This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json) Hash identifier: rH45ef/O2zhSzIj4GKXVjqGAjFeu4dqD1TlLwqgURtc= Subject key identifier: 9F:E3:87:A4:73:C5:63:C4:59:7D:D6:CD:C7:E6:5B:3F:79:12:5C:E9 Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Certificate serial: 019B2BC1ABA9754242F2960295D943A47A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft Manifest number: 1712 Signing time: Wed 17 Dec 2025 10:01:11 +0000 Manifest this update: Wed 17 Dec 2025 10:01:11 +0000 Manifest next update: Thu 18 Dec 2025 10:01:11 +0000 Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=) 2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: 3HFHXWRPZpa+AQrRvac3dgjVfQW43cssdtiJjyuue/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:ab:a9:75:42:42:f2:96:02:95:d9:43:a4:7a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Validity Not Before: Dec 17 10:01:11 2025 GMT Not After : Dec 18 10:01:11 2025 GMT Subject: CN=9fe387a473c563c4597dd6cdc7e65b3f79125ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:06:23:64:32:61:97:72:cb:87:7f:08:9c: f4:57:aa:cc:7f:76:bd:86:6d:dd:77:4c:07:5f:2a: 7f:92:34:35:01:1e:76:b0:14:d8:59:ce:d0:f4:b8: f9:fa:c1:fa:21:df:bd:da:8f:e2:70:d9:1e:6f:68: ca:17:da:6a:40:bf:69:8a:c0:f6:6d:a8:6e:c3:a5: 14:cc:97:11:35:c1:d4:b2:de:79:b7:a9:0d:b9:7d: 60:26:cd:7a:18:09:07:1d:bf:63:e8:9c:7b:9c:1b: cf:82:ef:6f:ff:2b:d6:4c:2c:b4:59:1a:3b:95:9e: b1:5a:20:d6:0e:9c:0b:85:95:d0:de:4e:7d:e4:c4: 9e:00:5c:95:f7:6b:6a:0d:4c:6a:90:7e:76:58:40: d1:b6:41:90:c5:1a:f7:7d:c7:ea:fc:cd:db:e5:cb: a8:97:bc:d6:49:0a:dd:72:25:b9:28:c7:5b:62:bf: bc:20:57:fb:ff:c1:3b:d3:de:07:56:c4:6f:23:39: ea:9b:c7:84:43:0c:3e:32:20:ed:ef:0c:e8:21:8b: fd:d5:a1:d8:80:6e:a3:0c:01:a4:98:31:75:f4:8e: bd:db:96:a7:14:f8:80:80:ce:60:cb:31:e1:96:21: 9c:3b:99:c5:09:47:34:49:c5:90:a1:39:4d:1b:30: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:87:A4:73:C5:63:C4:59:7D:D6:CD:C7:E6:5B:3F:79:12:5C:E9 X509v3 Authority Key Identifier: keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:df:64:01:6d:04:87:ef:23:0d:62:5b:b1:95:99:32:aa:3d: 67:97:4f:2c:d6:12:0f:be:65:a1:53:02:66:f1:5a:dd:e2:23: 36:f0:62:e6:8d:60:5a:b9:f5:1b:65:5c:c6:c9:c2:50:69:e6: 27:4c:dd:c3:37:3c:6b:68:2a:f5:d5:d9:f8:3d:72:38:ea:e6: 45:3f:3b:d5:56:c6:5a:8b:2c:3b:a6:61:ba:37:84:a5:43:dc: 9c:8f:50:1b:5e:57:2b:82:33:43:c2:ba:f4:83:f0:50:01:ef: 68:e0:b4:91:c4:69:f9:f8:be:c7:11:fe:54:d5:1e:d1:0f:21: 62:06:07:42:64:9d:87:66:2f:5d:57:c4:6b:f9:cd:b8:7b:56: ef:bc:f3:68:a6:69:cb:b3:70:60:ff:f8:5f:42:ec:e9:c7:4d: 5f:96:94:e2:e5:ba:e0:fe:fb:3c:69:44:4c:a4:25:30:20:63: ed:0b:ee:45:bb:50:68:c2:69:2b:e1:88:b4:58:a9:ce:61:d5: a7:3a:ed:a8:4d:c3:b9:52:43:02:87:b3:f7:18:7e:0a:6f:d1: 3b:2c:d0:24:2f:a9:4f:db:2b:2d:df:4a:1f:d2:08:bd:df:8c: 10:40:2e:4d:3b:e0:93:86:f4:76:0e:5b:e4:d7:7e:d9:a4:b4: 0b:77:c0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwaupdUJC8pYCldlDpHpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5 ZjgxNjIwHhcNMjUxMjE3MTAwMTExWhcNMjUxMjE4MTAwMTExWjAzMTEwLwYDVQQD Eyg5ZmUzODdhNDczYzU2M2M0NTk3ZGQ2Y2RjN2U2NWIzZjc5MTI1Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUgGI2QyYZdyy4d/CJz0V6rMf3a9 hm3dd0wHXyp/kjQ1AR52sBTYWc7Q9Lj5+sH6Id+92o/icNkeb2jKF9pqQL9pisD2 bahuw6UUzJcRNcHUst55t6kNuX1gJs16GAkHHb9j6Jx7nBvPgu9v/yvWTCy0WRo7 lZ6xWiDWDpwLhZXQ3k595MSeAFyV92tqDUxqkH52WEDRtkGQxRr3fcfq/M3b5cuo l7zWSQrdciW5KMdbYr+8IFf7/8E7094HVsRvIznqm8eEQww+MiDt7wzoIYv91aHY gG6jDAGkmDF19I6925anFPiAgM5gyzHhliGcO5nFCUc0ScWQoTlNGzAMLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/jh6RzxWPEWX3WzcfmWz95ElzpMB8GA1UdIwQY MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN9kAW0E h+8jDWJbsZWZMqo9Z5dPLNYSD75loVMCZvFa3eIjNvBi5o1gWrn1G2VcxsnCUGnm J0zdwzc8a2gq9dXZ+D1yOOrmRT871VbGWossO6ZhujeEpUPcnI9QG15XK4IzQ8K6 9IPwUAHvaOC0kcRp+fi+xxH+VNUe0Q8hYgYHQmSdh2YvXVfEa/nNuHtW77zzaKZp y7NwYP/4X0Ls6cdNX5aU4uW64P77PGlETKQlMCBj7QvuRbtQaMJpK+GItFipzmHV pzrtqE3DuVJDAoez9xh+Cm/ROyzQJC+pT9srLd9KH9IIvd+MEEAuTTvgk4b0dg5b 5Nd+2aS0C3fAdQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:38 2025 by rpki-client