This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File:                     OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier:          4Pht3XBTuOAsBV7pyQ+Zv5Qado6kHFCZq1s1mjFRP/Y=
Subject key identifier:   75:F5:C4:3C:B4:A1:04:BF:F8:73:FE:BF:E8:8A:5B:E3:94:8D:B2:A1
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer:       /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial:       019C42EAEB58CFCC4336FE0282C96BB2B641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number:          13F6
Signing time:             Mon 09 Feb 2026 15:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:17 +0000
Files and hashes:         1: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: nyRkvkSCTs3WqoBixpb76JRDznlYu4301nAoRMk86GY=)
                          2: Whf025AQDA8tBzOKuKXx8fPC43Q.roa (hash: dUevim2/BiChkKpYz6TYK8JPdP42XFVj+fxwUEJ/mxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:eb:58:cf:cc:43:36:fe:02:82:c9:6b:b2:b6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
        Validity
            Not Before: Feb  9 15:00:17 2026 GMT
            Not After : Feb 10 15:00:17 2026 GMT
        Subject: CN=75f5c43cb4a104bff873febfe88a5be3948db2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:f4:df:66:4f:3a:ae:a0:5b:0b:5d:d3:b5:
                    53:2d:0b:bf:cd:66:ca:3a:83:6c:3c:4b:f0:ab:e3:
                    27:49:2a:87:c2:de:a3:ab:dc:90:41:d4:e9:60:fc:
                    a0:31:d5:f1:47:32:87:a6:db:5c:c5:36:c8:0e:27:
                    f1:12:97:6b:15:90:ce:7a:ee:54:9c:00:d6:44:16:
                    1b:ae:1b:60:7e:c1:61:3f:15:b3:04:7b:a3:f2:23:
                    a2:2b:d2:3b:e8:99:61:c6:58:a2:3e:49:ac:14:bc:
                    8e:b9:12:0e:a6:af:5c:20:03:6c:7b:6d:26:09:15:
                    c4:fc:06:ac:af:a0:15:2c:19:f7:80:a2:a4:a3:81:
                    7b:14:e2:39:dc:9d:bd:9a:ab:89:48:77:21:a2:93:
                    6f:18:4e:71:8c:a0:c0:5f:d2:d5:1e:3a:02:f5:34:
                    73:b1:3c:e3:60:86:5a:9a:e5:06:9d:86:da:9f:c2:
                    b7:79:1d:a0:34:ab:8e:2d:ea:76:bd:51:0d:48:d8:
                    2c:8e:8b:e6:c0:48:d6:a8:fd:6d:74:2c:b3:ef:ac:
                    3d:1b:0b:6b:b0:e2:32:df:92:4f:7a:51:c0:70:e5:
                    20:c0:29:c4:24:1f:f0:74:09:88:ca:5e:60:c3:4c:
                    bd:e9:cd:9f:71:3e:20:ec:88:59:04:bc:11:32:37:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F5:C4:3C:B4:A1:04:BF:F8:73:FE:BF:E8:8A:5B:E3:94:8D:B2:A1
            X509v3 Authority Key Identifier:
                keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fe:53:f8:4d:7c:fa:00:44:14:17:09:72:e6:b2:cc:f0:16:
         0a:bd:04:a5:8d:5e:e3:cc:97:b2:48:cc:4e:73:17:7f:69:74:
         37:1b:18:34:7c:04:c7:06:c2:1a:26:bd:64:e2:ec:60:b0:1e:
         9e:12:96:44:65:f4:7a:bc:ed:fb:28:1e:7f:4f:36:7f:a2:c5:
         f4:1d:4b:b6:b3:c5:94:54:22:b2:d0:8f:5f:77:ac:3a:87:9d:
         2c:cd:b3:cb:72:32:29:dd:a0:19:84:27:58:e9:f6:05:42:fe:
         b2:d9:58:b7:6e:03:e1:bd:ee:d1:c0:fe:cd:cf:d1:d9:b6:80:
         ab:da:50:1a:d7:67:d2:17:1d:0d:50:d5:b9:13:65:d2:1a:6d:
         81:74:fa:a7:b5:3d:c2:58:ab:9c:bb:42:f4:9c:fb:3b:6f:be:
         43:4c:d8:0e:1d:51:7c:80:4f:a5:60:2b:28:6c:41:20:8b:2a:
         0d:c6:0a:d7:8c:e3:37:e1:8b:0b:b0:25:a4:12:06:8c:2f:f8:
         09:d1:8a:c8:1f:84:03:59:af:f6:a4:f6:52:42:31:3d:a7:84:
         47:89:c8:68:f3:e3:07:45:66:8f:ed:4e:e9:b2:25:58:b2:50:
         a9:6d:3d:30:56:79:b9:7a:8b:30:95:70:37:8e:bd:92:2b:13:
         8f:8a:fc:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6utYz8xDNv4CgslrsrZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjY4NjlkZDFhOTk3MTY0YmE0ZmEyM2UwZmQ0MWZiM2Fj
YjEwYmUwHhcNMjYwMjA5MTUwMDE3WhcNMjYwMjEwMTUwMDE3WjAzMTEwLwYDVQQD
Eyg3NWY1YzQzY2I0YTEwNGJmZjg3M2ZlYmZlODhhNWJlMzk0OGRiMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9X032ZPOq6gWwtd07VTLQu/zWbK
OoNsPEvwq+MnSSqHwt6jq9yQQdTpYPygMdXxRzKHpttcxTbIDifxEpdrFZDOeu5U
nADWRBYbrhtgfsFhPxWzBHuj8iOiK9I76JlhxliiPkmsFLyOuRIOpq9cIANse20m
CRXE/Aasr6AVLBn3gKKko4F7FOI53J29mquJSHchopNvGE5xjKDAX9LVHjoC9TRz
sTzjYIZamuUGnYban8K3eR2gNKuOLep2vVENSNgsjovmwEjWqP1tdCyz76w9Gwtr
sOIy35JPelHAcOUgwCnEJB/wdAmIyl5gw0y96c2fcT4g7IhZBLwRMjctSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX1xDy0oQS/+HP+v+iKW+OUjbKhMB8GA1UdIwQY
MBaAFDpmhp3RqZcWS6T6I+D9Qfs6yxC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgt
NzExZmMxYTJkMGEwLzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85MTE4ZTMtMTNkYS00ZDQ4LTljMzgtNzExZmMxYTJkMGEw
LzEvT21hR25kR3BseFpMcFBvajRQMUItenJMRUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/5T+E18
+gBEFBcJcuayzPAWCr0EpY1e48yXskjMTnMXf2l0NxsYNHwExwbCGia9ZOLsYLAe
nhKWRGX0erzt+ygef082f6LF9B1LtrPFlFQistCPX3esOoedLM2zy3IyKd2gGYQn
WOn2BUL+stlYt24D4b3u0cD+zc/R2baAq9pQGtdn0hcdDVDVuRNl0hptgXT6p7U9
wlirnLtC9Jz7O2++Q0zYDh1RfIBPpWArKGxBIIsqDcYK14zjN+GLC7AlpBIGjC/4
CdGKyB+EA1mv9qT2UkIxPaeER4nIaPPjB0Vmj+1O6bIlWLJQqW09MFZ5uXqLMJVw
N469kisTj4r85Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:48 2026 by rpki-client