This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json) Hash identifier: MTaHLewyV+bD0Q1cUKPGBG/hSC0zkHRBavWmuIQoYWU= Subject key identifier: A3:BA:95:EF:26:96:B6:B3:F3:DB:10:B2:3C:32:3C:5A:16:49:B8:BA Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799 Certificate serial: 019B2B8AAF7A4E3535CE477DC64DE605F2C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft Manifest number: 154E Signing time: Wed 17 Dec 2025 09:01:07 +0000 Manifest this update: Wed 17 Dec 2025 09:01:07 +0000 Manifest next update: Thu 18 Dec 2025 09:01:07 +0000 Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=) 2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: Hs49zj3hGjwgd55+5ADSC6YPZ6wT+0kGa1n4eJgCGiM=) 3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:af:7a:4e:35:35:ce:47:7d:c6:4d:e6:05:f2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799 Validity Not Before: Dec 17 09:01:07 2025 GMT Not After : Dec 18 09:01:07 2025 GMT Subject: CN=a3ba95ef2696b6b3f3db10b23c323c5a1649b8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:5e:27:5f:a5:f0:1e:78:bf:0a:78:56:cd: b5:87:17:ea:a1:41:ee:79:13:a4:52:20:86:22:01: c0:8f:00:89:e9:4f:95:e1:35:0b:b1:56:b6:45:b5: 97:85:51:14:40:3f:00:bb:e7:c0:43:22:f6:80:4e: fd:ea:36:e5:a0:02:2a:4e:49:4a:2f:c3:ae:22:d6: da:4c:c2:7e:f8:b0:26:42:4b:48:88:b0:6a:49:bc: 8b:37:ce:7e:31:8f:f3:19:b6:06:e0:5a:7d:d0:e4: 8a:86:d6:11:47:35:51:37:c8:4a:f3:f4:24:9f:27: 95:ed:80:e1:ed:cb:20:bb:5a:d7:17:18:a0:1d:bd: bf:24:86:38:36:ef:1c:d9:8b:71:e1:1f:0f:bc:46: 95:d3:1c:e3:a2:36:a1:a8:21:d9:44:03:0c:e4:8f: 64:9d:eb:9d:9d:32:bb:6f:3f:f3:bc:21:6f:32:d6: f2:f4:f1:63:71:08:94:3a:ac:e3:c3:30:4e:46:cb: c4:4e:67:f7:2c:aa:21:a5:01:0c:47:fe:e2:2e:51: 32:05:40:70:27:c6:a9:25:5f:7e:15:6b:b5:88:42: 92:57:1c:5c:24:33:b8:93:bc:54:97:c8:48:e8:56: 0e:25:ab:83:93:ef:13:58:c2:30:0f:e4:d6:f1:62: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:95:EF:26:96:B6:B3:F3:DB:10:B2:3C:32:3C:5A:16:49:B8:BA X509v3 Authority Key Identifier: keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:23:cb:77:26:c5:27:50:54:63:5f:ed:10:f2:6a:1f:bf:41: e3:c5:35:f4:e8:a8:91:fb:ca:03:0a:09:66:44:4b:d5:3e:b0: 24:a2:29:99:a0:3c:2a:c2:77:89:a5:18:a9:2b:62:ec:77:de: 1a:dc:09:1f:9b:93:7a:e0:f8:be:ca:37:d6:96:04:51:c6:39: ff:7a:b3:af:ea:a0:c5:52:43:18:7a:d2:81:f0:d0:33:0b:d9: 56:e9:c8:0a:ff:88:e5:c0:2d:89:e3:54:05:52:ce:05:a8:ae: 79:99:2e:78:8b:e4:39:3f:f6:4e:68:9c:34:db:80:c5:ef:1a: 5c:f9:6c:00:ed:43:81:56:c5:bd:f8:a5:96:c1:16:e5:ff:5e: 9e:86:0c:11:e7:a0:66:3e:ae:84:92:e8:f0:53:92:ae:87:53: a5:56:93:bb:18:68:32:d1:ac:4f:83:c4:9b:12:4b:da:f8:ce: 80:2f:54:a1:b9:57:a6:1a:12:ad:65:d2:ef:d4:bb:56:bd:86: 6c:dc:33:14:2e:68:4e:9f:dc:6c:ec:80:f8:82:a1:a7:76:6f: 15:51:93:61:4e:ab:61:be:ae:37:54:eb:f5:e2:59:5a:ae:69: aa:c1:fd:19:05:bc:d5:2d:c5:85:72:bf:8c:98:3e:36:39:db: 7c:d4:19:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriq96TjU1zkd9xk3mBfLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk Zjc3OTkwHhcNMjUxMjE3MDkwMTA3WhcNMjUxMjE4MDkwMTA3WjAzMTEwLwYDVQQD EyhhM2JhOTVlZjI2OTZiNmIzZjNkYjEwYjIzYzMyM2M1YTE2NDliOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCpeJ1+l8B54vwp4Vs21hxfqoUHu eROkUiCGIgHAjwCJ6U+V4TULsVa2RbWXhVEUQD8Au+fAQyL2gE796jbloAIqTklK L8OuItbaTMJ++LAmQktIiLBqSbyLN85+MY/zGbYG4Fp90OSKhtYRRzVRN8hK8/Qk nyeV7YDh7csgu1rXFxigHb2/JIY4Nu8c2Ytx4R8PvEaV0xzjojahqCHZRAMM5I9k neudnTK7bz/zvCFvMtby9PFjcQiUOqzjwzBORsvETmf3LKohpQEMR/7iLlEyBUBw J8apJV9+FWu1iEKSVxxcJDO4k7xUl8hI6FYOJauDk+8TWMIwD+TW8WJvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKO6le8mlraz89sQsjwyPFoWSbi6MB8GA1UdIwQY MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyPLdybF J1BUY1/tEPJqH79B48U19OiokfvKAwoJZkRL1T6wJKIpmaA8KsJ3iaUYqSti7Hfe GtwJH5uTeuD4vso31pYEUcY5/3qzr+qgxVJDGHrSgfDQMwvZVunICv+I5cAtieNU BVLOBaiueZkueIvkOT/2TmicNNuAxe8aXPlsAO1DgVbFvfillsEW5f9enoYMEeeg Zj6uhJLo8FOSrodTpVaTuxhoMtGsT4PEmxJL2vjOgC9UoblXphoSrWXS79S7Vr2G bNwzFC5oTp/cbOyA+IKhp3ZvFVGTYU6rYb6uN1Tr9eJZWq5pqsH9GQW81S3FhXK/ jJg+NjnbfNQZwg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:24 2025 by rpki-client