:1f:f4: 48:47:59:13:45:70:a9:84:ca:19:2e:1b:c8:45:67: 0f:7e:95:41:3b:6a:f4:b9:97:8e:1f:43:6e:03:11: 13:e8:09:ba:85:7c:d6:02:62:96:15:88:df:b8:a7: 84:a0:f2:7d:f9:c2:d2:f1:56:1a:ee:3a:93:fa:8e: d2:99:39:2e:23:f8:d0:80:ec:8e:48:2f:dc:99:cc: 1b:dd:62:9a:b1:09:d0:cf:4a:e9:7a:d2:df:8d:42: f9:65:f1:5d:18:9b:0e:20:99:a4:60:f6:cc:23:60: df:54:03:4d:11:55:af:22:83:be:0b:b3:80:fb:11: 35:b7:c0:a0:bc:ad:23:c2:b4:00:be:d6:31:08:e4: 97:79:a3:ea:b4:31:ce:fd:77:02:a7:10:bb:79:d3: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:18:37:1F:D6:E4:04:90:01:7F:3D:81:13:6C:7F:DA:B5:86:56:18 X509v3 Authority Key Identifier: keyid:44:13:1E:E9:36:A6:FA:42:FF:3A:F0:A6:AE:86:C2:C6:65:3D:D5:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBMe6Tam-kL_OvCmrobCxmU91XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1d44f2-1706-4bf1-b71d-74ca36402a85/1/RBMe6Tam-kL_OvCmrobCxmU91XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3a:bc:e9:c4:a8:78:8d:94:6c:ea:2d:bd:4b:68:51:ea:27: 82:15:20:2a:eb:d9:00:2a:84:dc:09:74:00:80:cf:86:52:61: a3:4c:1a:3d:f7:ff:25:dd:87:db:c0:12:34:b4:ed:c8:0f:18: 67:ae:e3:37:27:90:d8:d2:54:12:37:ee:9c:71:83:fb:4f:fd: 0f:75:c3:f4:5a:5f:60:aa:aa:07:76:35:f0:87:a6:f1:2a:cf: 44:0a:4c:6e:bf:3c:ab:de:9b:98:96:b8:ea:66:f6:1c:53:b6: 3e:30:0a:df:9f:fd:d2:2b:61:9a:b5:2b:a8:d5:1b:97:28:d7: eb:64:c0:35:25:46:e1:a2:7c:33:40:0f:8a:9b:a7:4d:78:2b: 00:a7:06:84:52:67:a8:29:b6:0c:d9:0b:8b:6d:08:e0:fd:73: b4:37:53:97:93:ad:ed:81:0c:09:64:e3:b6:52:cc:1a:64:ea: 9e:38:62:73:7a:b3:e9:1e:e0:fe:c6:e6:d9:bf:91:d7:a3:b0: bd:55:a1:c8:06:48:3d:24:b3:90:f8:e2:aa:2c:a3:a7:36:17: 01:7b:7f:5a:69:ac:cd:49:bf:c5:49:cd:4e:8a:05:84:da:4d: 85:51:29:45:e7:73:aa:5c:4f:b9:55:88:e4:73:fb:ae:8c:0b: ea:91:3f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuDXVvOhD8Bduhl2Kgq2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTMxZWU5MzZhNmZhNDJmZjNhZjBhNmFlODZjMmM2NjUz ZGQ1NzMwHhcNMjUxMjEyMDQwMTA2WhcNMjUxMjEzMDQwMTA2WjAzMTEwLwYDVQQD EyhmYTE4MzcxZmQ2ZTQwNDkwMDE3ZjNkODExMzZjN2ZkYWI1ODY1NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4LjQJhSxjgC8eRrBE6u4Ll/xCRI ydXoDiwsJSnuLCQyeOg9DAHP8dUK3ybCMlAfWaq3pXu3uUq1W3z7Sb3XSu4AfXXT tqndrTu7Wbb0jRqh/YYtrZc/mUjHE4DLMMGGfxEiOFwoH/RIR1kTRXCphMoZLhvI RWcPfpVBO2r0uZeOH0NuAxET6Am6hXzWAmKWFYjfuKeEoPJ9+cLS8VYa7jqT+o7S mTkuI/jQgOyOSC/cmcwb3WKasQnQz0rpetLfjUL5ZfFdGJsOIJmkYPbMI2DfVANN EVWvIoO+C7OA+xE1t8CgvK0jwrQAvtYxCOSXeaPqtDHO/XcCpxC7edOXLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoYNx/W5ASQAX89gRNsf9q1hlYYMB8GA1UdIwQY MBaAFEQTHuk2pvpC/zrwpq6GwsZlPdVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJNZTZUYW0ta0xfT3ZDbXJvYkN4bVU5MVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZDQ0ZjItMTcwNi00YmYxLWI3MWQt NzRjYTM2NDAyYTg1LzEvUkJNZTZUYW0ta0xfT3ZDbXJvYkN4bVU5MVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZDQ0ZjItMTcwNi00YmYxLWI3MWQtNzRjYTM2NDAyYTg1 LzEvUkJNZTZUYW0ta0xfT3ZDbXJvYkN4bVU5MVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDq86cSo eI2UbOotvUtoUeonghUgKuvZACqE3Al0AIDPhlJho0waPff/Jd2H28ASNLTtyA8Y Z67jNyeQ2NJUEjfunHGD+0/9D3XD9FpfYKqqB3Y18Iem8SrPRApMbr88q96bmJa4 6mb2HFO2PjAK35/90ithmrUrqNUblyjX62TANSVG4aJ8M0APipunTXgrAKcGhFJn qCm2DNkLi20I4P1ztDdTl5Ot7YEMCWTjtlLMGmTqnjhic3qz6R7g/sbm2b+R16Ow vVWhyAZIPSSzkPjiqiyjpzYXAXt/WmmszUm/xUnNTooFhNpNhVEpRedzqlxPuVWI 5HP7rowL6pE/Uw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:28:57 2025 by rpki-client