This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json) Hash identifier: 3p/M1HlgPKhLkCxxnoUmdkFF+2Wh5bFpFsPQbVGmkBQ= Subject key identifier: 74:E6:10:EA:80:1C:B0:5E:39:A1:34:38:CA:B1:7D:D2:F2:42:C7:FA Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02 Certificate serial: 019B2AAF0D311D66AEEDE56F99569998D75C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft Manifest number: 0E4A Signing time: Wed 17 Dec 2025 05:01:13 +0000 Manifest this update: Wed 17 Dec 2025 05:01:13 +0000 Manifest next update: Thu 18 Dec 2025 05:01:13 +0000 Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=) 2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: sUyr175F3DBHo3U85rNSZiq3kK0kgail9r7SJ4ARSG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:af:0d:31:1d:66:ae:ed:e5:6f:99:56:99:98:d7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02 Validity Not Before: Dec 17 05:01:13 2025 GMT Not After : Dec 18 05:01:13 2025 GMT Subject: CN=74e610ea801cb05e39a13438cab17dd2f242c7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:cc:e9:d4:cb:93:83:02:f6:95:cf:63:b4: b0:d3:fe:e5:49:aa:37:fb:fa:72:f0:23:fc:a4:be: 54:33:a3:b8:47:c9:20:6a:55:24:64:44:32:cc:b2: 12:9d:b6:98:6a:52:90:9f:99:bf:b3:58:49:18:0e: fc:0a:c0:d8:0d:d1:e0:56:a1:8b:bf:70:5d:0d:da: ea:21:ac:83:76:51:9e:1b:cd:51:93:fd:ae:17:eb: 73:ab:04:3a:ba:5e:6a:22:86:5b:e3:7f:0c:5d:74: 39:fd:ce:b6:5d:6f:ae:e0:c0:94:39:32:36:cb:ba: b2:a6:51:d3:f2:07:6b:de:aa:f3:a2:0f:ce:2a:6d: 6f:d5:0a:a5:0b:fa:85:94:22:7f:f1:f4:a7:83:39: db:2b:6b:38:8e:88:2a:15:42:c4:9f:16:11:5b:fb: 8c:a1:97:3d:f0:e2:6f:50:7b:a1:ea:78:6b:82:65: 28:26:d1:0a:03:a0:1c:42:99:b1:c0:00:a7:66:07: bd:0d:34:3e:41:8d:e4:03:9c:9f:b3:22:97:4c:62: c9:c8:c7:7a:24:60:57:a9:f4:87:6a:71:d0:f5:d2: f4:b1:e3:fa:44:45:fb:1b:51:03:5b:a5:7c:cd:71: 6e:36:10:cd:2e:59:c9:76:a8:5a:35:24:04:d7:1d: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E6:10:EA:80:1C:B0:5E:39:A1:34:38:CA:B1:7D:D2:F2:42:C7:FA X509v3 Authority Key Identifier: keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ad:5a:2a:d2:f5:ce:9f:0c:90:e7:ac:74:a9:ed:b6:53:40: da:bc:03:83:94:0d:d7:4d:b8:67:27:2c:64:17:56:3b:98:df: c1:10:df:de:9b:06:90:8a:cc:96:53:22:04:8b:a6:d1:65:7d: 11:80:b6:21:08:6e:07:11:47:78:da:de:56:2d:c1:66:a6:45: 16:75:c4:52:0d:05:cd:48:4c:5b:ed:d6:62:39:c3:b1:5d:12: 50:fd:ad:f4:a8:06:1f:26:25:88:2c:d5:6c:00:fe:df:de:32: 63:14:c0:01:a2:7a:e4:90:d5:72:68:12:99:be:25:81:bb:ee: e5:ff:47:13:8e:6f:e5:d0:7e:01:65:4c:f3:a0:10:83:6b:d0: 61:84:80:30:97:c3:e3:99:0d:8e:43:eb:8f:bb:83:7c:8e:95: 74:bf:aa:5b:68:7f:83:65:68:4e:55:ae:4c:57:51:f4:76:14: df:11:71:8c:a6:c2:79:f2:35:2f:61:69:46:ad:63:97:c3:f6: d8:a0:a5:22:21:1f:88:4f:ba:e6:f9:9a:8a:7b:6a:6f:c4:be: 29:ba:cd:f8:1c:00:23:c9:c4:02:44:f5:fc:57:23:b3:ab:36: 52:d0:b9:82:29:69:19:09:98:a8:2e:1f:f3:4a:30:ae:c1:53: 01:cc:6f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrw0xHWau7eVvmVaZmNdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz OWNhMDIwHhcNMjUxMjE3MDUwMTEzWhcNMjUxMjE4MDUwMTEzWjAzMTEwLwYDVQQD Eyg3NGU2MTBlYTgwMWNiMDVlMzlhMTM0MzhjYWIxN2RkMmYyNDJjN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwfM6dTLk4MC9pXPY7Sw0/7lSao3 +/py8CP8pL5UM6O4R8kgalUkZEQyzLISnbaYalKQn5m/s1hJGA78CsDYDdHgVqGL v3BdDdrqIayDdlGeG81Rk/2uF+tzqwQ6ul5qIoZb438MXXQ5/c62XW+u4MCUOTI2 y7qyplHT8gdr3qrzog/OKm1v1QqlC/qFlCJ/8fSngznbK2s4jogqFULEnxYRW/uM oZc98OJvUHuh6nhrgmUoJtEKA6AcQpmxwACnZge9DTQ+QY3kA5yfsyKXTGLJyMd6 JGBXqfSHanHQ9dL0seP6REX7G1EDW6V8zXFuNhDNLlnJdqhaNSQE1x3rHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTmEOqAHLBeOaE0OMqxfdLyQsf6MB8GA1UdIwQY MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASq1aKtL1 zp8MkOesdKnttlNA2rwDg5QN1024ZycsZBdWO5jfwRDf3psGkIrMllMiBIum0WV9 EYC2IQhuBxFHeNreVi3BZqZFFnXEUg0FzUhMW+3WYjnDsV0SUP2t9KgGHyYliCzV bAD+394yYxTAAaJ65JDVcmgSmb4lgbvu5f9HE45v5dB+AWVM86AQg2vQYYSAMJfD 45kNjkPrj7uDfI6VdL+qW2h/g2VoTlWuTFdR9HYU3xFxjKbCefI1L2FpRq1jl8P2 2KClIiEfiE+65vmaintqb8S+KbrN+BwAI8nEAkT1/Fcjs6s2UtC5gilpGQmYqC4f 80owrsFTAcxvow== -----END CERTIFICATE-----Generated at Wed Dec 17 15:15:25 2025 by rpki-client