This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json) Hash identifier: TlxpIM0wTd5UcFnzaQPGast/hHUbzyRzx6uZt7kTkTs= Subject key identifier: 7A:0C:AA:A4:6E:B3:52:A6:C4:BA:81:4C:30:50:46:61:9F:CB:F9:DB Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033 Certificate serial: 019AF276A781CC2729263D23046C122E4C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: QaWAw9xdHtR1/Z8Bhc10SD71ZL9zOfu97p/WQuw0R+Q=) 2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a7:81:cc:27:29:26:3d:23:04:6c:12:2e:4c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=7a0caaa46eb352a6c4ba814c305046619fcbf9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:39:b9:1e:4e:79:cc:af:67:e0:d6:a1:ee: f6:63:a0:55:b4:b5:5c:d9:a4:e1:d0:93:97:95:f0: 51:55:3c:2b:e6:a8:d6:4a:57:18:ee:8d:71:a0:33: 6b:9e:21:b1:10:bb:17:e5:f0:88:e6:bc:d9:ba:1f: 92:29:ff:01:69:d3:73:05:09:99:62:21:e3:3b:06: 8e:5d:fd:8e:c8:79:54:c1:f5:25:bb:d2:19:ff:b0: db:9e:8f:80:08:b5:9b:f5:b9:e7:c3:0e:0e:13:d8: 4c:5d:a9:cf:69:00:5d:e6:a0:2f:a0:26:18:a9:34: 28:a9:cc:64:39:61:cc:43:f5:4f:46:98:07:ab:1b: 0f:54:54:ce:bd:45:39:bb:5a:e1:5a:5d:30:73:cd: 6f:38:1f:ff:70:52:20:70:8b:e9:34:ac:73:88:76: 80:89:74:0e:33:c9:9f:04:99:eb:0b:ab:ab:78:71: c4:25:3d:92:f0:62:7a:a4:30:8f:f7:4f:73:14:2a: d1:22:b6:fc:a6:bf:bb:59:d2:5d:32:21:60:a7:d0: fe:d5:de:9e:c7:1f:f6:51:47:0c:45:57:a5:81:3a: 5c:11:ee:44:a6:a2:0d:e5:8d:52:b3:68:67:03:58: 04:59:85:60:f0:98:fb:b3:f9:90:fd:07:85:81:b6: 44:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0C:AA:A4:6E:B3:52:A6:C4:BA:81:4C:30:50:46:61:9F:CB:F9:DB X509v3 Authority Key Identifier: keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fb:5a:12:94:6e:21:51:dd:07:72:de:0b:61:5d:bf:b8:4b: 03:13:67:00:02:45:a9:98:e5:94:9b:97:6a:91:fc:3e:e4:3c: 05:66:76:7b:99:e9:8a:11:fb:cc:0d:16:5d:52:c9:bb:3f:28: 4d:bf:81:98:ba:e6:73:36:fc:ed:27:92:ca:03:4b:45:ce:f6: f2:26:68:88:b6:6a:1c:98:d9:b7:70:ae:c7:bd:72:9f:60:be: 8f:be:0c:38:57:96:da:45:e8:0b:79:99:61:b9:3d:78:12:63: b7:55:18:87:84:6c:5d:14:78:70:cc:9f:8c:85:3a:a6:2c:12: c6:63:92:6d:42:1e:7b:62:75:ac:24:5a:3d:d5:0b:e7:60:b4: da:d2:71:12:47:70:c2:53:ed:2c:3c:7b:f5:24:41:12:de:ee: 63:1e:e5:82:62:e5:84:a4:4c:89:58:7e:30:f2:ab:88:13:3d: 4f:f3:bb:32:5a:3f:03:8e:d2:a0:fd:05:c5:3c:9d:29:bc:60: 8c:f2:c5:db:18:74:f7:31:67:aa:51:2d:8e:01:3c:42:08:90: 5a:09:35:46:89:b7:eb:7e:c6:76:2f:f6:ed:b1:df:ca:f3:c5: 17:bc:dc:2c:0a:44:b6:46:cb:1e:55:cf:4f:44:4b:c9:82:19: 93:d3:52:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqeBzCcpJj0jBGwSLkxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzlkYTE0ODNmZTM5OTNkMTk4NTI2MDYxOTczNWM0Y2Zk MzgwMzMwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD Eyg3YTBjYWFhNDZlYjM1MmE2YzRiYTgxNGMzMDUwNDY2MTlmY2JmOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuec5uR5OecyvZ+DWoe72Y6BVtLVc 2aTh0JOXlfBRVTwr5qjWSlcY7o1xoDNrniGxELsX5fCI5rzZuh+SKf8BadNzBQmZ YiHjOwaOXf2OyHlUwfUlu9IZ/7Dbno+ACLWb9bnnww4OE9hMXanPaQBd5qAvoCYY qTQoqcxkOWHMQ/VPRpgHqxsPVFTOvUU5u1rhWl0wc81vOB//cFIgcIvpNKxziHaA iXQOM8mfBJnrC6ureHHEJT2S8GJ6pDCP909zFCrRIrb8pr+7WdJdMiFgp9D+1d6e xx/2UUcMRVelgTpcEe5EpqIN5Y1Ss2hnA1gEWYVg8Jj7s/mQ/QeFgbZEDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoMqqRus1KmxLqBTDBQRmGfy/nbMB8GA1UdIwQY MBaAFFDJ2hSD/jmT0ZhSYGGXNcTP04AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQt Yzg1NWRhZmFkZDVjLzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQtYzg1NWRhZmFkZDVj LzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/taEpRu IVHdB3LeC2Fdv7hLAxNnAAJFqZjllJuXapH8PuQ8BWZ2e5npihH7zA0WXVLJuz8o Tb+BmLrmczb87SeSygNLRc728iZoiLZqHJjZt3Cux71yn2C+j74MOFeW2kXoC3mZ Ybk9eBJjt1UYh4RsXRR4cMyfjIU6piwSxmOSbUIee2J1rCRaPdUL52C02tJxEkdw wlPtLDx79SRBEt7uYx7lgmLlhKRMiVh+MPKriBM9T/O7Mlo/A47SoP0FxTydKbxg jPLF2xh09zFnqlEtjgE8QgiQWgk1Rom3637Gdi/27bHfyvPFF7zcLApEtkbLHlXP T0RLyYIZk9NSCw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:15 2025 by rpki-client