This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: 9R9+Qfdxq+fr28cCeyOiU7ZfYy6ZfGoH1X/ztO2pxQc= Subject key identifier: 99:5E:12:B4:EC:4F:50:0F:FD:51:94:5A:B0:1E:E8:66:29:55:3F:D7 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B68B1E5DD18C58C10D580565BBA42CEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 17EE Signing time: Mon 29 Dec 2025 06:00:47 +0000 Manifest this update: Mon 29 Dec 2025 06:00:47 +0000 Manifest next update: Tue 30 Dec 2025 06:00:47 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 20: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 21: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 22: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (hash: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=) 23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 25: WT-GZLslFpz7tQemEuS3upR8DIQ.roa (hash: z52DbyoPRqp5Jhc+beypTnWSTAHlbvNvC0/Czw77X6s=) 26: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 27: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 29: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 30: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 31: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 32: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 33: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 34: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 35: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 37: qX94emOBVUzg51wuIAHmbKKif_I.roa (hash: zR9vh3xNohg1p0J/KE/trFdsjvUyIlVkGW0Yo0D00dI=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: quMGkaip2EAxT3tUx+wT7vIug7hbJrH93otKhdw5EDk=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:b1:e5:dd:18:c5:8c:10:d5:80:56:5b:ba:42:ce:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Dec 29 06:00:47 2025 GMT Not After : Dec 30 06:00:47 2025 GMT Subject: CN=995e12b4ec4f500ffd51945ab01ee86629553fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:8c:2a:a5:10:4c:ae:81:89:53:c7:0c:34: e4:d6:49:85:67:3b:40:ef:5f:41:d3:1e:34:c1:33: f7:5c:0e:cc:bb:44:96:2a:5d:45:0d:0f:cd:8c:e3: ac:84:46:cb:f0:f9:5c:83:91:08:ed:0b:a0:9b:30: 27:93:ba:15:d4:c0:5e:15:77:f4:d6:cf:de:7f:8f: cb:dd:bf:39:af:de:13:2e:f6:5c:09:d7:bc:a0:68: 80:b6:61:3a:97:50:bf:b4:56:85:7c:aa:a6:c2:d9: e9:a2:2a:78:89:e0:94:21:51:08:e9:b8:74:5d:79: 09:19:32:bd:be:36:0d:22:7d:5c:80:cb:11:60:7e: b5:46:b3:3b:c8:39:23:55:9a:2d:06:26:6c:6b:bd: d0:ca:54:20:b0:12:02:6d:04:73:d8:2b:f7:57:ce: a0:14:e7:c9:73:e8:20:f9:32:e9:cc:e8:39:cb:a2: fc:1a:ec:7d:0f:da:7e:a4:d8:b9:58:7a:86:1c:4c: a6:26:de:0c:75:23:81:ab:c5:f7:58:d0:a9:fe:8c: 4d:26:42:11:d3:d2:fe:17:d6:dd:10:5d:da:66:ef: 9c:b2:4c:97:6e:a8:ac:bd:0e:90:fe:73:ee:6e:f5: 26:2d:96:37:65:29:cc:93:b2:ce:fc:25:1e:7c:9f: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:12:B4:EC:4F:50:0F:FD:51:94:5A:B0:1E:E8:66:29:55:3F:D7 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5a:70:80:1f:4e:10:7f:54:68:11:ed:d4:7c:f3:c9:c6:ab: 7c:3e:73:e4:23:10:0e:85:e5:92:a7:0a:85:56:7e:75:ad:9c: b3:43:4f:9c:26:81:54:3a:cf:f9:d5:fc:8f:a3:92:2c:d5:29: a9:84:c9:51:db:08:ed:bb:21:27:b6:9d:80:05:fe:c1:29:86: f2:f6:42:96:7d:b2:b6:35:6f:bd:fd:25:3e:44:47:1f:bb:ec: 92:45:b1:b4:4b:93:ff:9e:27:c2:f2:3f:5b:32:05:cc:63:0d: 1d:58:76:4b:e1:9b:76:14:ef:f0:ff:c1:9d:d5:18:70:ce:6c: df:cd:a2:0a:72:65:44:de:ad:4f:82:33:e2:00:bc:09:f8:b6: 72:74:ee:6e:ca:ed:ce:d1:63:fc:86:90:9c:37:d5:ae:1d:98: fa:55:1e:71:71:40:71:27:d0:29:8d:04:00:93:ac:68:53:30: 50:89:ca:e0:86:97:1b:b3:7e:1a:9e:7f:3c:5a:7b:d4:45:6e: b2:4f:91:45:2f:b1:24:61:12:ad:14:f3:ab:17:89:82:94:16: 9d:03:1b:08:0b:79:fd:29:7a:1a:a1:a6:05:32:dc:db:2c:97: 44:e4:17:56:42:c1:aa:36:49:25:0f:19:e6:cc:61:35:f2:24: d2:a3:48:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoseXdGMWMENWAVlu6Qs7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUxMjI5MDYwMDQ3WhcNMjUxMjMwMDYwMDQ3WjAzMTEwLwYDVQQD Eyg5OTVlMTJiNGVjNGY1MDBmZmQ1MTk0NWFiMDFlZTg2NjI5NTUzZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKGMKqUQTK6BiVPHDDTk1kmFZztA 719B0x40wTP3XA7Mu0SWKl1FDQ/NjOOshEbL8Plcg5EI7QugmzAnk7oV1MBeFXf0 1s/ef4/L3b85r94TLvZcCde8oGiAtmE6l1C/tFaFfKqmwtnpoip4ieCUIVEI6bh0 XXkJGTK9vjYNIn1cgMsRYH61RrM7yDkjVZotBiZsa73QylQgsBICbQRz2Cv3V86g FOfJc+gg+TLpzOg5y6L8Gux9D9p+pNi5WHqGHEymJt4MdSOBq8X3WNCp/oxNJkIR 09L+F9bdEF3aZu+cskyXbqisvQ6Q/nPubvUmLZY3ZSnMk7LO/CUefJ/emwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJleErTsT1AP/VGUWrAe6GYpVT/XMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVpwgB9O EH9UaBHt1HzzycarfD5z5CMQDoXlkqcKhVZ+da2cs0NPnCaBVDrP+dX8j6OSLNUp qYTJUdsI7bshJ7adgAX+wSmG8vZCln2ytjVvvf0lPkRHH7vskkWxtEuT/54nwvI/ WzIFzGMNHVh2S+GbdhTv8P/BndUYcM5s382iCnJlRN6tT4Iz4gC8Cfi2cnTubsrt ztFj/IaQnDfVrh2Y+lUecXFAcSfQKY0EAJOsaFMwUInK4IaXG7N+Gp5/PFp71EVu sk+RRS+xJGESrRTzqxeJgpQWnQMbCAt5/Sl6GqGmBTLc2yyXROQXVkLBqjZJJQ8Z 5sxhNfIk0qNIXQ== -----END CERTIFICATE-----Generated at Mon Dec 29 13:25:25 2025 by rpki-client