This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json) Hash identifier: 2ZoPXefiVJ6j21g5FdVIhJP2Q6gWZNzr27CZOrd+o4M= Subject key identifier: A3:DD:22:30:03:FC:00:96:7E:F2:7B:52:9B:13:64:FC:72:9D:0F:10 Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799 Certificate serial: 019AF389F42B0ECBE3D4B72FB4079C439AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft Manifest number: 1531 Signing time: Sat 06 Dec 2025 12:01:35 +0000 Manifest this update: Sat 06 Dec 2025 12:01:35 +0000 Manifest next update: Sun 07 Dec 2025 12:01:35 +0000 Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=) 2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: 5Atzi8U4fZ2Ijh50rSY73dwXmf2GyxjHb76zgkFFIAs=) 3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f4:2b:0e:cb:e3:d4:b7:2f:b4:07:9c:43:9a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799 Validity Not Before: Dec 6 12:01:35 2025 GMT Not After : Dec 7 12:01:35 2025 GMT Subject: CN=a3dd223003fc00967ef27b529b1364fc729d0f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:7c:45:d1:74:68:d6:db:49:30:1f:c2:42: 13:5b:73:55:a2:d4:0a:d5:b4:c8:ac:ac:cb:67:67: 4d:51:af:cc:1f:fc:af:d6:bf:5b:d5:05:e0:16:98: 8a:b6:1b:dd:68:60:a6:ef:99:cd:a7:96:57:5f:05: 98:38:d3:0a:4e:91:26:e4:fd:08:b8:5f:ae:79:f4: 2a:75:fa:24:a6:25:09:95:4d:26:5d:0e:5f:35:aa: 0f:fe:6c:a1:0e:e8:fd:eb:3a:40:76:6d:96:d4:67: 43:eb:d4:3a:6a:30:d0:99:34:37:a9:37:a5:e7:c8: 6f:d9:24:d7:cf:73:76:25:c4:78:e6:d7:31:6b:f6: 50:83:7d:72:c6:dc:13:b3:f2:a7:71:cd:22:a8:9d: 91:1b:ae:79:a6:65:4f:6e:59:c5:c7:97:70:f2:99: 2a:d7:d6:36:4d:ae:74:12:35:05:66:e3:76:06:81: 1e:c2:5d:40:2f:53:dd:7e:86:3b:ff:c1:9b:b4:c2: c3:e8:3f:fd:67:6c:23:9c:a8:11:a5:7e:dc:df:c2: 32:24:e1:4b:d3:75:6b:8b:87:7e:79:a4:ec:6b:cb: bd:3c:08:a1:59:c5:01:7d:56:b6:27:0c:be:27:88: 09:a5:1a:07:5a:9d:ce:8f:fa:28:39:66:74:29:cd: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:22:30:03:FC:00:96:7E:F2:7B:52:9B:13:64:FC:72:9D:0F:10 X509v3 Authority Key Identifier: keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:87:69:ff:e2:ed:d9:e5:72:ea:85:24:d7:f8:5d:d7:64:59: bc:b1:28:bc:29:8f:6b:f3:d2:f8:4a:f8:bf:f4:a9:8b:31:af: f4:50:ff:d7:b9:07:69:23:07:b3:b9:e2:b1:49:f6:18:da:0d: b6:94:b2:22:92:69:d1:fb:ec:07:36:b7:56:c9:1f:ce:56:9a: 46:56:40:51:51:ae:1f:0b:7e:8c:45:7f:c5:52:f7:cc:df:b5: 46:4e:3f:39:c4:80:0e:48:0c:f3:20:5f:1d:d4:69:a7:18:b0: 3c:c1:4c:40:94:c4:24:05:e7:3a:12:52:ed:d3:d9:6b:7b:18: 7e:94:fe:c1:6c:ed:69:94:db:61:a6:98:2d:9d:0f:7c:6c:f7: a8:6f:99:a4:61:87:55:4e:29:c2:6f:ea:c6:e5:76:63:7c:1b: a4:05:64:49:a0:e8:bb:ce:96:56:16:52:cf:7e:aa:4b:52:c9: ea:3c:7e:3f:6b:df:f9:d8:79:d9:d8:0c:3a:1c:3a:89:9d:5f: 44:0c:de:8d:b1:aa:0f:c8:56:c1:e3:a6:58:ca:6b:89:a3:da: 97:a5:83:c3:45:6d:29:9b:92:7a:e0:25:23:ae:ea:64:9f:12: 13:98:65:74:eb:15:1f:de:a5:0c:ff:f3:0a:48:1f:f3:d2:8b: 57:72:0d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifQrDsvj1LcvtAecQ5qvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk Zjc3OTkwHhcNMjUxMjA2MTIwMTM1WhcNMjUxMjA3MTIwMTM1WjAzMTEwLwYDVQQD EyhhM2RkMjIzMDAzZmMwMDk2N2VmMjdiNTI5YjEzNjRmYzcyOWQwZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7t8RdF0aNbbSTAfwkITW3NVotQK 1bTIrKzLZ2dNUa/MH/yv1r9b1QXgFpiKthvdaGCm75nNp5ZXXwWYONMKTpEm5P0I uF+uefQqdfokpiUJlU0mXQ5fNaoP/myhDuj96zpAdm2W1GdD69Q6ajDQmTQ3qTel 58hv2STXz3N2JcR45tcxa/ZQg31yxtwTs/Kncc0iqJ2RG655pmVPblnFx5dw8pkq 19Y2Ta50EjUFZuN2BoEewl1AL1PdfoY7/8GbtMLD6D/9Z2wjnKgRpX7c38IyJOFL 03Vri4d+eaTsa8u9PAihWcUBfVa2Jwy+J4gJpRoHWp3Oj/ooOWZ0Kc1knQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPdIjAD/ACWfvJ7UpsTZPxynQ8QMB8GA1UdIwQY MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4dp/+Lt 2eVy6oUk1/hd12RZvLEovCmPa/PS+Er4v/SpizGv9FD/17kHaSMHs7nisUn2GNoN tpSyIpJp0fvsBza3VskfzlaaRlZAUVGuHwt+jEV/xVL3zN+1Rk4/OcSADkgM8yBf HdRppxiwPMFMQJTEJAXnOhJS7dPZa3sYfpT+wWztaZTbYaaYLZ0PfGz3qG+ZpGGH VU4pwm/qxuV2Y3wbpAVkSaDou86WVhZSz36qS1LJ6jx+P2vf+dh52dgMOhw6iZ1f RAzejbGqD8hWweOmWMpriaPal6WDw0VtKZuSeuAlI67qZJ8SE5hldOsVH96lDP/z Ckgf89KLV3IN1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:17 2025 by rpki-client