This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json) Hash identifier: JWvXbD8wLfN+54Kzkhqd8Ty4ItDGsJQm7hSgfJhWqjc= Subject key identifier: 84:CB:8B:2F:10:54:23:80:02:04:DB:CE:2B:2D:44:E4:A9:06:A5:C0 Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7 Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7 Certificate serial: 019BB0269A9836050BEA5C1F2E651E999CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 03:01:18 +0000 Manifest this update: Mon 12 Jan 2026 03:01:18 +0000 Manifest next update: Tue 13 Jan 2026 03:01:18 +0000 Files and hashes: 1: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (hash: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E=) 2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: XhA2KEcTYypiBCFCR0eS8VCwCAtwxw+VWprEkrIT+00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:26:9a:98:36:05:0b:ea:5c:1f:2e:65:1e:99:9c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7 Validity Not Before: Jan 12 03:01:18 2026 GMT Not After : Jan 13 03:01:18 2026 GMT Subject: CN=84cb8b2f105423800204dbce2b2d44e4a906a5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:f9:63:48:90:fb:14:3d:da:11:6a:9c:fa: a7:e1:45:cb:5c:60:a3:ce:d4:01:5c:84:f4:3b:bd: 54:49:68:c9:b5:8b:d3:a7:6c:c7:28:76:b0:69:a3: 7e:94:73:66:ae:4b:2a:83:56:e2:a7:4e:d1:4e:bb: 8b:9a:3d:54:f0:f6:01:2a:3b:8a:3a:93:5b:8e:43: 44:36:47:05:b9:39:9c:66:65:5a:2a:7d:a1:25:c3: a7:05:54:98:af:38:b7:65:9a:a5:10:74:4a:b8:f3: e0:4a:53:38:28:63:5a:d7:28:c8:00:d3:e1:9b:45: 20:ab:ff:44:98:f9:e9:a9:f4:37:e0:60:a4:3f:14: 7a:02:b9:57:3a:96:37:18:21:f3:6d:2f:8e:4a:d3: a0:38:4d:28:0b:16:f2:17:2f:d1:4e:23:4d:53:52: d8:49:2b:83:5e:51:c9:6c:ba:bf:5a:2c:0c:3f:8c: b2:17:77:92:ff:81:56:3b:fe:80:f7:49:03:1b:86: 4b:62:f9:74:4b:3e:92:bc:53:a7:d5:0c:f4:0e:db: 5e:53:49:9f:4f:c3:71:3b:ab:ea:95:9d:26:86:92: 08:af:a8:d0:db:95:3f:61:10:20:1a:bb:8b:9c:76: 03:20:a9:f9:5a:52:8c:37:05:6f:2f:fb:1c:4f:eb: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:8B:2F:10:54:23:80:02:04:DB:CE:2B:2D:44:E4:A9:06:A5:C0 X509v3 Authority Key Identifier: keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:2c:79:89:8e:f7:03:9b:df:e3:22:91:9e:a3:ec:a5:35:32: 3c:3c:3e:95:b6:5f:ad:dd:35:2e:3a:6c:c0:b3:be:07:3a:52: 9b:93:63:e9:cf:b8:d5:85:f6:a5:f3:60:9d:31:52:6e:e8:5d: f1:c9:ae:14:45:6d:bd:f5:17:99:04:bc:7a:0a:01:b3:ca:f2: 82:bc:ae:74:aa:f1:f5:1f:cd:30:2f:20:b8:bb:ae:76:ba:80: e1:f9:fc:95:96:05:ef:88:5a:ee:8f:0d:be:28:58:61:1d:70: d7:ad:dd:b4:df:c1:f9:6a:6b:8d:88:f9:9d:bb:c5:82:9b:34: 7b:0a:36:c4:6f:7f:37:3a:27:eb:66:6a:ae:4d:5b:79:ac:8a: 16:28:c9:0a:d1:3a:22:04:4d:16:4f:8a:cb:2b:42:23:6a:f6: 13:74:53:6e:2f:88:07:53:14:d5:f6:e8:65:e5:7d:e2:fe:a2: 02:45:e3:48:92:2f:0b:4b:cc:69:c9:8b:60:60:6b:9c:1c:bb: a4:a2:28:b9:74:2f:76:bc:62:32:70:3d:9f:32:3b:45:53:07: 05:8f:f2:51:08:70:1f:71:26:57:f5:8b:a1:bb:4b:bf:d0:f9: cf:c3:48:1e:18:7c:6f:e6:03:9f:9d:26:dd:ae:b3:d1:f7:08: b5:1f:87:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwJpqYNgUL6lwfLmUemZzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNjg1NTk4MGIyNzNlNWFlNTdkYzFiOWViMjJlOWY1ZjNh N2NkZjcwHhcNMjYwMTEyMDMwMTE4WhcNMjYwMTEzMDMwMTE4WjAzMTEwLwYDVQQD Eyg4NGNiOGIyZjEwNTQyMzgwMDIwNGRiY2UyYjJkNDRlNGE5MDZhNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+/5Y0iQ+xQ92hFqnPqn4UXLXGCj ztQBXIT0O71USWjJtYvTp2zHKHawaaN+lHNmrksqg1bip07RTruLmj1U8PYBKjuK OpNbjkNENkcFuTmcZmVaKn2hJcOnBVSYrzi3ZZqlEHRKuPPgSlM4KGNa1yjIANPh m0Ugq/9EmPnpqfQ34GCkPxR6ArlXOpY3GCHzbS+OStOgOE0oCxbyFy/RTiNNU1LY SSuDXlHJbLq/WiwMP4yyF3eS/4FWO/6A90kDG4ZLYvl0Sz6SvFOn1Qz0DtteU0mf T8NxO6vqlZ0mhpIIr6jQ25U/YRAgGruLnHYDIKn5WlKMNwVvL/scT+tjmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITLiy8QVCOAAgTbzistROSpBqXAMB8GA1UdIwQY MBaAFKJoVZgLJz5a5X3Buesi6fXzp833MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEt ODFlYjYxZjViNzFlLzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEtODFlYjYxZjViNzFl LzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSx5iY73 A5vf4yKRnqPspTUyPDw+lbZfrd01LjpswLO+BzpSm5Nj6c+41YX2pfNgnTFSbuhd 8cmuFEVtvfUXmQS8egoBs8rygryudKrx9R/NMC8guLuudrqA4fn8lZYF74ha7o8N vihYYR1w163dtN/B+WprjYj5nbvFgps0ewo2xG9/Nzon62Zqrk1beayKFijJCtE6 IgRNFk+KyytCI2r2E3RTbi+IB1MU1fboZeV94v6iAkXjSJIvC0vMacmLYGBrnBy7 pKIouXQvdrxiMnA9nzI7RVMHBY/yUQhwH3EmV/WLobtLv9D5z8NIHhh8b+YDn50m 3a6z0fcItR+Hpg== -----END CERTIFICATE-----Generated at Mon Jan 12 05:03:14 2026 by rpki-client