This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft File: OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json) Hash identifier: qPmMGt0iYggJA5JK2av7b1R9EVG2wE51kvKZlzp0EOY= Subject key identifier: 18:20:A5:01:A4:3D:50:E1:38:57:39:88:2A:4B:F4:11:66:A1:60:AF Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be Certificate serial: 019B22511B71E3C0410C269B0D74ED9285B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft Manifest number: 1360 Signing time: Mon 15 Dec 2025 14:01:39 +0000 Manifest this update: Mon 15 Dec 2025 14:01:39 +0000 Manifest next update: Tue 16 Dec 2025 14:01:39 +0000 Files and hashes: 1: FFjeL0IuCbzbDGWfr7U5gi5W5Os.roa (hash: 3sG/fd8pRrUXnkWnOf6agMt6Javmg7cQv1NVJ7eO+0w=) 2: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: smKTDXe1rNYVe0WOdXwtrlsK7pt1nzVJJcjtJ+3+ImM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:1b:71:e3:c0:41:0c:26:9b:0d:74:ed:92:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be Validity Not Before: Dec 15 14:01:39 2025 GMT Not After : Dec 16 14:01:39 2025 GMT Subject: CN=1820a501a43d50e1385739882a4bf41166a160af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:c5:66:5c:0f:db:89:dc:7d:0b:e1:aa:2a: 68:42:61:a2:ab:0f:80:a0:04:fc:ab:c6:bb:66:66: aa:16:5c:aa:0d:a3:69:21:8e:68:73:0b:85:f7:df: 1b:75:c5:0d:03:3f:e3:d0:d8:54:8a:d5:1a:39:5b: 8f:29:af:fc:99:6b:df:85:f9:27:61:90:aa:32:f6: 9e:9e:6f:89:bb:34:0b:b8:15:05:43:53:ab:29:31: 0b:14:05:58:99:e5:55:04:b5:f3:e3:75:75:d7:89: fa:8b:0e:4f:52:93:88:ca:91:05:b9:92:5b:06:ee: 5b:81:1b:5e:c8:88:91:05:18:fb:68:ea:9a:15:2e: ff:b4:40:ae:4a:21:61:41:16:06:27:36:bf:d4:bf: e3:b5:42:df:e7:ba:67:1c:b1:21:0d:a6:b3:ec:e4: 62:6f:b6:b8:5b:ad:98:71:0a:6d:c1:bb:ea:20:fb: 3a:e7:91:7a:31:e1:1a:4c:46:d3:65:3d:8f:54:37: f5:12:b3:2a:63:df:a8:b4:39:72:f4:fe:43:28:bb: 33:14:ac:5f:27:93:6a:4e:e5:1b:1f:b4:20:e7:d5: 7a:c1:f7:7b:3f:db:d6:d9:f5:99:c6:17:02:49:1e: 3a:20:b1:65:4c:fc:0e:12:33:fc:de:7e:27:21:3d: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:A5:01:A4:3D:50:E1:38:57:39:88:2A:4B:F4:11:66:A1:60:AF X509v3 Authority Key Identifier: keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b7:33:b8:13:d5:e5:f8:91:bc:eb:01:8c:54:41:ef:79:45: a1:e5:ce:2a:1c:34:0c:a9:03:90:45:9d:72:c1:12:20:30:71: d4:d3:f7:a9:ef:16:fe:4c:0e:2f:43:5c:b1:55:a8:41:e7:63: e7:7f:c8:54:7e:b8:4b:b6:2c:0a:6c:22:83:26:00:f3:9a:ce: 2e:5c:cf:ca:14:01:0b:db:dc:95:17:fe:50:f6:72:4d:c1:72: d4:34:06:32:e0:69:02:52:55:ff:b1:e0:34:93:23:4a:ef:d2: 11:bd:de:83:3f:4e:df:d9:13:0a:11:c8:7e:96:8e:fa:00:ca: c7:e3:99:cb:a3:4e:7b:c4:73:3c:3f:83:79:0c:20:0c:e6:ad: b0:f2:69:f2:3e:16:a5:79:07:b8:78:f7:db:ae:9e:c9:d7:b2: dc:4f:9e:80:b3:23:f1:1b:8d:34:e7:56:f6:d9:36:23:76:d2: 42:0b:ed:b2:b3:f9:d5:91:2d:70:ec:0b:c1:3c:0c:9b:17:87: 67:78:0a:1a:7f:95:01:2f:ce:2f:d6:e3:b5:3e:24:d0:5c:c3: 5d:81:07:28:8a:50:37:0f:31:7e:3d:06:a7:6b:f2:d4:4f:d5: d3:8d:10:20:27:80:06:50:a8:37:05:31:e0:7f:8e:0f:e1:81: 0a:9f:d7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiURtx48BBDCabDXTtkoWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj YjEwYmUwHhcNMjUxMjE1MTQwMTM5WhcNMjUxMjE2MTQwMTM5WjAzMTEwLwYDVQQD EygxODIwYTUwMWE0M2Q1MGUxMzg1NzM5ODgyYTRiZjQxMTY2YTE2MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6XFZlwP24ncfQvhqipoQmGiqw+A oAT8q8a7ZmaqFlyqDaNpIY5ocwuF998bdcUNAz/j0NhUitUaOVuPKa/8mWvfhfkn YZCqMvaenm+JuzQLuBUFQ1OrKTELFAVYmeVVBLXz43V114n6iw5PUpOIypEFuZJb Bu5bgRteyIiRBRj7aOqaFS7/tECuSiFhQRYGJza/1L/jtULf57pnHLEhDaaz7ORi b7a4W62YcQptwbvqIPs655F6MeEaTEbTZT2PVDf1ErMqY9+otDly9P5DKLszFKxf J5NqTuUbH7Qg59V6wfd7P9vW2fWZxhcCSR46ILFlTPwOEjP83n4nIT3D8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBggpQGkPVDhOFc5iCpL9BFmoWCvMB8GA1UdIwQY MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt NzExZmMxYTJkMGEwLzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbczuBPV 5fiRvOsBjFRB73lFoeXOKhw0DKkDkEWdcsESIDBx1NP3qe8W/kwOL0NcsVWoQedj 53/IVH64S7YsCmwigyYA85rOLlzPyhQBC9vclRf+UPZyTcFy1DQGMuBpAlJV/7Hg NJMjSu/SEb3egz9O39kTChHIfpaO+gDKx+OZy6NOe8RzPD+DeQwgDOatsPJp8j4W pXkHuHj3266eydey3E+egLMj8RuNNOdW9tk2I3bSQgvtsrP51ZEtcOwLwTwMmxeH Z3gKGn+VAS/OL9bjtT4k0FzDXYEHKIpQNw8xfj0Gp2vy1E/V040QICeABlCoNwUx 4H+OD+GBCp/XSQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:25:56 2025 by rpki-client