This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json) Hash identifier: kKeu9C3uizvvaacG+Owf8wz6Ai76+u+7/1zG6++Ilso= Subject key identifier: 06:7C:55:09:73:A5:51:CE:C9:7C:98:BE:DD:A1:D8:0C:3D:06:98:D8 Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02 Certificate serial: 019C43222E10268F536113DCD73FD6AFE80D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft Manifest number: 0EDC Signing time: Mon 09 Feb 2026 16:00:39 +0000 Manifest this update: Mon 09 Feb 2026 16:00:39 +0000 Manifest next update: Tue 10 Feb 2026 16:00:39 +0000 Files and hashes: 1: 48VETktm8u5cwxfi5tzhrXCS1PA.roa (hash: pocJNPkIQ+wfrZHo23pdtb1YIKYD79x6IBlh2144Vzk=) 2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: ZDavXzNV+gwMbTMU30Nvz2nrqyXG4k859NfYIexjsGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:2e:10:26:8f:53:61:13:dc:d7:3f:d6:af:e8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02 Validity Not Before: Feb 9 16:00:39 2026 GMT Not After : Feb 10 16:00:39 2026 GMT Subject: CN=067c550973a551cec97c98bedda1d80c3d0698d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:24:1e:06:2c:4b:31:0c:55:e1:eb:b6:7a: b9:fb:89:f9:1c:68:54:be:69:e5:ae:51:e8:f0:24: 96:0b:85:f4:fd:b3:c4:fa:79:5d:cd:1a:a1:b7:ec: 18:d5:09:6c:90:67:cb:c2:34:0b:de:c5:da:98:95: 0f:30:13:1f:51:79:d3:18:ac:04:75:04:ac:9a:d1: 75:2a:3c:e1:18:2b:eb:11:cc:b6:80:b5:ee:5d:fa: db:a9:3e:db:9d:55:ee:c1:2f:1d:66:20:37:b0:ef: 13:cb:d0:41:68:f5:f9:8f:05:94:1e:c8:66:82:60: 07:07:ac:5b:f6:89:9c:50:94:6e:de:43:b7:b1:fd: 63:a8:1c:5d:fc:30:5f:34:a5:b8:7a:f0:3c:71:47: b3:54:db:8f:07:90:3f:f9:59:31:96:43:4b:f4:f2: 11:14:16:91:49:da:45:d1:40:dc:2e:e6:cf:77:e8: ab:20:bf:a7:fe:82:34:1f:a4:72:ee:59:86:15:8e: 32:15:8b:3f:80:4d:7b:65:a7:f9:b1:e6:74:b2:6f: 5c:40:57:2b:f8:ed:ad:49:2a:65:0e:6b:d0:38:bb: 7b:99:24:87:5a:c8:78:a7:fa:ca:48:8f:f6:a1:39: 6e:03:1e:54:90:e5:4c:c8:3e:1a:7d:78:ba:e6:75: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:55:09:73:A5:51:CE:C9:7C:98:BE:DD:A1:D8:0C:3D:06:98:D8 X509v3 Authority Key Identifier: keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2a:2a:91:c9:73:cc:8b:ad:ae:fa:b6:d9:36:94:5d:4c:43: a7:39:9f:85:5a:c9:80:82:ce:06:2e:88:a3:ec:81:2d:7f:04: 0a:69:b1:53:36:45:97:2e:63:4a:70:35:36:69:88:2a:da:3b: 13:9c:24:72:dd:7d:fd:e9:9b:d3:61:53:ab:6a:0a:cd:2c:e3: 46:93:d8:b2:f2:37:85:1b:1c:ad:0c:10:7d:96:41:b1:44:7d: 5c:13:a7:65:e3:9e:59:43:5f:94:95:1a:95:37:78:f3:91:49: d9:b3:c9:69:da:95:5c:e0:70:77:eb:f3:b4:fa:99:b9:e8:35: b3:5f:4a:fb:dc:f4:6b:fb:5c:fd:ff:85:1b:ad:56:d1:8e:7b: 22:13:ee:af:a3:8b:89:9a:91:71:4a:86:e6:16:e9:2c:bb:56: 97:39:85:59:51:de:ce:5a:a3:e7:21:82:00:04:23:48:42:4f: 16:41:12:03:b2:0f:08:71:c9:b4:c2:6a:e9:97:f1:a2:99:27: 63:88:ba:1a:7c:59:89:7d:d7:d2:8a:12:3e:1b:a1:a9:b6:fe: 1d:e0:f4:79:dc:2e:7b:f2:ca:01:d0:3e:5a:ee:f3:2f:79:5f: 47:4a:2c:8e:78:3d:03:0b:64:c7:85:02:d2:8f:5d:68:52:a7: 14:40:68:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIi4QJo9TYRPc1z/Wr+gNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz OWNhMDIwHhcNMjYwMjA5MTYwMDM5WhcNMjYwMjEwMTYwMDM5WjAzMTEwLwYDVQQD EygwNjdjNTUwOTczYTU1MWNlYzk3Yzk4YmVkZGExZDgwYzNkMDY5OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxUkHgYsSzEMVeHrtnq5+4n5HGhU vmnlrlHo8CSWC4X0/bPE+nldzRqht+wY1QlskGfLwjQL3sXamJUPMBMfUXnTGKwE dQSsmtF1KjzhGCvrEcy2gLXuXfrbqT7bnVXuwS8dZiA3sO8Ty9BBaPX5jwWUHshm gmAHB6xb9omcUJRu3kO3sf1jqBxd/DBfNKW4evA8cUezVNuPB5A/+VkxlkNL9PIR FBaRSdpF0UDcLubPd+irIL+n/oI0H6Ry7lmGFY4yFYs/gE17Zaf5seZ0sm9cQFcr +O2tSSplDmvQOLt7mSSHWsh4p/rKSI/2oTluAx5UkOVMyD4afXi65nWVlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ8VQlzpVHOyXyYvt2h2Aw9BpjYMB8GA1UdIwQY MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayoqkclz zIutrvq22TaUXUxDpzmfhVrJgILOBi6Io+yBLX8ECmmxUzZFly5jSnA1NmmIKto7 E5wkct19/emb02FTq2oKzSzjRpPYsvI3hRscrQwQfZZBsUR9XBOnZeOeWUNflJUa lTd485FJ2bPJadqVXOBwd+vztPqZueg1s19K+9z0a/tc/f+FG61W0Y57IhPur6OL iZqRcUqG5hbpLLtWlzmFWVHezlqj5yGCAAQjSEJPFkESA7IPCHHJtMJq6Zfxopkn Y4i6GnxZiX3X0ooSPhuhqbb+HeD0edwue/LKAdA+Wu7zL3lfR0osjng9Awtkx4UC 0o9daFKnFEBoMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:40 2026 by rpki-client