This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json) Hash identifier: 2BqQU8j4bsVtHxoBK4n8d5EURvFqnGNHma2Y2LdyHj4= Subject key identifier: D5:B2:75:EB:E9:37:0F:2C:58:01:7D:62:EE:17:6F:6B:C4:7F:45:FB Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa Certificate serial: 019AF0BF022B5FC93EBE948B9BD2CBAD5A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft Manifest number: 15F1 Signing time: Fri 05 Dec 2025 23:00:40 +0000 Manifest this update: Fri 05 Dec 2025 23:00:40 +0000 Manifest next update: Sat 06 Dec 2025 23:00:40 +0000 Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: zKoGIABJYpdSsFvT29acLMOFtC2j5718RGWHmS5FKq8=) 2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:02:2b:5f:c9:3e:be:94:8b:9b:d2:cb:ad:5a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa Validity Not Before: Dec 5 23:00:40 2025 GMT Not After : Dec 6 23:00:40 2025 GMT Subject: CN=d5b275ebe9370f2c58017d62ee176f6bc47f45fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:53:ba:94:29:6b:bb:ce:eb:09:dc:f7:d5: 69:9b:95:04:7c:23:39:51:92:ba:e9:33:28:4b:94: 84:47:a2:2b:f8:3b:46:d0:06:34:d3:51:01:bf:01: 01:b5:90:40:26:75:e5:27:a3:7c:a3:29:a9:32:e7: 7a:a1:ea:84:95:25:41:4c:45:a0:2a:d9:34:77:30: e5:ad:81:8a:42:a8:31:8e:6f:e6:d8:f2:64:02:fd: ec:b2:9a:18:7e:97:40:fa:d5:32:e2:29:c3:5a:34: 9f:21:64:b2:21:08:62:12:0e:cf:32:8f:fa:0b:13: 77:05:b3:a7:07:0b:29:fa:39:3f:61:87:f2:38:8e: dd:88:2d:49:08:6e:09:e8:8f:cf:14:19:77:1f:5b: 28:6e:4d:2f:04:11:2a:e9:7a:0e:c1:56:94:b1:56: e6:07:62:34:cd:18:44:0f:0c:5f:72:2d:2b:56:d4: d2:7a:d0:ca:c4:a0:74:40:fa:a9:68:97:7f:70:89: a0:52:04:c6:61:0e:8c:13:4f:e9:63:2b:68:73:b4: a4:df:fd:db:49:96:b9:26:6b:28:43:f3:30:9b:ca: 1b:1f:88:09:ef:e8:64:8c:7c:ef:39:9b:a6:2e:dd: f5:54:ff:77:d1:30:20:6f:d6:a7:38:4c:49:b8:2f: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:75:EB:E9:37:0F:2C:58:01:7D:62:EE:17:6F:6B:C4:7F:45:FB X509v3 Authority Key Identifier: keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f6:2a:d0:68:45:61:18:db:97:bd:e6:80:6e:5f:75:67:9b: 1a:27:fa:07:93:00:c4:08:d9:6f:29:c3:91:b7:84:0d:03:16: bf:8b:dd:0f:24:a2:e4:ab:5a:b1:43:67:29:1c:51:b3:fe:3d: 4c:00:ff:d7:2a:3e:85:4e:1e:dc:85:95:99:62:25:30:f4:be: 4b:81:7b:75:75:78:c5:5b:de:98:a8:59:87:b0:2e:9f:9a:ed: 0e:bf:4c:e3:ef:b0:c1:dd:c2:1c:29:25:e0:2a:a2:b4:c7:b2: 73:3f:cc:0e:1d:5a:bc:10:50:c1:ac:48:24:0c:25:1c:f9:c4: 6a:1e:d7:90:cd:9a:6b:1b:1a:20:b0:6f:0d:50:49:b2:b8:33: bc:42:67:8f:b3:86:3d:d8:68:c2:b6:9f:d6:6d:7f:ee:f5:f1: b7:fc:6b:d2:61:99:33:96:a5:df:7a:ea:8f:49:71:00:0f:60: 4b:4e:a2:89:1a:96:1c:91:68:cc:e2:6f:2f:31:a4:a8:1a:8b: c2:1e:c0:21:7e:a5:e9:03:aa:ea:dd:be:20:29:ee:39:19:55: 0a:48:9d:48:74:73:ac:65:63:42:59:1a:30:89:38:00:a3:0f: 71:94:53:e4:b0:63:a1:1e:0f:02:09:22:69:38:b4:bc:b7:f1: ec:69:69:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwIrX8k+vpSLm9LLrVqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh ZDViYWEwHhcNMjUxMjA1MjMwMDQwWhcNMjUxMjA2MjMwMDQwWjAzMTEwLwYDVQQD EyhkNWIyNzVlYmU5MzcwZjJjNTgwMTdkNjJlZTE3NmY2YmM0N2Y0NWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQxTupQpa7vO6wnc99Vpm5UEfCM5 UZK66TMoS5SER6Ir+DtG0AY001EBvwEBtZBAJnXlJ6N8oympMud6oeqElSVBTEWg Ktk0dzDlrYGKQqgxjm/m2PJkAv3sspoYfpdA+tUy4inDWjSfIWSyIQhiEg7PMo/6 CxN3BbOnBwsp+jk/YYfyOI7diC1JCG4J6I/PFBl3H1sobk0vBBEq6XoOwVaUsVbm B2I0zRhEDwxfci0rVtTSetDKxKB0QPqpaJd/cImgUgTGYQ6ME0/pYytoc7Sk3/3b SZa5JmsoQ/Mwm8obH4gJ7+hkjHzvOZumLt31VP930TAgb9anOExJuC/mfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWydevpNw8sWAF9Yu4Xb2vEf0X7MB8GA1UdIwQY MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0 LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvYq0GhF YRjbl73mgG5fdWebGif6B5MAxAjZbynDkbeEDQMWv4vdDySi5KtasUNnKRxRs/49 TAD/1yo+hU4e3IWVmWIlMPS+S4F7dXV4xVvemKhZh7Aun5rtDr9M4++wwd3CHCkl 4CqitMeycz/MDh1avBBQwaxIJAwlHPnEah7XkM2aaxsaILBvDVBJsrgzvEJnj7OG Pdhowraf1m1/7vXxt/xr0mGZM5al33rqj0lxAA9gS06iiRqWHJFozOJvLzGkqBqL wh7AIX6l6QOq6t2+ICnuORlVCkidSHRzrGVjQlkaMIk4AKMPcZRT5LBjoR4PAgki aTi0vLfx7GlpWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:36 2025 by rpki-client