This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json) Hash identifier: Ki1nzOsZkhIJAafWKiSvRsgFSaUhYcE1FB2i0IcjWcg= Subject key identifier: B6:5F:23:21:0C:88:CE:70:E3:BC:8A:21:98:04:39:5C:E0:91:2B:56 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019AF2766D2A9554421F951A044CA9682EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft Manifest number: 0F0C Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=) 2: 9kfN7xGstaFbxYGcvfs3i3H4Rfg.roa (hash: Qr7ehwqJLmUYKY4GpzfSTvkuH4ftLTItGDeW31rfUYc=) 3: I-EAyalxyJcb3mCdLEW_KjnJh28.roa (hash: ILntYHJsQMd6NnMaYmwE9WwXTjkIQwH3De7tLAyjOys=) 4: IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa (hash: q3zwHLLir+6KRJpls1Fd7jTNccM1a26eqIKhpBQyAyQ=) 5: YxBRayM-vhxtM1AqEKC9omjhyDU.roa (hash: 8x1ScjX7HuUH81sXw9Xe7zT6ZtsS32sBRkIQuP2YYkc=) 6: eGD2qM9gyPlyNsWFm0ZA5Omy1IE.roa (hash: y0pG7C3wx0x5ZaENQv/xppcabkujI4sYVnGq/OBgcB8=) 7: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: EfNFCurM31Y9WHYE94KMKVP9xmSoBoxRuimLcz6/d3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6d:2a:95:54:42:1f:95:1a:04:4c:a9:68:2e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=b65f23210c88ce70e3bc8a219804395ce0912b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:ca:7a:61:9f:80:24:fc:f8:96:e8:d1:9f: 98:0c:e8:91:4e:b0:ef:11:0c:48:94:5f:5d:23:53: fb:ed:d2:7f:08:9f:57:db:4a:ca:4d:c8:fa:26:04: cd:3f:f2:ff:a6:63:9a:db:70:79:c2:19:1d:b2:aa: 50:da:e7:da:9f:d2:87:65:1a:be:09:2c:fa:52:e8: bc:bd:12:4b:a9:5b:9a:f5:5d:b7:a2:da:4d:e0:75: 67:db:50:35:c8:a9:db:01:0d:f5:34:2a:ce:ea:a5: 2e:86:55:10:fe:fc:a5:2f:21:45:57:97:a5:ae:8f: e9:7d:f4:8a:06:02:79:4a:a5:99:a2:54:e0:57:b7: 98:92:18:5d:f1:ee:d0:69:2d:ed:12:0b:9d:7e:10: d0:e8:b0:08:f4:21:02:52:d4:02:a4:de:23:e4:f9: 86:97:ba:e0:8f:e7:c8:2f:e1:0d:eb:41:00:96:a1: eb:c2:e4:bf:d8:17:3e:5c:15:34:87:75:42:fb:53: de:43:6c:9f:47:3f:ec:71:f6:c3:b6:56:9a:2b:83: 71:54:06:e4:91:cc:14:4e:21:9b:ac:ff:54:c6:cf: 1f:94:a6:11:76:65:37:ed:1e:33:7a:eb:f7:86:4f: d8:85:b2:cc:cd:7c:a6:6b:ee:81:ba:c4:21:f6:67: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:23:21:0C:88:CE:70:E3:BC:8A:21:98:04:39:5C:E0:91:2B:56 X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bc:57:0c:d0:3b:bd:42:8a:11:07:3c:57:28:87:c6:ce:e7: b2:16:93:18:e3:82:05:ec:d8:25:17:58:96:84:8c:76:96:0b: 62:40:3f:9c:52:b6:ef:1c:2c:ad:c9:3e:1e:f4:1d:df:27:ec: 41:e0:0d:4d:92:18:61:ee:d5:38:29:95:42:02:36:c4:94:c1: 56:a3:a2:75:1a:82:b5:27:20:38:c0:02:67:08:9f:2b:0e:f8: 52:af:1b:d1:57:4a:49:99:20:06:57:e4:59:33:72:9e:4a:57: e6:ee:5c:02:53:1b:f7:e0:6c:3d:29:c8:8e:7b:25:ea:0e:c6: 62:3a:f0:e4:64:4d:61:b1:64:4d:0d:14:75:87:8c:ec:5e:7f: ff:9d:5a:f5:0c:fb:bb:13:bc:72:0b:63:ad:6e:5a:90:f3:91: 35:20:b6:db:41:99:73:6d:e5:aa:dd:bf:74:47:f7:57:a7:82: cd:77:18:e7:33:6b:0d:d3:3d:dc:06:a6:e8:a3:07:8c:ff:75: cd:a0:ba:24:f8:13:42:4e:18:de:ae:5c:c2:56:1e:b5:11:f5: 8e:49:b7:0a:6c:3c:54:33:88:04:49:9b:ef:91:a8:11:94:85: 05:8d:db:49:31:b9:31:7a:1d:c4:31:fa:82:18:7e:74:cd:c7: 49:6d:b3:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm0qlVRCH5UaBEypaC74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhiNjVmMjMyMTBjODhjZTcwZTNiYzhhMjE5ODA0Mzk1Y2UwOTEyYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RDKemGfgCT8+Jbo0Z+YDOiRTrDv EQxIlF9dI1P77dJ/CJ9X20rKTcj6JgTNP/L/pmOa23B5whkdsqpQ2ufan9KHZRq+ CSz6Uui8vRJLqVua9V23otpN4HVn21A1yKnbAQ31NCrO6qUuhlUQ/vylLyFFV5el ro/pffSKBgJ5SqWZolTgV7eYkhhd8e7QaS3tEgudfhDQ6LAI9CECUtQCpN4j5PmG l7rgj+fIL+EN60EAlqHrwuS/2Bc+XBU0h3VC+1PeQ2yfRz/scfbDtlaaK4NxVAbk kcwUTiGbrP9Uxs8flKYRdmU37R4zeuv3hk/YhbLMzXyma+6BusQh9mdbmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZfIyEMiM5w47yKIZgEOVzgkStWMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLxXDNA7 vUKKEQc8VyiHxs7nshaTGOOCBezYJRdYloSMdpYLYkA/nFK27xwsrck+HvQd3yfs QeANTZIYYe7VOCmVQgI2xJTBVqOidRqCtScgOMACZwifKw74Uq8b0VdKSZkgBlfk WTNynkpX5u5cAlMb9+BsPSnIjnsl6g7GYjrw5GRNYbFkTQ0UdYeM7F5//51a9Qz7 uxO8cgtjrW5akPORNSC220GZc23lqt2/dEf3V6eCzXcY5zNrDdM93Aam6KMHjP91 zaC6JPgTQk4Y3q5cwlYetRH1jkm3Cmw8VDOIBEmb75GoEZSFBY3bSTG5MXodxDH6 ghh+dM3HSW2zIw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:14 2025 by rpki-client