This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json) Hash identifier: C30f/zQthcO4L8S844i7TAP1d4P5Wp96kH4CJoGeYSM= Subject key identifier: 25:0D:8D:81:D4:82:F9:EA:05:88:D5:81:88:CB:7D:EB:C6:43:AD:4D Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Certificate serial: 019AF5AF2FD472C552E1B30157E772A8E145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:01:30 +0000 Manifest this update: Sat 06 Dec 2025 22:01:30 +0000 Manifest next update: Sun 07 Dec 2025 22:01:30 +0000 Files and hashes: 1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=) 2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=) 3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=) 4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=) 5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: y96SAwmJWoGxf5D73wW+pWy2NhpXFzHYCX1jPfWUiw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:2f:d4:72:c5:52:e1:b3:01:57:e7:72:a8:e1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Validity Not Before: Dec 6 22:01:30 2025 GMT Not After : Dec 7 22:01:30 2025 GMT Subject: CN=250d8d81d482f9ea0588d58188cb7debc643ad4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:13:24:f8:e8:9e:d7:a8:84:77:15:68:b9: b9:0e:ec:a4:40:01:32:6d:d2:29:f1:98:79:35:98: c8:6f:82:80:94:bd:7a:a4:b3:e4:e7:e9:83:f6:c0: 77:43:43:cb:5f:d3:fc:9b:4a:a5:c5:9e:6e:16:35: 4b:3e:7b:c2:ab:61:33:92:ee:21:bb:47:cb:16:d9: f1:f4:3d:23:58:e9:57:b1:88:27:d4:de:48:19:f8: 8f:b1:c7:7b:16:26:53:65:6a:3c:f2:c6:fe:c2:c5: 20:52:ab:14:c1:78:d2:01:f7:1d:f4:b0:1d:56:e5: ab:fd:da:de:34:5f:c6:1f:e7:4d:f2:94:d0:8f:34: 33:0d:30:9f:6d:1f:4b:07:b7:c9:44:09:d0:d2:d8: 7f:d6:dd:4f:19:9b:57:1d:f2:d3:ff:c6:f1:ea:a9: 3f:8f:82:8e:8e:7e:f3:35:37:92:31:dc:5e:ba:d9: 89:87:0d:14:5c:bd:22:bd:e3:73:c4:5f:4f:67:36: b9:41:12:4b:a9:0a:85:75:6c:1c:94:97:a8:03:cd: 69:b8:ec:65:88:fc:db:35:c9:a8:1a:1a:c0:5b:46: 1c:a7:49:18:37:da:22:6d:9c:f8:84:a9:25:fb:93: a9:1d:4f:e4:1e:74:48:09:6c:08:8d:15:94:a0:3a: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:8D:81:D4:82:F9:EA:05:88:D5:81:88:CB:7D:EB:C6:43:AD:4D X509v3 Authority Key Identifier: keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4b:e9:57:c0:67:4f:c0:0d:81:65:5d:6b:2a:26:e6:48:b1: 7a:40:41:3b:d3:74:8a:52:ea:13:3c:d5:31:c0:60:07:fe:05: 31:59:cc:3d:40:da:fc:44:e8:36:79:23:0e:88:ce:17:cf:ea: c5:2e:f8:ec:6e:94:03:7e:c4:05:a2:cb:5b:c1:60:ad:9e:5a: 99:f8:ba:75:2c:05:43:4f:db:a4:44:91:d1:d1:f3:60:74:ac: 47:2b:b6:a7:7f:ad:5d:fe:96:85:4f:9d:67:43:ca:1b:3b:1e: 53:3d:b9:b5:55:91:ba:ab:68:6d:b2:b2:d3:62:23:dd:00:00: 7e:25:9b:20:12:a1:52:00:89:f3:77:d4:27:ed:ac:2c:1c:3f: 3d:1b:74:e9:0a:03:e1:b0:d9:a4:13:9f:0f:90:f1:6a:5d:91: f9:2f:98:b8:13:ea:43:ee:f0:80:88:2f:3e:82:c5:bb:9a:cd: 28:7f:ed:0d:b2:fd:d1:77:2b:cd:c5:d5:d2:d3:f2:f1:f7:5f: 5d:0b:c1:d5:d9:bb:d0:69:d5:9c:5f:b6:a2:7d:f3:21:d6:d2: d3:3b:17:60:69:19:cc:73:fc:9c:07:b9:de:93:f6:a5:2a:87: 60:82:72:87:68:45:14:fa:cd:58:34:f1:9d:2b:54:c6:7f:a9: 15:4c:d9:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ry/UcsVS4bMBV+dyqOFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5 YjZhNmQwHhcNMjUxMjA2MjIwMTMwWhcNMjUxMjA3MjIwMTMwWjAzMTEwLwYDVQQD EygyNTBkOGQ4MWQ0ODJmOWVhMDU4OGQ1ODE4OGNiN2RlYmM2NDNhZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QATJPjonteohHcVaLm5DuykQAEy bdIp8Zh5NZjIb4KAlL16pLPk5+mD9sB3Q0PLX9P8m0qlxZ5uFjVLPnvCq2Ezku4h u0fLFtnx9D0jWOlXsYgn1N5IGfiPscd7FiZTZWo88sb+wsUgUqsUwXjSAfcd9LAd VuWr/dreNF/GH+dN8pTQjzQzDTCfbR9LB7fJRAnQ0th/1t1PGZtXHfLT/8bx6qk/ j4KOjn7zNTeSMdxeutmJhw0UXL0iveNzxF9PZza5QRJLqQqFdWwclJeoA81puOxl iPzbNcmoGhrAW0Ycp0kYN9oibZz4hKkl+5OpHU/kHnRICWwIjRWUoDqrIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUNjYHUgvnqBYjVgYjLfevGQ61NMB8GA1UdIwQY MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt ZGZmMWNmZmI3YjE4LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4 LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0vpV8Bn T8ANgWVdayom5kixekBBO9N0ilLqEzzVMcBgB/4FMVnMPUDa/EToNnkjDojOF8/q xS747G6UA37EBaLLW8FgrZ5amfi6dSwFQ0/bpESR0dHzYHSsRyu2p3+tXf6WhU+d Z0PKGzseUz25tVWRuqtobbKy02Ij3QAAfiWbIBKhUgCJ83fUJ+2sLBw/PRt06QoD 4bDZpBOfD5Dxal2R+S+YuBPqQ+7wgIgvPoLFu5rNKH/tDbL90XcrzcXV0tPy8fdf XQvB1dm70GnVnF+2on3zIdbS0zsXYGkZzHP8nAe53pP2pSqHYIJyh2hFFPrNWDTx nStUxn+pFUzZXQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:58 2025 by rpki-client