This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json) Hash identifier: WtwZG8QEDq7hA8uLAiSI8m+7SCQd9jWsIhOkB7WXSy4= Subject key identifier: 4A:B6:6B:49:E9:27:A7:91:C0:A1:E7:46:FF:D0:2B:A7:1B:5B:DD:45 Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Certificate serial: 019C44350AC0F6EC8BF73B7189AE2E2D5F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 21:00:52 +0000 Manifest this update: Mon 09 Feb 2026 21:00:52 +0000 Manifest next update: Tue 10 Feb 2026 21:00:52 +0000 Files and hashes: 1: nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (hash: 2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=) 2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: u6VDZsF6OrHdIaxvkFxG0bPng6RcmzVzbRTBH1xn2pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:0a:c0:f6:ec:8b:f7:3b:71:89:ae:2e:2d:5f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Validity Not Before: Feb 9 21:00:52 2026 GMT Not After : Feb 10 21:00:52 2026 GMT Subject: CN=4ab66b49e927a791c0a1e746ffd02ba71b5bdd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:f7:38:fc:86:65:9d:a8:45:ae:8d:54:e9: 39:45:05:73:7e:02:5c:19:ce:e4:d5:e9:c5:a3:4c: 0b:86:18:64:6f:78:83:ab:aa:e5:f6:26:4c:4b:74: db:89:12:3d:2c:68:f8:59:c2:76:2e:67:e1:69:db: be:aa:85:15:82:9a:0b:b7:11:ca:a7:54:55:98:75: 60:e9:e0:7c:55:f5:ac:fd:fc:10:87:1c:ac:55:d0: f9:e2:a5:8d:23:fc:6d:e9:ab:bb:29:bd:c4:cc:14: c5:42:31:8f:4b:46:57:77:2e:fa:ec:4c:de:26:18: 6c:d7:ac:ad:84:32:72:44:ac:e5:a0:26:7c:18:3f: 25:26:20:c1:80:c6:ab:15:92:d5:fb:bf:e3:f7:45: f5:63:1e:9d:77:7c:6d:cf:8f:c5:53:4f:34:88:2c: d6:0e:9e:1a:8a:81:b4:ed:3e:5f:62:82:67:d2:7e: e3:76:72:25:a3:18:bb:da:30:6f:f6:21:6f:10:f9: fe:74:53:c6:56:b7:bf:2f:9d:b2:90:20:de:cb:bd: 6f:c3:c1:71:da:78:7b:cb:00:18:28:61:70:31:1b: d4:3b:8f:e1:78:07:8b:0d:9e:52:f4:e1:bc:fb:db: 16:d4:ca:a0:31:35:d3:3a:52:a9:8a:a5:a9:df:f8: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B6:6B:49:E9:27:A7:91:C0:A1:E7:46:FF:D0:2B:A7:1B:5B:DD:45 X509v3 Authority Key Identifier: keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2c:fa:19:e2:19:48:d1:06:ab:e9:d5:10:f4:bb:98:a2:04: fe:80:17:cd:42:88:cb:fc:d7:9b:3c:61:67:e5:5f:3d:0b:c3: f1:0b:76:f0:56:ab:2d:82:85:70:fd:bd:f0:f4:ad:b5:0d:00: 60:c5:6b:2c:40:ad:21:17:cb:28:1d:bf:60:f8:9a:06:6d:6b: 0c:65:b8:39:80:59:f0:1d:98:64:57:43:d5:c2:5d:ce:0d:d9: ed:46:c7:14:77:a6:90:47:a9:25:4f:50:95:87:24:ec:08:a1: 99:2d:9b:92:18:db:fc:f4:bb:37:bc:98:c2:7b:76:bf:0e:11: ce:52:db:83:31:5a:39:f3:86:77:74:8e:82:68:48:2a:c7:fe: 62:3e:4e:e9:2d:0d:8e:08:18:51:17:4e:42:9e:92:01:a6:66: 29:7a:09:ff:82:94:e2:6d:d1:60:ec:ed:6c:73:a9:7f:cd:4e: f3:c4:60:45:73:6e:5d:d1:c4:7c:4f:db:44:5d:04:3d:d0:01: a5:05:1b:52:06:08:1d:15:66:8e:05:d2:1d:56:30:67:c3:32: 36:18:a3:e9:49:64:e7:ba:1d:ba:60:f8:fc:8c:1a:11:8f:62: 16:02:2c:bc:42:6e:97:a7:f3:ca:2e:c2:9c:fc:c5:70:af:09: 06:b4:b6:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENQrA9uyL9ztxia4uLV8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5 ZjgxNjIwHhcNMjYwMjA5MjEwMDUyWhcNMjYwMjEwMjEwMDUyWjAzMTEwLwYDVQQD Eyg0YWI2NmI0OWU5MjdhNzkxYzBhMWU3NDZmZmQwMmJhNzFiNWJkZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKL3OPyGZZ2oRa6NVOk5RQVzfgJc Gc7k1enFo0wLhhhkb3iDq6rl9iZMS3TbiRI9LGj4WcJ2Lmfhadu+qoUVgpoLtxHK p1RVmHVg6eB8VfWs/fwQhxysVdD54qWNI/xt6au7Kb3EzBTFQjGPS0ZXdy767Eze Jhhs16ythDJyRKzloCZ8GD8lJiDBgMarFZLV+7/j90X1Yx6dd3xtz4/FU080iCzW Dp4aioG07T5fYoJn0n7jdnIloxi72jBv9iFvEPn+dFPGVre/L52ykCDey71vw8Fx 2nh7ywAYKGFwMRvUO4/heAeLDZ5S9OG8+9sW1MqgMTXTOlKpiqWp3/jYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq2a0npJ6eRwKHnRv/QK6cbW91FMB8GA1UdIwQY MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISz6GeIZ SNEGq+nVEPS7mKIE/oAXzUKIy/zXmzxhZ+VfPQvD8Qt28FarLYKFcP298PSttQ0A YMVrLECtIRfLKB2/YPiaBm1rDGW4OYBZ8B2YZFdD1cJdzg3Z7UbHFHemkEepJU9Q lYck7AihmS2bkhjb/PS7N7yYwnt2vw4RzlLbgzFaOfOGd3SOgmhIKsf+Yj5O6S0N jggYURdOQp6SAaZmKXoJ/4KU4m3RYOztbHOpf81O88RgRXNuXdHEfE/bRF0EPdAB pQUbUgYIHRVmjgXSHVYwZ8MyNhij6Ulk57odumD4/IwaEY9iFgIsvEJul6fzyi7C nPzFcK8JBrS2Hw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:30:29 2026 by rpki-client