This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
File:                     omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json)
Hash identifier:          5Ss+QtkpDAy7ytnC/8aBw8Wz/ve1acWIiZixihyhch0=
Subject key identifier:   11:84:50:A5:4E:FE:16:5C:AF:FA:D1:FC:31:B7:73:81:D1:D7:54:88
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Certificate issuer:       /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial:       019C42EB90F425DDB3D8E6A1F0C6979B5F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:00 +0000
Files and hashes:         1: bLAwkpsQ7D6caU7zIeAaY5nux8E.roa (hash: KqLO/vffpcb+/IGfGAsD+PmTdmluxkrnPOhEPWZAu6E=)
                          2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: 6IpFmzYR01hTHNLLsrhOjx4GE/4rkkk7VKGW/mszfVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:90:f4:25:dd:b3:d8:e6:a1:f0:c6:97:9b:5f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
        Validity
            Not Before: Feb  9 15:01:00 2026 GMT
            Not After : Feb 10 15:01:00 2026 GMT
        Subject: CN=118450a54efe165caffad1fc31b77381d1d75488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:88:11:e3:41:c2:8a:46:65:3b:39:81:0d:
                    f5:35:18:ac:74:d3:a7:3e:2b:37:0c:7d:14:51:c0:
                    1b:d4:a9:b7:a7:fc:31:bc:3a:97:75:9f:9a:d5:a8:
                    21:15:62:65:24:3d:38:05:4e:b4:69:ba:5b:cb:b1:
                    79:69:48:79:0c:3e:4f:44:2f:95:73:9e:53:04:f5:
                    80:22:f5:ea:d1:b1:e2:17:5a:ce:7f:9a:ef:9f:cb:
                    47:e6:fa:6f:d7:2a:7e:ec:f6:dc:b1:77:fd:3a:05:
                    16:34:f5:7e:9c:d0:02:be:e4:ac:a4:82:0a:29:58:
                    c0:cd:17:a6:2f:65:79:73:33:3b:b6:bb:8f:18:bf:
                    af:2f:34:37:4c:dc:8d:32:69:c5:de:96:4b:49:4b:
                    01:27:6c:b4:80:6c:a7:00:f8:be:f7:07:7e:0a:52:
                    75:01:d2:34:10:91:ac:49:7f:d1:4e:c5:fd:bd:b8:
                    c4:de:a6:fe:55:37:58:7a:25:5f:14:65:53:91:96:
                    4b:25:d8:71:53:1b:c0:06:cf:1e:28:ed:c7:a8:f7:
                    bd:be:38:d6:0a:da:05:b9:c8:fd:40:06:df:98:8c:
                    dd:9f:98:be:1a:c9:f8:de:4c:2e:81:da:5a:bc:5b:
                    97:c0:8e:1c:76:b6:69:b3:f9:3a:12:1f:53:ec:ec:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:50:A5:4E:FE:16:5C:AF:FA:D1:FC:31:B7:73:81:D1:D7:54:88
            X509v3 Authority Key Identifier:
                keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:79:aa:78:1d:45:7f:29:7d:de:43:92:8f:c3:bc:92:0f:
         4c:55:42:32:40:54:80:dd:e4:8f:9d:63:29:41:97:d5:61:5a:
         f5:f8:8e:11:bf:b8:44:99:6d:30:28:7a:f0:2c:8f:b7:5b:2a:
         4a:63:aa:03:ec:b8:1a:99:ce:a5:96:38:a5:6a:97:4b:43:a8:
         d3:0c:16:34:c3:93:91:f4:5a:ee:4a:a4:b5:f4:a9:e1:bc:2b:
         27:e0:80:fe:83:94:d8:4d:7a:a9:80:f0:f1:5d:d2:ef:12:8b:
         1d:6c:7d:31:d1:1c:85:b4:89:f7:3b:b1:4f:45:34:67:3d:77:
         d6:5f:d1:02:aa:a8:f8:d0:4c:6f:20:4d:51:f3:b6:ae:35:10:
         db:2c:d7:87:52:b4:30:bd:9d:73:6f:ab:6b:94:b8:71:74:b5:
         d7:2d:18:81:8d:a5:4d:1c:3a:07:cc:84:13:33:13:82:1a:dc:
         63:e5:d0:62:e0:54:7a:9b:c6:45:3e:ce:99:65:2f:f9:91:0d:
         2d:03:99:92:e4:ed:17:2c:53:f9:01:95:15:d0:81:be:09:6a:
         a1:d5:6a:55:20:8c:94:db:2a:e7:04:6f:16:3d:d2:95:0f:0d:
         0f:c3:d5:87:41:d6:8e:8b:94:ae:7c:cd:e5:a2:18:21:0c:b5:
         7d:75:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:37 2026 by rpki-client