This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json) Hash identifier: NTFFhYNA1NAFsgybV5ht+tVwomlCOebx5nlSBpJcor8= Subject key identifier: D5:BC:FD:8A:D5:50:02:60:86:F5:C0:1E:C5:E3:89:1B:6F:19:F8:71 Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41 Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541 Certificate serial: 019B3532962EBBB3FFBFE4FAA87095501AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 06:01:06 +0000 Manifest this update: Fri 19 Dec 2025 06:01:06 +0000 Manifest next update: Sat 20 Dec 2025 06:01:06 +0000 Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: ZoFB6zjEyW/LtnMJtIc8dIufqI439zOgRmMUi334hDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:96:2e:bb:b3:ff:bf:e4:fa:a8:70:95:50:1a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541 Validity Not Before: Dec 19 06:01:06 2025 GMT Not After : Dec 20 06:01:06 2025 GMT Subject: CN=d5bcfd8ad550026086f5c01ec5e3891b6f19f871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:3d:20:6b:57:f3:a1:f4:da:b8:64:21:37: eb:a4:96:98:cc:56:ab:fd:28:c2:fe:0f:5c:bc:e8: 42:4b:55:57:8c:c7:15:0b:64:6e:67:6f:c3:9a:a3: 3c:4e:0b:d0:6f:92:64:0c:92:ec:55:a0:13:15:b3: a3:1f:ed:a7:a5:ac:7e:d2:07:f0:6b:89:54:59:31: 1a:d0:5d:fd:2f:33:37:6d:4c:b2:89:be:84:c5:0a: 04:36:3f:7a:d8:7e:42:23:5e:7a:82:bb:0a:cd:c2: 8c:c8:34:41:19:e3:fb:62:bb:f3:bb:15:9a:b9:82: 7b:91:82:65:90:76:91:03:53:fa:7b:6a:4a:aa:f5: c3:83:2e:ff:d5:d7:46:2a:b0:01:d4:12:2a:ba:33: f0:20:a4:23:d9:30:a8:bc:f9:6a:dc:c8:87:03:d4: 37:e8:62:f1:32:bc:08:ee:b5:a5:2e:e2:08:69:67: 5d:6d:70:61:33:50:eb:a1:e8:1c:d8:f6:f6:7e:fe: b2:d5:34:42:0a:33:db:b8:33:cc:3d:6f:f5:16:e6: d0:59:1b:6d:f2:3b:4c:84:5c:64:d3:fb:ec:46:66: 7c:9b:63:c3:ca:a1:86:56:ad:6a:85:e6:a7:6b:2b: e2:9f:ec:74:cc:d3:30:c8:a1:2e:80:f3:fe:d6:b7: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:FD:8A:D5:50:02:60:86:F5:C0:1E:C5:E3:89:1B:6F:19:F8:71 X509v3 Authority Key Identifier: keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:84:75:81:db:83:64:e5:01:ad:64:cc:41:24:6a:3d:0e:14: b2:96:b2:fe:bd:18:32:70:8f:7d:af:86:2c:94:57:6c:b5:7d: d0:dd:47:2c:89:2b:1f:ad:51:b7:a5:63:17:fa:30:07:91:fa: 63:39:44:20:c1:47:cd:d8:5c:64:4f:a2:c7:86:80:28:88:79: d5:13:03:4a:1f:60:d5:be:8f:98:3e:15:ae:5c:07:ce:6c:ec: 07:d5:7a:1d:a0:50:28:e5:78:7f:6a:55:06:97:a6:5d:f1:39: 74:bf:c8:ff:e4:bc:54:a4:41:9f:6a:f5:a7:6e:14:b2:44:73: 38:ad:c1:49:fa:09:d0:29:25:e2:d2:ce:0a:ec:b1:40:23:2f: 13:e2:5e:97:f6:ce:87:07:aa:d4:2d:ba:04:aa:f4:62:c3:9e: 64:03:33:ab:45:88:40:f1:89:95:50:25:f7:ea:d3:6d:80:6b: 8e:bb:21:2b:b8:f0:8c:e5:8c:82:86:08:0a:db:2d:49:df:8b: 85:d9:75:b2:73:7c:14:05:53:48:b9:83:87:3f:ab:83:64:a2: f2:7b:21:bf:f8:cf:a2:15:7a:0a:52:b2:63:7d:a9:c6:13:59: 59:6b:c6:d9:76:9d:f2:53:dd:4f:d8:63:cb:6d:51:1f:51:a6: ae:12:fd:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MpYuu7P/v+T6qHCVUBruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz MGY1NDEwHhcNMjUxMjE5MDYwMTA2WhcNMjUxMjIwMDYwMTA2WjAzMTEwLwYDVQQD EyhkNWJjZmQ4YWQ1NTAwMjYwODZmNWMwMWVjNWUzODkxYjZmMTlmODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0M9IGtX86H02rhkITfrpJaYzFar /SjC/g9cvOhCS1VXjMcVC2RuZ2/DmqM8TgvQb5JkDJLsVaATFbOjH+2npax+0gfw a4lUWTEa0F39LzM3bUyyib6ExQoENj962H5CI156grsKzcKMyDRBGeP7YrvzuxWa uYJ7kYJlkHaRA1P6e2pKqvXDgy7/1ddGKrAB1BIqujPwIKQj2TCovPlq3MiHA9Q3 6GLxMrwI7rWlLuIIaWddbXBhM1Droegc2Pb2fv6y1TRCCjPbuDPMPW/1FubQWRtt 8jtMhFxk0/vsRmZ8m2PDyqGGVq1qheanayvin+x0zNMwyKEugPP+1rf/CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW8/YrVUAJghvXAHsXjiRtvGfhxMB8GA1UdIwQY MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoR1gduD ZOUBrWTMQSRqPQ4Uspay/r0YMnCPfa+GLJRXbLV90N1HLIkrH61Rt6VjF/owB5H6 YzlEIMFHzdhcZE+ix4aAKIh51RMDSh9g1b6PmD4VrlwHzmzsB9V6HaBQKOV4f2pV BpemXfE5dL/I/+S8VKRBn2r1p24UskRzOK3BSfoJ0Ckl4tLOCuyxQCMvE+Jel/bO hweq1C26BKr0YsOeZAMzq0WIQPGJlVAl9+rTbYBrjrshK7jwjOWMgoYICtstSd+L hdl1snN8FAVTSLmDhz+rg2Si8nshv/jPohV6ClKyY32pxhNZWWvG2Xad8lPdT9hj y21RH1GmrhL9Ig== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:45 2025 by rpki-client