This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json)
Hash identifier: zPHbTDNOzq7c1jFu4+wCba2BrQrWZZ3l2k4QSmjUnu8=
Subject key identifier: 86:1F:EA:92:80:C7:57:61:3A:29:17:54:07:21:29:C5:58:0C:06:42
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019AF19ADA2CE5EFD36B151ABD6919F8B8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
Manifest number: 17B0
Signing time: Sat 06 Dec 2025 03:00:48 +0000
Manifest this update: Sat 06 Dec 2025 03:00:48 +0000
Manifest next update: Sun 07 Dec 2025 03:00:48 +0000
Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=)
2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=)
3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=)
4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=)
5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=)
6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=)
7: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=)
8: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=)
9: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=)
10: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=)
11: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=)
12: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=)
13: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=)
14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=)
15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=)
16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=)
17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=)
18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=)
19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=)
20: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=)
21: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=)
22: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (hash: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=)
23: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=)
24: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=)
25: WT-GZLslFpz7tQemEuS3upR8DIQ.roa (hash: z52DbyoPRqp5Jhc+beypTnWSTAHlbvNvC0/Czw77X6s=)
26: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=)
27: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=)
28: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=)
29: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=)
30: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=)
31: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=)
32: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=)
33: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=)
34: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=)
35: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=)
36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=)
37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: PXtWqA4lZE6bEHNEuoyKfrJDQcO/X6WJ+RkAoi8xFww=)
38: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=)
39: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=)
40: zEYQcxtlW1wmT7QukjZ8R0-uUZM.roa (hash: 1xGIsUGG8vqOW6zzZuu7ghruVcnicPTvNfcH3r50TuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:da:2c:e5:ef:d3:6b:15:1a:bd:69:19:f8:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Dec 6 03:00:48 2025 GMT
Not After : Dec 7 03:00:48 2025 GMT
Subject: CN=861fea9280c757613a291754072129c5580c0642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:1c:9f:56:d3:6f:b9:4e:45:16:39:65:60:
9c:b6:05:8b:1c:da:6d:02:48:60:b1:75:c0:2f:02:
f6:f6:ea:a0:d8:28:eb:50:a3:da:4a:5e:d1:b7:e2:
fd:2d:c7:c1:d5:dd:b8:ca:40:9c:9e:73:38:29:98:
a4:78:b0:34:f9:ee:9e:35:47:be:c5:63:79:93:ba:
9b:31:8f:8f:62:9c:1f:8a:07:88:b4:26:55:80:dc:
db:2d:10:8f:db:4a:50:c6:1a:a7:0f:63:82:59:ee:
cd:fb:54:fe:f9:98:ce:ad:f5:88:f5:f6:ec:2a:e8:
95:09:84:f4:50:6c:51:f8:69:27:81:3c:1d:fd:5a:
c6:38:d9:17:b7:32:d3:3d:dc:61:26:ae:c8:ad:7c:
21:fb:f3:70:a4:54:b9:24:73:d6:9e:ef:f0:59:b7:
b9:5b:c9:cc:ac:a1:41:5b:e8:9d:96:fc:f5:cb:3a:
49:14:83:dd:89:46:23:ce:0d:9c:2f:6f:34:60:36:
62:ff:4a:10:a0:33:77:67:aa:5f:a6:7b:80:cb:23:
c4:e6:98:f3:87:c8:2f:0a:a3:c2:b4:b1:d7:75:ae:
af:c3:b4:8b:94:c9:5e:31:ba:db:cc:bf:64:05:db:
7d:cd:5a:50:93:e4:1b:f3:02:47:e6:6d:ae:0c:c3:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:EA:92:80:C7:57:61:3A:29:17:54:07:21:29:C5:58:0C:06:42
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:49:7e:69:29:e0:2f:37:a0:93:31:04:0a:ad:14:8c:fa:
9f:82:9e:6b:44:19:7d:a7:9b:66:18:2d:9b:18:95:8e:58:f5:
82:93:7c:ee:d1:9a:e5:f5:8d:38:47:b1:a1:fc:8d:ad:a2:fe:
e4:9a:eb:ff:8f:1d:2e:f7:c4:15:d0:d1:2c:ae:d7:b6:e1:2e:
7f:39:dc:02:e6:e0:f9:a4:f2:94:e0:9c:c1:6c:65:ad:6e:a0:
8b:a3:3b:37:7b:0a:f1:56:ba:60:0e:20:d4:63:ee:d5:07:2b:
be:e8:0d:8b:7e:7a:b1:21:c4:87:64:de:ef:51:97:64:50:48:
bc:21:db:b7:16:bd:33:20:6e:74:ea:17:66:a8:7c:d7:30:da:
c9:98:dc:3f:3f:28:2d:f0:80:22:69:46:73:e9:70:20:f6:11:
59:9f:38:b3:a5:d0:0b:82:50:c9:56:f0:fd:8b:98:ab:c5:fc:
76:d2:60:29:27:31:c6:df:7b:a1:6c:f1:44:cc:a6:e0:7e:74:
66:42:5f:ea:31:aa:8a:40:a9:41:77:4b:f8:05:df:5b:44:a6:
b0:80:99:32:6f:34:7b:ec:71:d9:1c:df:90:d3:12:05:ad:93:
43:95:ea:17:fd:0c:1e:96:fe:09:12:11:22:6e:7d:ed:a3:be:
10:83:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:12 2025 by rpki-client