This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json) Hash identifier: W9yAU1PVeRRUdT8LmPID4RIuVSQGG4fJCJGsW42USa0= Subject key identifier: C9:80:60:21:00:A0:5E:CC:9D:FF:63:84:51:3A:69:29:40:13:77:D5 Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa Certificate serial: 019B6E46251612B73F44237090A86042BE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft Manifest number: 1632 Signing time: Tue 30 Dec 2025 08:00:49 +0000 Manifest this update: Tue 30 Dec 2025 08:00:49 +0000 Manifest next update: Wed 31 Dec 2025 08:00:49 +0000 Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: mOPE/z1KvYnst4C7l+DrT3teEAIKnmkX6IT2yworxFk=) 2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:46:25:16:12:b7:3f:44:23:70:90:a8:60:42:be:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa Validity Not Before: Dec 30 08:00:49 2025 GMT Not After : Dec 31 08:00:49 2025 GMT Subject: CN=c980602100a05ecc9dff6384513a6929401377d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:23:0d:96:84:f8:3c:36:1b:a8:93:36:9e: 41:6e:a1:db:04:b7:c9:86:32:d0:72:09:82:72:e7: 23:ab:4f:7f:21:44:c9:f0:87:f4:e1:9e:49:65:74: 3f:25:64:db:86:15:5f:14:83:7a:55:21:ff:53:9e: fd:99:53:0e:b1:99:92:d1:4b:c8:a8:f1:4e:08:e2: 6b:8b:c5:60:b4:b3:50:bc:7c:fa:e0:cf:b7:8d:aa: 9f:a9:a5:c2:ee:dd:c2:1c:ad:a5:7e:8e:7a:c7:11: d2:8a:e9:9b:ae:ec:14:c7:10:0a:5c:a5:60:3f:66: 67:b0:6e:a6:be:0b:b9:94:4a:54:19:50:11:a6:5f: 86:c3:fd:b3:84:2a:95:0d:a4:c6:13:67:78:96:86: 16:06:75:2c:ba:d0:2e:d7:e2:59:99:b1:73:b3:99: ab:aa:a4:ff:9b:56:96:e3:d2:af:94:ce:01:63:86: 0a:8f:1b:35:05:db:f5:1a:48:1d:65:c9:60:7b:9b: 76:ce:81:ad:38:ae:26:19:4b:51:a2:d8:bf:d0:53: 97:03:bc:53:7f:70:a9:bf:3f:e4:8b:81:db:d4:8a: 73:fc:c0:f9:06:84:f8:29:d2:df:3e:b4:1e:56:fc: 4d:47:c7:cc:c8:13:75:63:29:3a:dc:f2:9f:e1:6a: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:80:60:21:00:A0:5E:CC:9D:FF:63:84:51:3A:69:29:40:13:77:D5 X509v3 Authority Key Identifier: keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7f:79:bf:61:b5:25:48:cd:98:10:0e:9a:81:a1:2b:f2:c7: 83:c2:33:a6:ee:16:41:5b:a3:52:7d:6d:ef:eb:40:cd:1d:08: 50:43:8b:40:3f:a1:94:97:ca:d6:52:31:f3:fa:91:dd:17:85: fa:eb:96:6e:21:e8:28:8a:8c:9b:50:f8:7c:c8:f8:96:4e:24: f9:9c:8b:c3:02:50:16:3e:2d:be:ab:25:ff:82:eb:f0:92:33: dc:f6:d4:0f:77:c2:00:3a:cd:be:88:62:1d:d7:90:d4:6d:95: bc:89:d6:88:52:fc:b3:6c:39:0b:90:17:d3:b6:b8:30:fb:ce: ef:35:ea:2a:c1:9d:46:a0:f3:d8:1e:23:04:47:32:11:dd:78: 4c:b5:74:a6:f2:13:7c:dd:c4:61:df:71:15:b9:b0:07:7c:6f: ba:cc:90:02:18:c4:df:c6:b1:e5:72:41:83:24:a8:5d:e8:ce: 67:af:c5:1a:f7:9e:1a:6f:df:d4:8d:6f:49:8b:a2:eb:1a:96: 78:35:0a:33:3a:8d:0a:90:54:1a:29:fc:75:b5:5d:a1:5e:d6: 7d:57:a6:2e:69:4b:eb:c2:d5:e0:44:63:60:96:30:5c:59:f1: 0f:7c:08:e7:43:d1:4b:03:6f:92:92:b1:be:58:99:c7:42:8a: 32:06:79:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRiUWErc/RCNwkKhgQr4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh ZDViYWEwHhcNMjUxMjMwMDgwMDQ5WhcNMjUxMjMxMDgwMDQ5WjAzMTEwLwYDVQQD EyhjOTgwNjAyMTAwYTA1ZWNjOWRmZjYzODQ1MTNhNjkyOTQwMTM3N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNUjDZaE+Dw2G6iTNp5BbqHbBLfJ hjLQcgmCcucjq09/IUTJ8If04Z5JZXQ/JWTbhhVfFIN6VSH/U579mVMOsZmS0UvI qPFOCOJri8VgtLNQvHz64M+3jaqfqaXC7t3CHK2lfo56xxHSiumbruwUxxAKXKVg P2ZnsG6mvgu5lEpUGVARpl+Gw/2zhCqVDaTGE2d4loYWBnUsutAu1+JZmbFzs5mr qqT/m1aW49KvlM4BY4YKjxs1Bdv1GkgdZclge5t2zoGtOK4mGUtRoti/0FOXA7xT f3Cpvz/ki4Hb1Ipz/MD5BoT4KdLfPrQeVvxNR8fMyBN1Yyk63PKf4WoCKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmAYCEAoF7Mnf9jhFE6aSlAE3fVMB8GA1UdIwQY MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0 LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdH95v2G1 JUjNmBAOmoGhK/LHg8Izpu4WQVujUn1t7+tAzR0IUEOLQD+hlJfK1lIx8/qR3ReF +uuWbiHoKIqMm1D4fMj4lk4k+ZyLwwJQFj4tvqsl/4Lr8JIz3PbUD3fCADrNvohi HdeQ1G2VvInWiFL8s2w5C5AX07a4MPvO7zXqKsGdRqDz2B4jBEcyEd14TLV0pvIT fN3EYd9xFbmwB3xvusyQAhjE38ax5XJBgySoXejOZ6/FGveeGm/f1I1vSYui6xqW eDUKMzqNCpBUGin8dbVdoV7WfVemLmlL68LV4ERjYJYwXFnxD3wI50PRSwNvkpKx vliZx0KKMgZ5hg== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:35 2025 by rpki-client