This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json) Hash identifier: 5h/cKJWI3jnNgJ0lABqN6ZKDkQFIYEuONgOjpkvPX3I= Subject key identifier: 22:07:70:E9:4B:E6:CB:E1:F9:93:91:2C:89:AC:E1:79:62:15:77:33 Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02 Certificate serial: 019B590853F272E74209669E89DD6A9357EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft Manifest number: 0E62 Signing time: Fri 26 Dec 2025 05:01:16 +0000 Manifest this update: Fri 26 Dec 2025 05:01:16 +0000 Manifest next update: Sat 27 Dec 2025 05:01:16 +0000 Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=) 2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: ZGt71UBo6KbtAi/NO6AvAZhJGTRtAn6g3cR1871/A1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:53:f2:72:e7:42:09:66:9e:89:dd:6a:93:57:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02 Validity Not Before: Dec 26 05:01:16 2025 GMT Not After : Dec 27 05:01:16 2025 GMT Subject: CN=220770e94be6cbe1f993912c89ace17962157733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:3a:5d:f6:a3:3e:ca:61:8e:a7:22:b7:24: 72:43:ae:df:49:c6:d3:d4:92:e1:bf:d9:6c:48:c3: 94:df:a5:23:ee:f6:90:e3:ef:4b:d2:a1:ba:32:15: 49:87:83:99:2d:d8:c3:3e:55:cc:90:1a:82:55:c5: 10:e6:40:ea:d3:36:a6:df:57:06:49:73:f8:57:60: e9:bc:e1:40:20:4a:0d:be:5a:d8:87:2f:fd:b1:bc: eb:8e:bc:63:ac:98:79:e1:ff:bd:15:b6:af:fb:6b: 24:fb:78:d8:76:ba:ec:ef:af:ee:03:cf:4b:d9:bb: 7c:a8:a4:96:ab:86:c9:63:97:f3:2e:42:46:13:b8: 5d:84:92:81:93:43:ed:1c:ff:fa:ce:47:19:29:ed: 67:c4:f3:d1:d2:94:38:be:b4:87:9b:82:87:8f:9e: be:34:2f:69:46:5d:53:5a:33:34:79:02:78:d4:d4: 61:1d:5a:c5:c1:e4:22:b2:bb:4d:d0:d1:49:d6:a8: a3:1b:a7:0a:b6:c1:fe:f8:13:9f:2c:7e:2d:6b:ef: 1c:e5:d8:fa:4f:50:32:64:2b:ae:4b:2b:a3:54:c6: 41:ff:f7:ed:0e:a6:f1:f5:cf:7d:92:ad:f6:ee:92: 12:e7:da:17:69:99:5b:e6:c0:a3:cd:c3:46:28:52: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:07:70:E9:4B:E6:CB:E1:F9:93:91:2C:89:AC:E1:79:62:15:77:33 X509v3 Authority Key Identifier: keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:12:34:c7:70:92:51:1f:66:88:3c:7b:44:0e:07:d3:d6:a9: e3:8c:43:c2:7e:99:99:5d:df:66:7c:28:ad:28:06:06:f9:ec: fd:d3:b7:56:5f:ff:55:4a:52:ae:ad:63:d2:2a:a6:ec:6c:3d: 21:80:9e:cf:84:aa:03:48:04:bc:2c:e0:6f:81:c4:37:5b:a4: 68:2e:6a:b7:6c:6a:a0:d1:f0:b6:1f:d4:78:e4:39:c9:30:3e: 13:5e:75:1e:66:82:f7:33:4e:c8:f9:56:f6:08:ec:49:6b:fc: 6a:06:d5:45:91:18:0f:6c:9e:65:f1:b9:72:02:d1:7a:c2:81: 19:92:63:2a:74:fc:45:5c:ad:d6:21:a4:1e:44:1c:71:21:d5: 91:91:3e:c6:56:32:8d:3b:26:2c:b0:43:6f:7d:97:a9:e6:3f: 4e:7b:9a:01:57:15:54:e9:81:c0:15:ee:a4:ab:3c:7b:6a:a7: a3:66:15:a3:d0:c3:a4:63:b8:55:e4:6e:bb:14:7e:49:9b:2f: 65:e8:ba:26:d3:ee:63:88:21:d5:69:e6:e7:7b:7b:14:aa:96: 29:09:15:37:ff:67:60:44:8c:03:03:b3:1e:1c:59:44:4a:ed: ae:66:5d:b1:75:20:ca:e8:c4:3d:26:ea:2e:66:be:88:69:3f: 4c:0d:5d:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCFPycudCCWaeid1qk1fvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz OWNhMDIwHhcNMjUxMjI2MDUwMTE2WhcNMjUxMjI3MDUwMTE2WjAzMTEwLwYDVQQD EygyMjA3NzBlOTRiZTZjYmUxZjk5MzkxMmM4OWFjZTE3OTYyMTU3NzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9c6XfajPsphjqcityRyQ67fScbT 1JLhv9lsSMOU36Uj7vaQ4+9L0qG6MhVJh4OZLdjDPlXMkBqCVcUQ5kDq0zam31cG SXP4V2DpvOFAIEoNvlrYhy/9sbzrjrxjrJh54f+9Fbav+2sk+3jYdrrs76/uA89L 2bt8qKSWq4bJY5fzLkJGE7hdhJKBk0PtHP/6zkcZKe1nxPPR0pQ4vrSHm4KHj56+ NC9pRl1TWjM0eQJ41NRhHVrFweQisrtN0NFJ1qijG6cKtsH++BOfLH4ta+8c5dj6 T1AyZCuuSyujVMZB//ftDqbx9c99kq327pIS59oXaZlb5sCjzcNGKFLGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIHcOlL5svh+ZORLIms4XliFXczMB8GA1UdIwQY MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRI0x3CS UR9miDx7RA4H09ap44xDwn6ZmV3fZnworSgGBvns/dO3Vl//VUpSrq1j0iqm7Gw9 IYCez4SqA0gEvCzgb4HEN1ukaC5qt2xqoNHwth/UeOQ5yTA+E151HmaC9zNOyPlW 9gjsSWv8agbVRZEYD2yeZfG5cgLResKBGZJjKnT8RVyt1iGkHkQccSHVkZE+xlYy jTsmLLBDb32XqeY/TnuaAVcVVOmBwBXupKs8e2qno2YVo9DDpGO4VeRuuxR+SZsv Zei6JtPuY4gh1Wnm53t7FKqWKQkVN/9nYESMAwOzHhxZRErtrmZdsXUgyujEPSbq Lma+iGk/TA1d3A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:58 2025 by rpki-client