This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: e62m9SrX/XNJUldtkbCSSxn8HCWKFXfxH0EoAnjruBo= Subject key identifier: FB:9D:68:74:93:B3:4D:05:82:9C:B3:DA:F7:80:C5:DB:53:3D:89:C7 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019B378F232761C7E70DF1479E06E817ECC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 0F32 Signing time: Fri 19 Dec 2025 17:01:26 +0000 Manifest this update: Fri 19 Dec 2025 17:01:26 +0000 Manifest next update: Sat 20 Dec 2025 17:01:26 +0000 Files and hashes: 1: I-EAyalxyJcb3mCdLEW_KjnJh28.roa (hash: ILntYHJsQMd6NnMaYmwE9WwXTjkIQwH3De7tLAyjOys=) 2: IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa (hash: q3zwHLLir+6KRJpls1Fd7jTNccM1a26eqIKhpBQyAyQ=) 3: YxBRayM-vhxtM1AqEKC9omjhyDU.roa (hash: 8x1ScjX7HuUH81sXw9Xe7zT6ZtsS32sBRkIQuP2YYkc=) 4: eGD2qM9gyPlyNsWFm0ZA5Omy1IE.roa (hash: y0pG7C3wx0x5ZaENQv/xppcabkujI4sYVnGq/OBgcB8=) 5: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: 5ukdCfJMA51Y1U9QehAwvKmJm3aQ3CNyAzxK8tzI4vc=) 6: vIUr5qQxqqLVTYFZRBpJaE6yC18.roa (hash: puDWvLFM5Vh+RZHMeg9EaHeOJ4OAVD1A+mL/aQoFTAE=) 7: zWe-2uJNImubwzG3IlmtCAkjQSs.roa (hash: uUjVrchrie7sAD2HJ9tEPZTxYEkaoLKxeE56PKgx3So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:23:27:61:c7:e7:0d:f1:47:9e:06:e8:17:ec:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Dec 19 17:01:26 2025 GMT Not After : Dec 20 17:01:26 2025 GMT Subject: CN=fb9d687493b34d05829cb3daf780c5db533d89c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:a6:d6:8d:e5:95:09:98:4d:a4:d8:f4:b2: fa:13:eb:51:ad:3e:49:0c:23:8d:d1:43:0d:44:61: 68:27:dc:21:03:13:d9:ff:e3:54:d7:fe:3c:3e:14: b2:8d:31:cd:a8:51:22:61:de:cb:ab:5f:86:13:50: 8e:ec:39:c8:55:44:6b:eb:2c:c9:d0:e7:d2:7f:9a: 24:43:b1:14:e4:eb:ae:2f:cf:09:e8:09:af:34:5f: f9:52:de:d1:86:4e:bd:f2:c0:2e:36:07:78:fc:94: ff:85:97:a1:21:cc:b3:9e:7e:5b:c3:cf:48:03:93: 3b:0b:16:aa:ef:df:f8:6b:a2:e1:9e:7b:63:b0:fa: 19:2b:a1:25:6f:3f:91:c0:16:a0:1b:6e:89:a3:f9: ac:0d:73:5a:a4:05:f9:e9:f1:2c:e7:64:e0:1b:28: fc:60:0d:eb:c9:c6:e2:c1:32:31:2e:b7:98:22:00: 59:1f:5e:89:10:1b:45:45:90:1a:f0:fa:bb:a3:13: bb:39:83:0c:b3:e9:00:a0:47:c9:a5:8c:23:d8:d9: 0d:d1:6b:64:30:e7:e4:67:c7:0e:a3:9a:50:5f:aa: 45:d3:9a:fb:e2:61:c2:eb:41:4d:a4:79:23:9a:97: 85:6c:46:df:e0:f3:6c:21:ea:13:8e:b5:b4:3b:4d: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9D:68:74:93:B3:4D:05:82:9C:B3:DA:F7:80:C5:DB:53:3D:89:C7 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b0:8f:65:b9:1d:fc:fe:fb:e2:ca:c1:de:bc:85:27:a6:80: 04:46:0c:e6:28:cc:a9:94:2e:7c:df:65:8e:cf:25:6c:76:ef: bc:57:cf:87:23:0e:49:6b:9d:26:04:e0:36:be:9e:a6:95:54: 7c:b0:d1:0c:db:f4:1c:98:17:4c:87:4d:3e:1b:c3:42:32:d3: 00:3f:39:3c:17:43:34:9f:22:b4:91:df:70:60:97:b2:18:12: 8a:40:bd:58:d6:e0:d6:d8:24:81:14:e6:44:87:2e:06:68:c3: 5a:0c:36:c7:e3:85:ae:02:69:ea:25:9c:87:95:71:87:dc:05: 5a:86:e6:bc:22:ec:69:ad:88:7a:cf:a3:ea:10:b5:e8:f6:a7: 84:90:73:32:50:e7:8d:0e:65:4b:d0:df:99:2a:df:5b:e0:cf: 3a:33:01:17:ef:a8:25:f9:78:78:d4:12:69:df:a5:0e:8d:12: 41:8e:77:72:97:86:82:68:87:04:e6:ae:b7:7e:39:32:3d:3c: f6:83:0c:90:66:27:c7:30:9e:52:18:3d:5d:79:58:b5:92:5d: 93:0e:35:21:c1:6f:83:81:07:5f:bd:ea:f7:12:18:40:49:80: 13:54:d6:a5:5a:d5:78:a0:3e:a7:f7:eb:92:ea:c2:90:48:87: e4:29:12:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jyMnYcfnDfFHngboF+zDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjUxMjE5MTcwMTI2WhcNMjUxMjIwMTcwMTI2WjAzMTEwLwYDVQQD EyhmYjlkNjg3NDkzYjM0ZDA1ODI5Y2IzZGFmNzgwYzVkYjUzM2Q4OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+um1o3llQmYTaTY9LL6E+tRrT5J DCON0UMNRGFoJ9whAxPZ/+NU1/48PhSyjTHNqFEiYd7Lq1+GE1CO7DnIVURr6yzJ 0OfSf5okQ7EU5OuuL88J6AmvNF/5Ut7Rhk698sAuNgd4/JT/hZehIcyznn5bw89I A5M7Cxaq79/4a6LhnntjsPoZK6Elbz+RwBagG26Jo/msDXNapAX56fEs52TgGyj8 YA3rycbiwTIxLreYIgBZH16JEBtFRZAa8Pq7oxO7OYMMs+kAoEfJpYwj2NkN0Wtk MOfkZ8cOo5pQX6pF05r74mHC60FNpHkjmpeFbEbf4PNsIeoTjrW0O03PRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPudaHSTs00Fgpyz2veAxdtTPYnHMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebCPZbkd /P774srB3ryFJ6aABEYM5ijMqZQufN9ljs8lbHbvvFfPhyMOSWudJgTgNr6eppVU fLDRDNv0HJgXTIdNPhvDQjLTAD85PBdDNJ8itJHfcGCXshgSikC9WNbg1tgkgRTm RIcuBmjDWgw2x+OFrgJp6iWch5Vxh9wFWobmvCLsaa2Ies+j6hC16PanhJBzMlDn jQ5lS9DfmSrfW+DPOjMBF++oJfl4eNQSad+lDo0SQY53cpeGgmiHBOaut345Mj08 9oMMkGYnxzCeUhg9XXlYtZJdkw41IcFvg4EHX73q9xIYQEmAE1TWpVrVeKA+p/fr kurCkEiH5CkSlg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:27:11 2025 by rpki-client