This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json) Hash identifier: QbR0WU7IVGvzPjT/HFh2RCxSF0aEGRyCiJylg+hFsuI= Subject key identifier: 00:7D:B2:D7:BC:C2:94:76:3A:5C:83:D0:8A:77:5E:B1:34:E3:36:E3 Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033 Certificate serial: 019BF68783361D7F238282B595D28379D9F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:00:34 +0000 Manifest this update: Sun 25 Jan 2026 19:00:34 +0000 Manifest next update: Mon 26 Jan 2026 19:00:34 +0000 Files and hashes: 1: R5_iJAHMim0AgymJSQ6r4wQbiHw.roa (hash: EQeRHkG43biXk81xozYoB7VEoug0HoUQn327W+HkcVI=) 2: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: 9h1s5vKSRnesrPIpGqIb8086mAMzRsVprQ+EjqgZ0Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:83:36:1d:7f:23:82:82:b5:95:d2:83:79:d9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033 Validity Not Before: Jan 25 19:00:34 2026 GMT Not After : Jan 26 19:00:34 2026 GMT Subject: CN=007db2d7bcc294763a5c83d08a775eb134e336e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:80:ee:25:2b:fa:9b:65:1f:9a:d2:b0:47: 35:2d:c3:89:44:bf:12:32:64:91:f2:11:f3:9c:80: 00:27:75:13:05:9b:35:c8:01:e4:a0:94:15:fa:33: c3:ad:89:0b:23:e8:d8:d2:de:94:29:9d:83:e6:fa: fc:e9:27:f4:b3:dc:4f:12:45:0d:91:64:80:54:2a: b0:72:de:81:a2:6d:8d:cd:6c:7f:4e:ef:95:8c:5f: f2:3b:2e:14:2b:f7:3b:4e:6f:92:f8:43:cb:1a:8b: 0f:13:a9:6b:1b:f9:5d:77:65:f7:53:9e:b5:68:7b: 23:2b:91:69:44:cf:50:76:fc:11:e0:45:5c:34:f9: 2d:f9:e5:14:75:53:8c:ad:04:c2:8b:9d:fc:26:4d: 10:62:be:a7:db:66:f9:81:f8:d3:5e:c7:03:88:dc: 64:9b:66:f3:4f:b5:05:a4:e7:9d:14:b8:75:9e:97: da:d5:14:07:90:dd:6d:39:c3:e8:0a:50:0f:e7:bf: 53:5a:fe:b7:d1:d5:a1:04:bb:1e:c7:0e:95:26:52: 4e:47:7e:d0:a9:32:b9:a0:34:ad:15:78:41:73:bd: 18:e2:3a:87:a7:8f:1e:c3:6e:a9:12:9a:01:95:6b: 93:83:36:75:a0:a6:50:86:16:ad:11:ef:34:20:4d: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:B2:D7:BC:C2:94:76:3A:5C:83:D0:8A:77:5E:B1:34:E3:36:E3 X509v3 Authority Key Identifier: keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:85:ac:27:d3:52:eb:40:ad:73:27:fd:da:a1:a3:17:39:c4: 5f:f5:1c:29:76:8e:85:60:9a:92:a2:38:68:11:bc:4c:38:10: 4b:1f:c8:b7:6b:e6:41:11:34:62:c5:26:9b:69:99:69:fb:65: cf:3f:0f:73:b7:b3:24:b9:b9:7a:20:e0:60:a1:fe:0c:92:5c: 70:f3:45:21:89:cd:c2:f3:6c:69:e4:08:59:49:3c:6d:d5:63: c6:77:17:76:2a:d4:1c:7f:80:77:ca:83:e3:10:51:68:8c:96: b7:49:e5:09:54:5c:0c:18:d1:85:f5:aa:50:11:8e:a2:37:de: 49:33:23:4a:b6:73:97:06:f3:06:c4:a5:24:b6:3f:f8:88:b6: 7e:c2:9f:50:e7:20:05:c1:f4:19:14:e2:fd:ce:58:86:21:fc: 49:3e:3a:d9:a1:bb:79:78:48:2a:43:78:0a:20:e8:c0:06:84: 3f:08:11:a7:94:10:c7:06:a0:7c:9e:c3:6f:0e:f7:50:c5:c5: f9:7a:03:54:c5:18:77:38:a1:d8:cb:03:d1:2f:7e:66:0e:17: 49:38:7b:7e:15:bb:7d:0f:b3:03:99:13:67:19:9c:87:1f:bb: 08:09:3d:a7:51:1e:a3:eb:58:45:43:cb:c9:25:ca:ae:7d:38: 5c:ba:ee:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4M2HX8jgoK1ldKDedn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzlkYTE0ODNmZTM5OTNkMTk4NTI2MDYxOTczNWM0Y2Zk MzgwMzMwHhcNMjYwMTI1MTkwMDM0WhcNMjYwMTI2MTkwMDM0WjAzMTEwLwYDVQQD EygwMDdkYjJkN2JjYzI5NDc2M2E1YzgzZDA4YTc3NWViMTM0ZTMzNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof+A7iUr+ptlH5rSsEc1LcOJRL8S MmSR8hHznIAAJ3UTBZs1yAHkoJQV+jPDrYkLI+jY0t6UKZ2D5vr86Sf0s9xPEkUN kWSAVCqwct6Bom2NzWx/Tu+VjF/yOy4UK/c7Tm+S+EPLGosPE6lrG/ldd2X3U561 aHsjK5FpRM9QdvwR4EVcNPkt+eUUdVOMrQTCi538Jk0QYr6n22b5gfjTXscDiNxk m2bzT7UFpOedFLh1npfa1RQHkN1tOcPoClAP579TWv630dWhBLsexw6VJlJOR37Q qTK5oDStFXhBc70Y4jqHp48ew26pEpoBlWuTgzZ1oKZQhhatEe80IE2gMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB9ste8wpR2OlyD0Ip3XrE04zbjMB8GA1UdIwQY MBaAFFDJ2hSD/jmT0ZhSYGGXNcTP04AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQt Yzg1NWRhZmFkZDVjLzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQtYzg1NWRhZmFkZDVj LzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4WsJ9NS 60Ctcyf92qGjFznEX/UcKXaOhWCakqI4aBG8TDgQSx/It2vmQRE0YsUmm2mZaftl zz8Pc7ezJLm5eiDgYKH+DJJccPNFIYnNwvNsaeQIWUk8bdVjxncXdirUHH+Ad8qD 4xBRaIyWt0nlCVRcDBjRhfWqUBGOojfeSTMjSrZzlwbzBsSlJLY/+Ii2fsKfUOcg BcH0GRTi/c5YhiH8ST462aG7eXhIKkN4CiDowAaEPwgRp5QQxwagfJ7Dbw73UMXF +XoDVMUYdzih2MsD0S9+Zg4XSTh7fhW7fQ+zA5kTZxmchx+7CAk9p1Eeo+tYRUPL ySXKrn04XLruNA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:42 2026 by rpki-client