This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json) Hash identifier: xKcSWLeyWHE4CrlGY1XoR2nct+7dyW4RS9O0P8j8Xqw= Subject key identifier: E2:36:39:70:74:42:9B:4C:D6:4D:30:3E:51:CC:42:D5:7A:F4:73:E7 Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799 Certificate serial: 019B353260AB6516F2C51A7B708EBFE492D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft Manifest number: 1553 Signing time: Fri 19 Dec 2025 06:00:52 +0000 Manifest this update: Fri 19 Dec 2025 06:00:52 +0000 Manifest next update: Sat 20 Dec 2025 06:00:52 +0000 Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=) 2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: BTrj5gHUDlCqkT9iNYbFXmJ/P/GdISrLv7tXydLB7xA=) 3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:60:ab:65:16:f2:c5:1a:7b:70:8e:bf:e4:92:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799 Validity Not Before: Dec 19 06:00:52 2025 GMT Not After : Dec 20 06:00:52 2025 GMT Subject: CN=e236397074429b4cd64d303e51cc42d57af473e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:6a:c0:f8:f1:48:1a:b9:a0:a3:9a:cd:c7: fb:69:0b:e9:ae:2f:b5:7c:05:9a:2e:d0:23:df:51: 9c:60:bd:6e:5d:ea:10:fc:da:1d:02:b7:eb:b1:cf: a0:2c:a9:6d:9a:29:4f:57:b0:f3:8d:ce:69:19:e0: b8:cc:3c:e5:ce:f7:c7:f3:67:aa:6c:e9:2a:20:92: e7:4e:54:3c:36:1b:cb:2f:27:b2:26:6f:90:76:4c: 50:75:04:e3:60:42:46:7b:15:bd:f7:f0:9c:12:32: a6:b9:40:10:59:fa:57:b3:68:85:0d:6c:8b:ea:9f: a9:af:2a:33:9c:76:50:f5:5f:92:ce:fb:8d:04:32: 93:65:56:e0:d4:2d:f4:bf:05:8a:e9:d4:ad:71:86: 86:32:80:a2:38:a4:c8:5b:d4:0c:2d:71:21:e1:45: c4:b4:e3:35:97:d7:92:1d:b2:a2:02:10:ce:14:4a: 94:c3:94:b4:bd:68:31:e6:14:f8:5f:10:d9:70:3d: 9d:33:21:3f:22:a9:04:2c:0c:d8:b5:f8:27:bb:44: f4:48:27:65:e1:68:ab:c4:dc:88:ff:6b:6c:51:28: 3c:46:d4:2e:34:eb:4c:a6:69:ac:ab:4d:39:58:f4: 4d:77:66:60:35:5d:b8:cc:eb:2d:ac:30:2d:70:89: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:36:39:70:74:42:9B:4C:D6:4D:30:3E:51:CC:42:D5:7A:F4:73:E7 X509v3 Authority Key Identifier: keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:13:dd:9d:6b:63:9d:99:d2:89:50:1c:38:91:fc:5f:b9:c3: 7d:01:47:c7:55:72:83:f2:41:36:20:82:ed:21:45:16:6d:3b: ac:18:af:43:64:4a:ed:6b:bb:f1:2a:63:b3:33:36:cc:a7:93: 4e:56:0a:ee:f0:f3:20:a9:e9:d1:2f:59:66:e9:78:af:fc:05: 81:e5:a9:30:7f:0e:84:fc:a1:85:e4:e7:de:e2:44:f9:a5:7a: b6:03:14:8d:cc:41:8c:04:b6:27:16:52:c2:c2:0b:e4:c6:a7: 2f:d2:0f:5a:45:23:30:e4:91:5e:bc:1a:f4:ca:5f:09:99:b2: 56:d5:c2:b7:ec:ff:7e:aa:90:d3:45:6d:d3:af:cf:e8:c3:87: b9:a5:a5:82:0c:48:7a:56:25:fc:70:4a:45:1c:29:8b:4e:0c: a4:c5:ee:0d:d3:9a:a3:1c:b4:d2:2c:5e:fc:09:2a:3e:dd:c4: 8c:8a:d3:cf:01:f4:17:a0:64:f3:8f:af:a9:57:e1:22:41:f4: 29:11:6f:d2:10:ea:fd:94:f1:ea:5f:86:d3:79:85:ef:3b:bb: 4a:3b:18:89:08:76:c1:6f:f8:dc:1b:a3:07:93:b8:33:28:39: 29:99:a4:66:d1:ba:a3:66:ad:1f:2e:30:96:66:da:0d:2d:92: 7b:a0:72:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MmCrZRbyxRp7cI6/5JLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk Zjc3OTkwHhcNMjUxMjE5MDYwMDUyWhcNMjUxMjIwMDYwMDUyWjAzMTEwLwYDVQQD EyhlMjM2Mzk3MDc0NDI5YjRjZDY0ZDMwM2U1MWNjNDJkNTdhZjQ3M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArexqwPjxSBq5oKOazcf7aQvpri+1 fAWaLtAj31GcYL1uXeoQ/NodArfrsc+gLKltmilPV7Dzjc5pGeC4zDzlzvfH82eq bOkqIJLnTlQ8NhvLLyeyJm+QdkxQdQTjYEJGexW99/CcEjKmuUAQWfpXs2iFDWyL 6p+pryoznHZQ9V+SzvuNBDKTZVbg1C30vwWK6dStcYaGMoCiOKTIW9QMLXEh4UXE tOM1l9eSHbKiAhDOFEqUw5S0vWgx5hT4XxDZcD2dMyE/IqkELAzYtfgnu0T0SCdl 4WirxNyI/2tsUSg8RtQuNOtMpmmsq005WPRNd2ZgNV24zOstrDAtcImTFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI2OXB0QptM1k0wPlHMQtV69HPnMB8GA1UdIwQY MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxPdnWtj nZnSiVAcOJH8X7nDfQFHx1Vyg/JBNiCC7SFFFm07rBivQ2RK7Wu78SpjszM2zKeT TlYK7vDzIKnp0S9ZZul4r/wFgeWpMH8OhPyhheTn3uJE+aV6tgMUjcxBjAS2JxZS wsIL5ManL9IPWkUjMOSRXrwa9MpfCZmyVtXCt+z/fqqQ00Vt06/P6MOHuaWlggxI elYl/HBKRRwpi04MpMXuDdOaoxy00ixe/AkqPt3EjIrTzwH0F6Bk84+vqVfhIkH0 KRFv0hDq/ZTx6l+G03mF7zu7SjsYiQh2wW/43BujB5O4Myg5KZmkZtG6o2atHy4w lmbaDS2Se6BysA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:00 2025 by rpki-client