This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: phZJPeiJxifMCpVmlRqBVIntlyKYseVam/VU/5hDcek= Subject key identifier: 46:7F:E8:C6:8F:FB:34:84:3A:5D:64:FE:D0:50:D4:5E:A8:B6:A4:5D Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B386A1BACF959AE550C074B966F1B52F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 17D5 Signing time: Fri 19 Dec 2025 21:00:36 +0000 Manifest this update: Fri 19 Dec 2025 21:00:36 +0000 Manifest next update: Sat 20 Dec 2025 21:00:36 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 20: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 21: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 22: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (hash: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=) 23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 25: WT-GZLslFpz7tQemEuS3upR8DIQ.roa (hash: z52DbyoPRqp5Jhc+beypTnWSTAHlbvNvC0/Czw77X6s=) 26: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 27: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 29: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 30: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 31: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 32: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 33: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 34: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 35: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 37: qX94emOBVUzg51wuIAHmbKKif_I.roa (hash: zR9vh3xNohg1p0J/KE/trFdsjvUyIlVkGW0Yo0D00dI=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: MAds/zsvOfqQdhsCFXPdLimWYqMjazj/2dGzDiX1zo8=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:1b:ac:f9:59:ae:55:0c:07:4b:96:6f:1b:52:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Dec 19 21:00:36 2025 GMT Not After : Dec 20 21:00:36 2025 GMT Subject: CN=467fe8c68ffb34843a5d64fed050d45ea8b6a45d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:35:30:e2:08:9f:aa:2d:2e:be:12:7e:7c: 7e:50:5e:e3:9d:83:72:90:62:6b:8e:a1:49:b0:ef: eb:a8:29:ae:0d:3d:d4:54:e9:db:d5:82:57:d8:83: 7d:1b:68:c6:9a:b5:65:37:e8:08:09:20:83:e6:ff: d3:01:67:39:51:7d:4f:1f:7a:19:d1:9c:a7:ec:0f: d2:c8:6f:c6:93:62:04:4f:2c:ec:5f:aa:77:b8:d9: 5b:7d:6d:1a:00:57:ae:a3:e7:7c:3f:d9:63:e0:f7: cc:a9:7c:19:ad:c0:32:01:47:af:8f:01:ee:a4:7e: 7f:77:60:3e:c4:6b:8b:fc:a1:74:93:d6:05:e0:8a: b7:71:35:78:c2:24:0f:85:e5:23:91:95:a5:0f:86: 2d:cd:db:2c:9c:15:da:07:9e:80:bf:8f:db:aa:2d: 38:d4:f8:62:53:44:b9:78:14:64:39:3a:5f:fb:07: 07:d3:88:c0:71:bc:4d:0b:f3:51:67:ee:eb:51:79: 7a:65:e4:26:0b:c1:f7:c1:f1:9a:b2:ad:40:b4:cc: ce:34:af:e3:7e:6a:1c:b8:4e:35:e9:e3:59:df:08: 1d:94:ef:c3:fb:01:e1:07:c6:e8:91:3f:f6:c4:d1: e5:a7:97:dd:0f:1f:18:25:8d:c8:15:d4:8a:d8:12: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7F:E8:C6:8F:FB:34:84:3A:5D:64:FE:D0:50:D4:5E:A8:B6:A4:5D X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a3:2a:d8:3d:1a:6f:75:76:5f:93:db:33:28:40:b6:5d:7d: ad:b3:27:2b:13:eb:11:b2:95:cf:ac:dc:5f:9f:02:46:bd:07: 6d:a6:80:37:a1:56:e3:92:42:09:c3:0f:43:2f:cd:6d:2d:8a: f1:77:54:36:36:ea:fc:64:06:b2:6b:65:80:08:a6:58:df:45: a0:89:d9:cb:b9:26:43:af:e4:f0:45:98:6f:90:66:a3:4b:c9: 17:1d:02:27:cc:55:37:a0:30:5f:03:26:a2:f4:e0:ef:8d:ec: 93:80:a3:1a:61:8c:ce:ec:26:98:62:f4:0f:fc:66:13:65:09: bc:f7:7a:cf:27:d0:77:16:42:c0:18:b2:a4:64:4c:ed:c2:54: 9e:ed:2b:9f:85:a6:55:f5:af:1e:6e:6f:9b:57:c8:ae:85:c3: d5:01:26:63:9d:c6:0c:c3:2b:00:03:00:38:0e:4f:08:d7:55: b5:1a:77:16:59:d8:be:be:c3:1c:28:1e:7a:67:72:c3:58:5a: f6:5d:d1:e7:e0:0b:8b:b9:e9:bc:53:3c:2e:77:c8:82:5b:5e: b2:f7:3d:5f:12:7d:b6:24:ff:2c:91:49:fb:50:5d:4e:6c:cd: e7:2e:da:ca:bd:1c:37:9e:36:0b:3a:aa:5b:a9:b0:49:d0:cb: 66:06:6d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahus+VmuVQwHS5ZvG1L2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUxMjE5MjEwMDM2WhcNMjUxMjIwMjEwMDM2WjAzMTEwLwYDVQQD Eyg0NjdmZThjNjhmZmIzNDg0M2E1ZDY0ZmVkMDUwZDQ1ZWE4YjZhNDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eQ1MOIIn6otLr4Sfnx+UF7jnYNy kGJrjqFJsO/rqCmuDT3UVOnb1YJX2IN9G2jGmrVlN+gICSCD5v/TAWc5UX1PH3oZ 0Zyn7A/SyG/Gk2IETyzsX6p3uNlbfW0aAFeuo+d8P9lj4PfMqXwZrcAyAUevjwHu pH5/d2A+xGuL/KF0k9YF4Iq3cTV4wiQPheUjkZWlD4YtzdssnBXaB56Av4/bqi04 1PhiU0S5eBRkOTpf+wcH04jAcbxNC/NRZ+7rUXl6ZeQmC8H3wfGasq1AtMzONK/j fmocuE416eNZ3wgdlO/D+wHhB8bokT/2xNHlp5fdDx8YJY3IFdSK2BKdWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ/6MaP+zSEOl1k/tBQ1F6otqRdMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKMq2D0a b3V2X5PbMyhAtl19rbMnKxPrEbKVz6zcX58CRr0HbaaAN6FW45JCCcMPQy/NbS2K 8XdUNjbq/GQGsmtlgAimWN9FoInZy7kmQ6/k8EWYb5Bmo0vJFx0CJ8xVN6AwXwMm ovTg743sk4CjGmGMzuwmmGL0D/xmE2UJvPd6zyfQdxZCwBiypGRM7cJUnu0rn4Wm VfWvHm5vm1fIroXD1QEmY53GDMMrAAMAOA5PCNdVtRp3FlnYvr7DHCgeemdyw1ha 9l3R5+ALi7npvFM8LnfIgltesvc9XxJ9tiT/LJFJ+1BdTmzN5y7ayr0cN542Czqq W6mwSdDLZgZtmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:38:57 2025 by rpki-client