This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json) Hash identifier: ApkK4JNkbjiVaqjqw3EhAp+pEWJQCSlQ0RcA3mFWfpg= Subject key identifier: 83:4C:8F:24:39:28:FB:44:8D:A9:D6:DA:E1:BC:47:96:7F:27:A3:A4 Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5 Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5 Certificate serial: 019B24E3E4FD627332FC71D8FE5760F8E2E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft Manifest number: 16C0 Signing time: Tue 16 Dec 2025 02:01:13 +0000 Manifest this update: Tue 16 Dec 2025 02:01:13 +0000 Manifest next update: Wed 17 Dec 2025 02:01:13 +0000 Files and hashes: 1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=) 2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: M3B8Uqs1cQUHktN9nB+zLZ49q5e8Y0fIOjoWVUH99Us=) 3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=) 4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:e4:fd:62:73:32:fc:71:d8:fe:57:60:f8:e2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5 Validity Not Before: Dec 16 02:01:13 2025 GMT Not After : Dec 17 02:01:13 2025 GMT Subject: CN=834c8f243928fb448da9d6dae1bc47967f27a3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:c3:b6:09:29:09:5f:9e:f7:d9:7f:90:27: c1:d8:2b:08:43:6a:29:7f:1e:11:40:dc:bd:ae:14: ca:22:52:cf:7d:9d:a3:32:d7:da:7c:5c:ae:93:5f: 64:e2:75:12:10:bc:19:66:e8:b3:cb:1d:71:6a:69: e1:21:5e:48:3c:a2:92:2c:09:fb:60:4a:30:2c:89: 37:f8:cb:6b:94:d6:66:45:f8:b0:f7:b6:46:06:dc: dd:4d:af:8e:c0:ca:4e:b4:65:3c:8e:95:ef:05:60: 42:ab:3a:09:ab:fa:a2:7d:60:47:43:52:3a:63:c1: 86:83:b2:09:48:a4:3e:5a:33:8a:c9:4b:57:29:26: 02:b5:65:a9:50:ce:ed:e3:68:4c:0c:fd:22:14:c2: 2a:f8:5b:c0:90:4e:b4:c5:7a:9e:df:4e:47:6a:85: ae:31:78:c9:23:e6:6d:6e:d8:3b:15:05:a1:bc:b2: e0:e0:67:66:88:be:7e:64:2d:b2:47:93:db:89:a0: a9:71:f0:cd:42:40:e1:18:46:27:a1:a6:1b:b7:9b: 42:95:a4:31:d1:25:15:c8:06:64:4b:58:aa:6b:0c: 39:93:d4:59:79:14:26:5c:4e:ed:87:bc:15:cf:34: 2c:26:38:2c:2e:ad:02:a1:87:32:4d:84:2f:e3:65: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4C:8F:24:39:28:FB:44:8D:A9:D6:DA:E1:BC:47:96:7F:27:A3:A4 X509v3 Authority Key Identifier: keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ac:ff:02:2e:0f:23:c2:a3:01:75:54:eb:0b:8e:dd:e5:a3: 92:1a:a6:2b:45:d7:a5:75:0a:e4:15:15:80:b4:da:f4:0d:1a: 21:b6:54:87:24:74:80:c4:e5:a6:79:a3:cf:99:4c:d9:be:b2: ee:30:32:13:f3:35:63:41:2a:74:d6:28:05:41:97:15:c6:5a: ec:3e:18:2d:d4:08:30:a3:9d:12:15:4a:d4:9b:33:0e:a1:c7: 19:b0:e4:6c:d0:e2:da:b3:d3:ee:29:21:83:cc:0d:a5:f3:b9: d0:dd:28:25:43:dd:a7:6a:d7:06:ab:b3:bd:a0:07:f3:f5:0e: 43:42:eb:51:98:54:d6:93:32:32:87:50:31:9d:e0:1d:c8:13: cc:55:d0:79:b1:88:a6:aa:a5:c1:0c:17:e2:bb:15:7f:ca:94: bf:5f:7d:9c:9b:5c:0c:b3:a5:5c:22:d7:9d:fb:5d:2e:2b:d2: 3e:2c:63:a1:20:ee:15:15:89:b8:63:01:19:7a:6d:61:d5:24: ab:e1:19:b3:b8:d9:34:0a:5c:5b:4c:15:a5:46:45:93:c0:a3: 97:a8:35:b8:b7:50:51:b0:6b:63:5c:62:7f:2e:09:6c:4e:40: 4c:e8:8a:13:16:e1:3d:1c:3f:e0:74:e6:fd:86:65:15:e2:b9: b7:4a:6e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4+T9YnMy/HHY/ldg+OLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx NGYwYjUwHhcNMjUxMjE2MDIwMTEzWhcNMjUxMjE3MDIwMTEzWjAzMTEwLwYDVQQD Eyg4MzRjOGYyNDM5MjhmYjQ0OGRhOWQ2ZGFlMWJjNDc5NjdmMjdhM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkDDtgkpCV+e99l/kCfB2CsIQ2op fx4RQNy9rhTKIlLPfZ2jMtfafFyuk19k4nUSELwZZuizyx1xamnhIV5IPKKSLAn7 YEowLIk3+MtrlNZmRfiw97ZGBtzdTa+OwMpOtGU8jpXvBWBCqzoJq/qifWBHQ1I6 Y8GGg7IJSKQ+WjOKyUtXKSYCtWWpUM7t42hMDP0iFMIq+FvAkE60xXqe305HaoWu MXjJI+Ztbtg7FQWhvLLg4GdmiL5+ZC2yR5PbiaCpcfDNQkDhGEYnoaYbt5tClaQx 0SUVyAZkS1iqaww5k9RZeRQmXE7th7wVzzQsJjgsLq0CoYcyTYQv42UCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINMjyQ5KPtEjanW2uG8R5Z/J6OkMB8GA1UdIwQY MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct NTlkNmNhNjVjY2JjLzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6z/Ai4P I8KjAXVU6wuO3eWjkhqmK0XXpXUK5BUVgLTa9A0aIbZUhyR0gMTlpnmjz5lM2b6y 7jAyE/M1Y0EqdNYoBUGXFcZa7D4YLdQIMKOdEhVK1JszDqHHGbDkbNDi2rPT7ikh g8wNpfO50N0oJUPdp2rXBquzvaAH8/UOQ0LrUZhU1pMyModQMZ3gHcgTzFXQebGI pqqlwQwX4rsVf8qUv199nJtcDLOlXCLXnftdLivSPixjoSDuFRWJuGMBGXptYdUk q+EZs7jZNApcW0wVpUZFk8Cjl6g1uLdQUbBrY1xify4JbE5ATOiKExbhPRw/4HTm /YZlFeK5t0puUg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:41 2025 by rpki-client