This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json) Hash identifier: UKdkvGYlH8NsOYkEJl3l+rSU4cvDIgQLz0T1ZzkwzI0= Subject key identifier: E9:34:36:FD:79:F4:08:D0:AC:43:39:04:57:56:3E:57:FC:06:6D:6E Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799 Certificate serial: 019B2F673F1520BC35D24F344598A940E901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft Manifest number: 1550 Signing time: Thu 18 Dec 2025 03:00:53 +0000 Manifest this update: Thu 18 Dec 2025 03:00:53 +0000 Manifest next update: Fri 19 Dec 2025 03:00:53 +0000 Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=) 2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: uMt61JX+I/X5o3nmos4QDBxmtZRKpSQO6tFBWW3AHnE=) 3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:3f:15:20:bc:35:d2:4f:34:45:98:a9:40:e9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799 Validity Not Before: Dec 18 03:00:53 2025 GMT Not After : Dec 19 03:00:53 2025 GMT Subject: CN=e93436fd79f408d0ac43390457563e57fc066d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:d0:87:a0:05:c7:37:67:1d:c9:88:6e:19: 1a:74:e7:e7:dd:83:b5:1e:27:d0:3d:95:a6:df:51: 80:9c:a8:06:91:85:f2:56:ad:36:39:26:55:9b:e3: 66:37:94:44:5a:fa:a6:a5:fe:17:26:a3:ee:e6:b9: f1:2d:72:67:55:f1:b9:29:17:46:fd:40:c9:fa:4a: dc:77:0e:c1:ac:d1:e5:14:12:e5:32:e8:23:f1:5b: 90:9b:dc:8d:8b:ea:a2:61:99:fa:24:bc:f0:92:c1: 85:17:df:c9:59:4f:bb:14:2f:ea:09:01:77:39:07: 8b:d8:3e:12:ec:44:46:2a:c7:00:55:72:36:40:ff: 82:9b:bf:a1:1f:84:6b:a7:53:65:19:28:e9:11:52: bb:29:a8:20:2a:b9:e1:bb:69:4d:26:d9:a5:a8:fd: 4b:50:62:bc:50:65:29:26:a4:27:b2:8d:fd:d2:f0: a9:85:12:d5:fe:0c:79:a4:ee:ed:38:49:c5:6a:3f: 15:5c:d1:e4:29:36:e1:75:02:6f:05:18:bd:a3:b5: ae:fd:ca:b1:cd:0b:05:58:d9:f4:29:44:7e:59:cd: 33:3b:26:b9:20:e5:07:93:5b:da:ee:e3:f3:fc:ca: ac:3d:ec:b2:ec:46:cb:90:25:5b:2e:64:d8:04:0e: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:36:FD:79:F4:08:D0:AC:43:39:04:57:56:3E:57:FC:06:6D:6E X509v3 Authority Key Identifier: keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0c:57:0d:3f:d9:8f:0b:80:07:14:b2:cb:13:5e:6f:b8:bd: 04:4e:10:7d:d1:de:b6:42:af:fe:f8:54:60:44:07:0b:b5:a9: 59:db:58:c9:9a:20:d0:25:e8:55:b2:89:30:70:55:3e:74:67: 0e:2a:93:39:e8:23:97:92:1b:cc:a6:96:f7:7f:bb:1e:70:eb: f5:52:dc:01:40:ae:c8:5e:b1:dc:70:0f:0d:7d:e6:cc:6f:3f: da:08:56:08:ec:66:4a:4a:88:be:10:44:e4:36:c0:74:ba:1d: d3:38:7a:81:d7:4b:08:84:ba:af:a9:28:eb:51:6b:66:18:12: 18:84:6b:80:05:e2:25:23:6e:3d:5a:e9:93:42:6d:68:84:bc: df:b3:8c:d5:4d:4d:bd:95:9a:9c:b1:47:60:60:34:02:8b:3b: 0b:02:3b:a6:be:63:79:f6:7a:c2:c6:a1:2d:80:b7:98:68:ab: 10:5e:b4:91:3e:db:07:be:ff:7c:00:09:91:27:0c:77:17:57: 4e:e1:34:e6:1b:46:a5:87:2b:bb:3f:6c:8e:b7:a2:f9:5f:cc: da:79:b7:ab:95:e7:38:7f:05:ee:67:5b:c1:03:b3:f9:0b:b7: c0:5c:82:41:c9:ab:27:33:a8:26:4e:e4:c4:14:36:16:b1:0c: b4:c0:56:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZz8VILw10k80RZipQOkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk Zjc3OTkwHhcNMjUxMjE4MDMwMDUzWhcNMjUxMjE5MDMwMDUzWjAzMTEwLwYDVQQD EyhlOTM0MzZmZDc5ZjQwOGQwYWM0MzM5MDQ1NzU2M2U1N2ZjMDY2ZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AHQh6AFxzdnHcmIbhkadOfn3YO1 HifQPZWm31GAnKgGkYXyVq02OSZVm+NmN5REWvqmpf4XJqPu5rnxLXJnVfG5KRdG /UDJ+krcdw7BrNHlFBLlMugj8VuQm9yNi+qiYZn6JLzwksGFF9/JWU+7FC/qCQF3 OQeL2D4S7ERGKscAVXI2QP+Cm7+hH4Rrp1NlGSjpEVK7KaggKrnhu2lNJtmlqP1L UGK8UGUpJqQnso390vCphRLV/gx5pO7tOEnFaj8VXNHkKTbhdQJvBRi9o7Wu/cqx zQsFWNn0KUR+Wc0zOya5IOUHk1va7uPz/MqsPeyy7EbLkCVbLmTYBA7EUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk0Nv159AjQrEM5BFdWPlf8Bm1uMB8GA1UdIwQY MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwxXDT/Z jwuABxSyyxNeb7i9BE4QfdHetkKv/vhUYEQHC7WpWdtYyZog0CXoVbKJMHBVPnRn DiqTOegjl5IbzKaW93+7HnDr9VLcAUCuyF6x3HAPDX3mzG8/2ghWCOxmSkqIvhBE 5DbAdLod0zh6gddLCIS6r6ko61FrZhgSGIRrgAXiJSNuPVrpk0JtaIS837OM1U1N vZWanLFHYGA0Aos7CwI7pr5jefZ6wsahLYC3mGirEF60kT7bB77/fAAJkScMdxdX TuE05htGpYcruz9sjrei+V/M2nm3q5XnOH8F7mdbwQOz+Qu3wFyCQcmrJzOoJk7k xBQ2FrEMtMBWmQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:54:00 2025 by rpki-client