This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: MHc84gtUNgK2125VEUSZktlOXmNC9XeG8c4xFxkwtMQ= Subject key identifier: E6:94:FB:E0:79:CA:88:FA:69:9C:8A:E4:56:16:91:BD:37:42:D2:57 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019B4137092FC3D4F8E45A88E3989E90EEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 0F37 Signing time: Sun 21 Dec 2025 14:01:24 +0000 Manifest this update: Sun 21 Dec 2025 14:01:24 +0000 Manifest next update: Mon 22 Dec 2025 14:01:24 +0000 Files and hashes: 1: I-EAyalxyJcb3mCdLEW_KjnJh28.roa (hash: ILntYHJsQMd6NnMaYmwE9WwXTjkIQwH3De7tLAyjOys=) 2: IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa (hash: q3zwHLLir+6KRJpls1Fd7jTNccM1a26eqIKhpBQyAyQ=) 3: YxBRayM-vhxtM1AqEKC9omjhyDU.roa (hash: 8x1ScjX7HuUH81sXw9Xe7zT6ZtsS32sBRkIQuP2YYkc=) 4: eGD2qM9gyPlyNsWFm0ZA5Omy1IE.roa (hash: y0pG7C3wx0x5ZaENQv/xppcabkujI4sYVnGq/OBgcB8=) 5: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: fC99eh90JH/lnE4nf+D9LZ0b0y2nVYGMqnatCOONR5A=) 6: vIUr5qQxqqLVTYFZRBpJaE6yC18.roa (hash: puDWvLFM5Vh+RZHMeg9EaHeOJ4OAVD1A+mL/aQoFTAE=) 7: zWe-2uJNImubwzG3IlmtCAkjQSs.roa (hash: uUjVrchrie7sAD2HJ9tEPZTxYEkaoLKxeE56PKgx3So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:09:2f:c3:d4:f8:e4:5a:88:e3:98:9e:90:ee:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Dec 21 14:01:24 2025 GMT Not After : Dec 22 14:01:24 2025 GMT Subject: CN=e694fbe079ca88fa699c8ae4561691bd3742d257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:7c:a1:7a:c5:f2:4f:d3:47:f0:19:b6:c1: 0c:f5:50:94:61:fc:de:2e:2f:2e:55:01:f2:09:8f: b0:11:f1:e4:65:39:99:f2:40:2e:4c:86:1a:e2:02: c2:df:4e:75:4b:12:61:6a:d1:47:4b:0e:35:c5:a4: a9:b7:f7:fc:a4:aa:aa:62:4f:e4:72:b7:69:ff:cf: 35:4d:9b:fc:53:6b:49:48:38:87:1c:b7:12:4d:f4: a9:8c:8f:e4:78:cc:11:fa:36:b9:6e:7d:90:b5:68: 15:76:7a:a6:24:78:24:97:1e:13:e6:50:05:cd:46: 35:41:91:32:b9:2a:30:49:fc:4b:9e:17:52:19:07: a8:2b:75:63:cd:7e:ad:4a:5e:ca:c5:e1:cb:94:58: 0d:49:26:b3:23:bd:39:09:6e:84:00:d7:8b:77:34: 25:5e:0d:a5:5e:79:92:f6:67:43:0a:e4:7c:c1:c2: 2e:da:db:57:fa:3b:1e:1a:60:a9:f4:ea:ab:da:83: 60:e7:7c:70:d3:9b:e2:30:40:90:2c:db:d6:46:4f: 4d:88:5b:e9:9f:66:fb:c9:89:66:4b:8a:68:e1:f6: be:88:e5:8d:5d:3e:da:69:b5:23:4a:50:a1:70:ae: fe:b8:2d:fd:b0:af:45:34:b8:55:48:30:e3:6d:a3: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:94:FB:E0:79:CA:88:FA:69:9C:8A:E4:56:16:91:BD:37:42:D2:57 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c2:4d:82:cc:1d:cb:24:a4:37:f6:99:e8:10:52:71:ad:83: 8b:2a:db:58:68:6f:ea:52:8c:62:4d:dd:fe:d7:89:e4:fb:d8: 08:0f:0b:85:db:8a:a4:9a:2b:d6:4e:10:cc:9b:d8:14:86:66: 04:b6:de:f9:88:c2:5f:92:f0:64:e5:19:de:6b:e9:44:f8:35: 3f:30:29:5e:5e:d3:5d:a4:59:c8:ab:bf:9f:2b:f3:52:d1:ac: a3:d1:8a:f8:ac:fc:e1:59:7b:02:c1:f5:80:a5:ee:b2:9c:0e: bd:89:9d:0a:0f:e9:8e:1f:8b:f5:4d:29:10:b3:30:cf:4d:a6: ee:f2:7f:38:a3:b2:4e:6b:ce:1e:c5:63:65:0e:db:ab:a5:a1: 5a:b3:be:f7:e0:4d:b5:81:62:44:e6:3c:dd:cf:6a:cd:22:45: 57:ca:f9:02:9a:c1:00:7d:5e:69:0d:c5:e7:43:e5:f2:35:86: d4:b7:9e:b6:1a:03:ec:41:0f:a6:97:b0:6d:4b:15:0f:3e:f6: 52:01:c8:25:a6:6e:82:32:8a:69:9b:cb:0c:b8:b3:cf:97:96: ac:24:ae:ba:1f:e3:1a:47:ba:98:3f:0f:d2:bb:00:83:5b:f9: 65:dc:d7:03:92:9e:28:df:58:36:5e:1c:f0:3b:33:8d:be:34: 90:ba:36:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwkvw9T45FqI45iekO7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjUxMjIxMTQwMTI0WhcNMjUxMjIyMTQwMTI0WjAzMTEwLwYDVQQD EyhlNjk0ZmJlMDc5Y2E4OGZhNjk5YzhhZTQ1NjE2OTFiZDM3NDJkMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMd8oXrF8k/TR/AZtsEM9VCUYfze Li8uVQHyCY+wEfHkZTmZ8kAuTIYa4gLC3051SxJhatFHSw41xaSpt/f8pKqqYk/k crdp/881TZv8U2tJSDiHHLcSTfSpjI/keMwR+ja5bn2QtWgVdnqmJHgklx4T5lAF zUY1QZEyuSowSfxLnhdSGQeoK3VjzX6tSl7KxeHLlFgNSSazI705CW6EANeLdzQl Xg2lXnmS9mdDCuR8wcIu2ttX+jseGmCp9Oqr2oNg53xw05viMECQLNvWRk9NiFvp n2b7yYlmS4po4fa+iOWNXT7aabUjSlChcK7+uC39sK9FNLhVSDDjbaMOTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaU++B5yoj6aZyK5FYWkb03QtJXMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8JNgswd yySkN/aZ6BBSca2DiyrbWGhv6lKMYk3d/teJ5PvYCA8LhduKpJor1k4QzJvYFIZm BLbe+YjCX5LwZOUZ3mvpRPg1PzApXl7TXaRZyKu/nyvzUtGso9GK+Kz84Vl7AsH1 gKXuspwOvYmdCg/pjh+L9U0pELMwz02m7vJ/OKOyTmvOHsVjZQ7bq6WhWrO+9+BN tYFiROY83c9qzSJFV8r5AprBAH1eaQ3F50Pl8jWG1LeethoD7EEPppewbUsVDz72 UgHIJaZugjKKaZvLDLizz5eWrCSuuh/jGke6mD8P0rsAg1v5ZdzXA5KeKN9YNl4c 8Dszjb40kLo2hQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:31 2025 by rpki-client