This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json) Hash identifier: bldjqce+nSTczbV7PCh1cjfrtWDwEB+pNV4acmayuyo= Subject key identifier: 7F:FC:62:24:DC:5E:69:D7:F5:59:89:F3:9E:9F:46:79:8C:29:1A:9F Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033 Certificate serial: 019B3DC7ECB34B2F9A857291F4B2E45C833A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:11 +0000 Manifest this update: Sat 20 Dec 2025 22:01:11 +0000 Manifest next update: Sun 21 Dec 2025 22:01:11 +0000 Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: KJl1VhnvDjxGvDjaG7/wEc9YiGwASIObyxwrHsH2Zmk=) 2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ec:b3:4b:2f:9a:85:72:91:f4:b2:e4:5c:83:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033 Validity Not Before: Dec 20 22:01:11 2025 GMT Not After : Dec 21 22:01:11 2025 GMT Subject: CN=7ffc6224dc5e69d7f55989f39e9f46798c291a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:22:4f:bb:21:40:58:e6:16:28:d4:65:cf: f7:85:5b:36:a8:c8:60:91:a2:ba:aa:e8:dc:7e:27: 9f:ea:82:df:85:bf:05:12:42:0a:48:f4:01:ff:95: d4:6a:fc:b5:e5:99:bb:f1:53:8f:52:71:b0:a3:57: fd:d3:dd:a3:cd:5a:af:21:39:8a:3f:23:1f:22:c3: 43:13:4d:3d:61:15:b3:83:d0:ab:36:f3:36:45:ba: 88:89:56:f0:c4:8b:c1:18:8e:45:d3:65:9c:db:58: 4b:ec:98:47:88:2d:cf:d8:c5:f7:5e:cd:f4:90:6d: 77:8c:f4:97:ee:d7:fb:98:3e:4d:c2:ad:71:fa:0c: 1c:de:bd:20:48:9e:77:e9:54:ce:f9:22:1a:13:70: 67:8b:e9:a3:75:2a:d2:10:b6:8d:51:18:1f:2b:eb: fe:c2:54:71:34:e7:b9:cc:77:bb:cd:e7:10:f5:d5: a4:08:09:68:2b:0e:44:53:7d:2c:a0:45:49:01:95: 85:50:5d:f9:9f:66:c2:6d:05:ef:b4:9f:97:27:80: 09:8e:b2:e7:de:33:16:48:5a:c3:4e:e9:67:f9:63: 04:2c:2c:13:04:13:42:0f:0a:17:7e:83:8e:8a:e1: e2:b2:74:9f:20:53:9a:86:36:fd:c4:ac:f2:aa:23: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FC:62:24:DC:5E:69:D7:F5:59:89:F3:9E:9F:46:79:8C:29:1A:9F X509v3 Authority Key Identifier: keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c5:10:d6:7c:0b:44:26:b9:44:e6:7e:0a:c8:2b:13:4b:87: 71:98:85:1c:67:bf:47:41:24:b3:4b:f4:5a:84:65:6c:0f:67: fd:86:24:1f:cc:07:c1:78:8a:3f:0b:51:10:70:aa:52:5d:64: 9f:d5:1f:4a:d1:b1:e9:6c:1f:90:6b:67:c2:fb:40:9c:8b:00: 56:2b:ac:21:f0:70:e8:84:32:c1:57:c7:7c:f6:34:af:37:9a: 72:eb:10:70:24:f6:ec:68:bf:06:ea:06:4b:aa:35:a5:a7:a6: c6:f0:94:a6:81:9c:01:26:fb:b3:55:d2:89:7e:b3:9e:5a:31: 8f:b1:4a:1a:33:9e:a1:f0:c2:86:0c:8f:be:9b:49:65:76:af: 53:29:05:c8:ac:4a:02:0a:ba:f9:53:e2:9f:29:d5:8d:2f:ca: 28:54:91:19:1b:38:44:32:42:4b:5a:04:83:73:f6:a1:20:a1: cd:6a:39:67:fa:1a:b0:bd:4e:15:00:34:11:38:8d:fc:00:1e: fa:77:2f:97:23:c0:22:3b:5c:93:fc:6f:5d:aa:7b:e1:e1:54: d5:3b:63:db:18:50:6b:45:38:82:cb:70:2a:36:10:26:ce:86: cb:c2:74:20:f6:9a:89:8a:58:15:bf:3c:f9:41:08:51:f4:57: a1:cf:45:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+yzSy+ahXKR9LLkXIM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzlkYTE0ODNmZTM5OTNkMTk4NTI2MDYxOTczNWM0Y2Zk MzgwMzMwHhcNMjUxMjIwMjIwMTExWhcNMjUxMjIxMjIwMTExWjAzMTEwLwYDVQQD Eyg3ZmZjNjIyNGRjNWU2OWQ3ZjU1OTg5ZjM5ZTlmNDY3OThjMjkxYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrIiT7shQFjmFijUZc/3hVs2qMhg kaK6qujcfief6oLfhb8FEkIKSPQB/5XUavy15Zm78VOPUnGwo1f9092jzVqvITmK PyMfIsNDE009YRWzg9CrNvM2RbqIiVbwxIvBGI5F02Wc21hL7JhHiC3P2MX3Xs30 kG13jPSX7tf7mD5Nwq1x+gwc3r0gSJ536VTO+SIaE3Bni+mjdSrSELaNURgfK+v+ wlRxNOe5zHe7zecQ9dWkCAloKw5EU30soEVJAZWFUF35n2bCbQXvtJ+XJ4AJjrLn 3jMWSFrDTuln+WMELCwTBBNCDwoXfoOOiuHisnSfIFOahjb9xKzyqiNnLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/8YiTcXmnX9VmJ856fRnmMKRqfMB8GA1UdIwQY MBaAFFDJ2hSD/jmT0ZhSYGGXNcTP04AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQt Yzg1NWRhZmFkZDVjLzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQtYzg1NWRhZmFkZDVj LzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8UQ1nwL RCa5ROZ+CsgrE0uHcZiFHGe/R0Eks0v0WoRlbA9n/YYkH8wHwXiKPwtREHCqUl1k n9UfStGx6WwfkGtnwvtAnIsAViusIfBw6IQywVfHfPY0rzeacusQcCT27Gi/BuoG S6o1paemxvCUpoGcASb7s1XSiX6znloxj7FKGjOeofDChgyPvptJZXavUykFyKxK Agq6+VPinynVjS/KKFSRGRs4RDJCS1oEg3P2oSChzWo5Z/oasL1OFQA0ETiN/AAe +ncvlyPAIjtck/xvXap74eFU1Ttj2xhQa0U4gstwKjYQJs6Gy8J0IPaaiYpYFb88 +UEIUfRXoc9Fcg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:15 2025 by rpki-client