This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: Z0RzUxskBsDJQxvfJCsBoXZD17jdCOXG0hG+Qx9wpAY= Subject key identifier: ED:61:D3:FE:3E:AB:31:AA:3E:25:4C:22:20:71:DE:1F:72:FB:9A:0F Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B0AB66BC369A2E500FC50CB8883FD19FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 17BD Signing time: Thu 11 Dec 2025 00:01:25 +0000 Manifest this update: Thu 11 Dec 2025 00:01:25 +0000 Manifest next update: Fri 12 Dec 2025 00:01:25 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 20: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 21: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 22: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (hash: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=) 23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 25: WT-GZLslFpz7tQemEuS3upR8DIQ.roa (hash: z52DbyoPRqp5Jhc+beypTnWSTAHlbvNvC0/Czw77X6s=) 26: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 27: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 29: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 30: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 31: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 32: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 33: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 34: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 35: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: kMh3ucSrStix19WVYAwuFwDKOwzjlwLdoZC7WkZu9oc=) 38: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 39: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) 40: zEYQcxtlW1wmT7QukjZ8R0-uUZM.roa (hash: 1xGIsUGG8vqOW6zzZuu7ghruVcnicPTvNfcH3r50TuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b6:6b:c3:69:a2:e5:00:fc:50:cb:88:83:fd:19:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Dec 11 00:01:25 2025 GMT Not After : Dec 12 00:01:25 2025 GMT Subject: CN=ed61d3fe3eab31aa3e254c222071de1f72fb9a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:24:af:c3:1c:27:c3:06:82:53:03:1c:f0: 39:9b:be:b4:89:1e:b0:04:70:67:6e:01:b9:28:a0: 2e:78:31:e6:27:5f:25:9f:31:cd:32:5d:70:22:8b: 0c:2e:7e:d3:76:59:e1:4b:0b:5f:c4:06:23:26:59: f4:e0:4f:4c:15:15:ab:27:42:6c:6e:3b:d2:b9:45: 71:83:d0:2c:aa:81:f2:6a:c9:4b:fa:48:e8:72:77: 37:5e:b4:17:dc:a1:f5:d8:55:b9:0f:7c:a5:23:3c: 6d:b8:3b:b5:10:31:5b:ec:51:3a:82:c3:1b:50:e9: af:cf:21:4d:5a:3c:dc:6b:b1:e7:54:e6:21:fd:21: f0:62:ec:83:b2:bf:ab:0e:f8:4a:90:51:7d:b2:ae: 2d:65:4b:1d:da:73:ee:86:95:2c:da:54:6f:74:56: cf:c7:7d:cb:6e:41:b7:60:81:d2:27:23:4c:49:ce: 0c:2f:b3:98:fa:31:e4:36:be:6f:69:95:79:b8:6f: e4:a0:2d:22:90:4d:76:54:f7:c6:74:7b:a6:c4:1c: fc:ff:81:1c:f0:58:13:8f:70:ac:3e:46:97:42:d0: e5:7d:d5:d6:ba:7d:f9:7d:53:31:10:c2:ce:43:5e: 09:bc:1e:fb:bb:43:2e:6a:17:64:37:e5:b0:16:df: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:D3:FE:3E:AB:31:AA:3E:25:4C:22:20:71:DE:1F:72:FB:9A:0F X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d7:97:0c:5a:46:57:d4:b9:0e:e0:7c:92:4e:9a:59:41:51: 24:47:24:a2:1e:11:77:5a:a6:69:9a:70:08:47:dd:e8:24:2a: fe:c2:13:95:77:10:bd:f9:80:90:d6:02:0f:98:c5:2d:69:f7: c5:58:78:b7:b1:ad:de:0e:95:a0:5a:9e:28:61:71:a5:04:08: ab:f7:e1:46:01:ef:07:39:fd:15:cd:be:d1:d1:95:55:52:dc: 2a:cd:5e:c9:fe:14:a8:4d:20:1d:ff:9b:8d:75:f4:fb:7e:68: fe:2f:da:9d:b9:be:16:dc:f2:06:0b:90:96:1d:26:be:b9:79: af:cc:45:ef:5c:0e:c9:65:ee:3f:79:da:c3:2a:e6:5b:41:cc: 5c:0c:4f:d0:8a:8e:47:3c:f6:70:1e:22:e8:f2:6d:61:b1:52: 31:c0:6b:8a:e5:9d:30:2c:7e:d4:fa:9c:3c:a5:66:35:3b:ca: da:f4:fd:74:35:78:ca:73:c2:53:97:07:a0:7b:ed:4c:e8:5d: 35:36:4d:ad:8d:13:86:51:e7:01:97:00:b1:44:e2:e2:b7:55: 31:02:45:a0:54:5f:0d:34:c4:2f:ab:38:bc:b4:66:15:9f:a2: a6:ee:be:4f:08:e0:fa:a5:6b:b6:f8:f7:b1:9d:de:e6:38:b9: c2:fa:0c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtmvDaaLlAPxQy4iD/Rn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUxMjExMDAwMTI1WhcNMjUxMjEyMDAwMTI1WjAzMTEwLwYDVQQD EyhlZDYxZDNmZTNlYWIzMWFhM2UyNTRjMjIyMDcxZGUxZjcyZmI5YTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxUkr8McJ8MGglMDHPA5m760iR6w BHBnbgG5KKAueDHmJ18lnzHNMl1wIosMLn7TdlnhSwtfxAYjJln04E9MFRWrJ0Js bjvSuUVxg9AsqoHyaslL+kjocnc3XrQX3KH12FW5D3ylIzxtuDu1EDFb7FE6gsMb UOmvzyFNWjzca7HnVOYh/SHwYuyDsr+rDvhKkFF9sq4tZUsd2nPuhpUs2lRvdFbP x33LbkG3YIHSJyNMSc4ML7OY+jHkNr5vaZV5uG/koC0ikE12VPfGdHumxBz8/4Ec 8FgTj3CsPkaXQtDlfdXWun35fVMxEMLOQ14JvB77u0MuahdkN+WwFt8S9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1h0/4+qzGqPiVMIiBx3h9y+5oPMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNeXDFpG V9S5DuB8kk6aWUFRJEckoh4Rd1qmaZpwCEfd6CQq/sITlXcQvfmAkNYCD5jFLWn3 xVh4t7Gt3g6VoFqeKGFxpQQIq/fhRgHvBzn9Fc2+0dGVVVLcKs1eyf4UqE0gHf+b jXX0+35o/i/anbm+FtzyBguQlh0mvrl5r8xF71wOyWXuP3nawyrmW0HMXAxP0IqO Rzz2cB4i6PJtYbFSMcBriuWdMCx+1PqcPKVmNTvK2vT9dDV4ynPCU5cHoHvtTOhd NTZNrY0ThlHnAZcAsUTi4rdVMQJFoFRfDTTEL6s4vLRmFZ+ipu6+Twjg+qVrtvj3 sZ3e5ji5wvoM2Q== -----END CERTIFICATE-----Generated at Thu Dec 11 09:35:53 2025 by rpki-client