This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json) Hash identifier: FaycCGhQ9QjBHSQ0LEawffWjNT34o4MHCV1ftbnBa8Y= Subject key identifier: 05:6D:8B:1E:06:0C:69:17:4B:19:78:EE:32:94:62:D9:55:44:A4:7B Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d Certificate serial: 019B48EFF31CB62737F5BDD750BF9B0CF3E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft Manifest number: 10CD Signing time: Tue 23 Dec 2025 02:00:43 +0000 Manifest this update: Tue 23 Dec 2025 02:00:43 +0000 Manifest next update: Wed 24 Dec 2025 02:00:43 +0000 Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=) 2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: wbpdMSZaehvAajU42xaiKRJY3RFZhrPWoyFDM3JPVzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:f3:1c:b6:27:37:f5:bd:d7:50:bf:9b:0c:f3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d Validity Not Before: Dec 23 02:00:43 2025 GMT Not After : Dec 24 02:00:43 2025 GMT Subject: CN=056d8b1e060c69174b1978ee329462d95544a47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:44:f8:81:71:94:52:60:2f:24:c7:eb:33: bd:d4:84:46:35:81:6c:01:40:07:e1:d4:81:0d:68: 29:98:62:76:7d:75:83:7f:e1:bf:79:a9:e4:48:18: 7e:2e:0d:89:c5:16:1c:f7:88:ca:bd:a0:32:0c:ef: d1:65:87:d4:05:06:ea:4b:bd:22:24:2b:6d:6b:3f: 58:47:b3:fb:dd:15:eb:ca:aa:a0:24:fe:e7:5c:35: 45:8d:b8:88:30:28:e5:e6:2a:28:a6:3c:37:4a:d1: 68:91:f1:13:e6:f8:f5:b7:bb:54:8b:8d:7f:f6:83: fa:27:be:6c:71:3e:14:5f:c2:69:15:38:f8:50:a2: e8:63:2b:4e:e7:60:4a:fc:96:3a:78:4b:0c:84:1c: 81:25:29:bb:e4:c2:1d:56:f2:47:6c:b1:c2:5b:9c: b1:a8:5f:d1:44:d0:8c:91:29:cd:30:70:0f:67:19: 86:76:75:91:f4:fc:01:b3:d1:57:2e:00:20:1a:c3: 9f:59:07:59:6a:87:0e:79:f4:c4:bf:9e:bc:4e:91: 5f:a5:66:b3:44:f4:9e:57:ef:49:18:7e:d4:f8:b1: c6:43:55:04:7c:9a:33:7c:19:7e:86:0f:56:51:5e: 34:ce:a9:6c:a1:66:ec:d4:c3:82:09:30:f7:e5:7c: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6D:8B:1E:06:0C:69:17:4B:19:78:EE:32:94:62:D9:55:44:A4:7B X509v3 Authority Key Identifier: keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a3:6c:46:23:07:ca:09:ee:9a:21:44:f9:8c:bc:93:e9:99: eb:32:5a:30:d9:93:6b:0a:76:f0:5a:92:3f:10:97:e7:ca:5a: af:ee:d8:bf:21:4c:15:4f:99:5d:d5:47:e0:09:fc:8e:a4:e6: 95:88:1d:38:b8:f6:9a:24:c8:31:dd:fa:85:ce:2a:dc:70:e3: d9:8e:07:37:7f:cc:48:fe:48:0f:cb:40:30:92:5c:87:99:9e: 57:0b:d9:18:83:79:3e:3a:e7:1f:89:43:a3:e2:4a:fb:e1:b3: 47:38:26:fa:86:1b:15:75:45:e5:f6:83:e3:93:63:3d:f4:fe: 00:a9:42:96:05:cc:5d:6d:bf:8e:8f:b4:16:2d:57:39:52:8e: a2:69:27:1b:48:58:f9:e8:93:31:dd:84:a1:5d:af:56:ff:7d: 02:9c:9b:34:81:4d:85:66:47:32:2e:59:a2:67:b2:5b:31:68: 0a:89:69:cc:5a:ea:a7:23:46:8d:a2:0a:88:49:38:b9:83:9d: 4c:cc:57:7b:f5:a2:34:c7:cf:c3:3c:1e:63:b3:39:15:87:b6: 46:6e:c7:9f:bc:f7:4a:40:10:44:2f:5d:50:6d:17:5d:31:d6: 48:c9:8e:9f:7b:1f:6f:cb:23:8c:20:8a:22:73:04:af:33:1f: cc:d7:af:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI7/Mctic39b3XUL+bDPPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZmJhNjgyZDY5YzFkMTA3MDhlZDdiNmFlYWEyMzJlZTg5 YjkwMWQwHhcNMjUxMjIzMDIwMDQzWhcNMjUxMjI0MDIwMDQzWjAzMTEwLwYDVQQD EygwNTZkOGIxZTA2MGM2OTE3NGIxOTc4ZWUzMjk0NjJkOTU1NDRhNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygFE+IFxlFJgLyTH6zO91IRGNYFs AUAH4dSBDWgpmGJ2fXWDf+G/eankSBh+Lg2JxRYc94jKvaAyDO/RZYfUBQbqS70i JCttaz9YR7P73RXryqqgJP7nXDVFjbiIMCjl5ioopjw3StFokfET5vj1t7tUi41/ 9oP6J75scT4UX8JpFTj4UKLoYytO52BK/JY6eEsMhByBJSm75MIdVvJHbLHCW5yx qF/RRNCMkSnNMHAPZxmGdnWR9PwBs9FXLgAgGsOfWQdZaocOefTEv568TpFfpWaz RPSeV+9JGH7U+LHGQ1UEfJozfBl+hg9WUV40zqlsoWbs1MOCCTD35XwF3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVtix4GDGkXSxl47jKUYtlVRKR7MB8GA1UdIwQY MBaAFHP7poLWnB0QcI7Xtq6qIy7om5AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2Qt ZjZjNjQ0Yzk0NjA4LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2QtZjZjNjQ0Yzk0NjA4 LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6NsRiMH ygnumiFE+Yy8k+mZ6zJaMNmTawp28FqSPxCX58par+7YvyFMFU+ZXdVH4An8jqTm lYgdOLj2miTIMd36hc4q3HDj2Y4HN3/MSP5ID8tAMJJch5meVwvZGIN5PjrnH4lD o+JK++GzRzgm+oYbFXVF5faD45NjPfT+AKlClgXMXW2/jo+0Fi1XOVKOomknG0hY +eiTMd2EoV2vVv99ApybNIFNhWZHMi5ZomeyWzFoColpzFrqpyNGjaIKiEk4uYOd TMxXe/WiNMfPwzweY7M5FYe2Rm7Hn7z3SkAQRC9dUG0XXTHWSMmOn3sfb8sjjCCK InMErzMfzNev+A== -----END CERTIFICATE-----Generated at Tue Dec 23 07:19:34 2025 by rpki-client