This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json) Hash identifier: /zsL+ttkRhAKCT5fMo0BecF7yhQdEQdC9o3+axLN7ow= Subject key identifier: FC:C7:6A:7C:DD:79:F6:27:56:72:5A:66:19:8D:34:99:F0:94:B3:7A Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Certificate serial: 019B1A5FFE9D6ED04B56B7CF9FF65BB797C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft Manifest number: 1709 Signing time: Sun 14 Dec 2025 01:00:57 +0000 Manifest this update: Sun 14 Dec 2025 01:00:57 +0000 Manifest next update: Mon 15 Dec 2025 01:00:57 +0000 Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=) 2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: 4RP9xqnhmuHybFAf3M93QpAFHXKXAhgTrLX3J2fIvsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:fe:9d:6e:d0:4b:56:b7:cf:9f:f6:5b:b7:97:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Validity Not Before: Dec 14 01:00:57 2025 GMT Not After : Dec 15 01:00:57 2025 GMT Subject: CN=fcc76a7cdd79f62756725a66198d3499f094b37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:89:9c:24:1e:18:86:ac:3e:f6:a2:84:3b:9a: 92:51:90:33:04:68:0b:be:75:4a:3d:66:a3:10:1f: 66:e0:d8:d3:16:5e:76:54:a0:32:07:09:46:7d:78: 5b:9a:0c:79:9f:29:71:d1:50:67:6f:6b:6a:72:6e: de:98:59:bc:08:e0:a8:49:55:83:74:46:57:76:94: 48:be:1d:42:00:cd:e3:65:32:28:dd:ad:97:60:21: 6f:86:5f:a7:d5:57:53:68:c5:93:d0:9d:89:56:50: f8:59:a3:71:c8:d5:d8:30:69:49:e2:e5:23:21:c2: b3:e0:e5:a0:1f:de:06:d0:17:57:13:6d:48:44:25: 63:16:06:32:8c:dd:a9:79:21:b2:cf:f6:5f:12:94: ce:83:56:37:88:bd:85:1e:a6:df:9c:d5:2d:e8:d5: 81:7e:84:6c:e8:73:c2:ff:43:87:fd:c9:b4:87:b1: 99:9f:a7:8a:54:a4:bb:74:7b:d9:8f:f4:7a:ed:9d: 63:db:12:20:fb:f4:20:10:a9:8a:ef:e3:e6:ef:a6: 4a:88:ef:1a:36:cd:6f:ee:6b:89:5b:42:10:df:5c: 52:ec:09:da:56:7d:1f:0c:8b:7a:af:bd:bc:b7:39: 02:fb:92:f9:8e:0b:82:bd:ae:0b:cf:b2:f3:d9:c3: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:6A:7C:DD:79:F6:27:56:72:5A:66:19:8D:34:99:F0:94:B3:7A X509v3 Authority Key Identifier: keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:18:d9:73:17:a3:99:29:17:51:e1:94:fe:ba:d6:29:f9:89: 53:92:d7:2e:28:da:97:5f:b1:1e:f1:1f:e6:9d:45:c1:b4:33: 8a:0f:4f:89:c3:0e:11:f6:43:35:29:26:c9:da:c2:8c:a9:1f: d9:79:0e:5a:15:91:14:4e:d3:f8:20:91:d4:bc:51:c0:4d:90: af:d9:c3:72:9e:a2:d6:aa:22:19:97:38:bc:2b:9e:a5:a9:9c: ea:1f:2c:eb:86:47:9e:60:60:ae:d1:dc:e7:af:95:da:4b:b4: c1:17:cc:81:dc:ce:80:f5:d6:c9:1d:07:3d:08:97:79:63:e7: d2:0f:27:8e:27:7d:97:1e:ce:b1:43:94:df:9c:f9:ce:f8:fa: 25:2f:4e:c1:a6:2a:28:55:35:11:97:a8:95:40:fc:b7:50:c6: 44:ed:67:73:ae:52:fc:0a:09:3c:16:75:fe:da:e7:1c:0f:3e: 9a:6d:22:62:5f:52:4f:76:7b:9b:90:db:09:49:f0:af:7a:fc: 8f:95:05:49:61:fa:80:9f:c2:7b:d1:e5:40:f4:1e:cf:d7:d8: 91:3f:19:92:46:a1:98:7a:c7:22:56:c4:4e:24:d6:46:04:13: 4e:6d:de:a0:93:04:2b:74:07:38:38:49:db:d1:1b:f1:68:4b: a3:04:66:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX/6dbtBLVrfPn/Zbt5fFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5 ZjgxNjIwHhcNMjUxMjE0MDEwMDU3WhcNMjUxMjE1MDEwMDU3WjAzMTEwLwYDVQQD EyhmY2M3NmE3Y2RkNzlmNjI3NTY3MjVhNjYxOThkMzQ5OWYwOTRiMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3omcJB4Yhqw+9qKEO5qSUZAzBGgL vnVKPWajEB9m4NjTFl52VKAyBwlGfXhbmgx5nylx0VBnb2tqcm7emFm8COCoSVWD dEZXdpRIvh1CAM3jZTIo3a2XYCFvhl+n1VdTaMWT0J2JVlD4WaNxyNXYMGlJ4uUj IcKz4OWgH94G0BdXE21IRCVjFgYyjN2peSGyz/ZfEpTOg1Y3iL2FHqbfnNUt6NWB foRs6HPC/0OH/cm0h7GZn6eKVKS7dHvZj/R67Z1j2xIg+/QgEKmK7+Pm76ZKiO8a Ns1v7muJW0IQ31xS7AnaVn0fDIt6r728tzkC+5L5jguCva4Lz7Lz2cO98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzHanzdefYnVnJaZhmNNJnwlLN6MB8GA1UdIwQY MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShjZcxej mSkXUeGU/rrWKfmJU5LXLijal1+xHvEf5p1FwbQzig9PicMOEfZDNSkmydrCjKkf 2XkOWhWRFE7T+CCR1LxRwE2Qr9nDcp6i1qoiGZc4vCuepamc6h8s64ZHnmBgrtHc 56+V2ku0wRfMgdzOgPXWyR0HPQiXeWPn0g8njid9lx7OsUOU35z5zvj6JS9OwaYq KFU1EZeolUD8t1DGRO1nc65S/AoJPBZ1/trnHA8+mm0iYl9ST3Z7m5DbCUnwr3r8 j5UFSWH6gJ/Ce9HlQPQez9fYkT8ZkkahmHrHIlbETiTWRgQTTm3eoJMEK3QHODhJ 29Eb8WhLowRmng== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:32 2025 by rpki-client