This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
File: OmaGndGplxZLpPoj4P1B-zrLEL4.mft (raw, json)
Hash identifier: 4Pht3XBTuOAsBV7pyQ+Zv5Qado6kHFCZq1s1mjFRP/Y=
Subject key identifier: 75:F5:C4:3C:B4:A1:04:BF:F8:73:FE:BF:E8:8A:5B:E3:94:8D:B2:A1
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial: 019C42EAEB58CFCC4336FE0282C96BB2B641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
Manifest number: 13F6
Signing time: Mon 09 Feb 2026 15:00:17 +0000
Manifest this update: Mon 09 Feb 2026 15:00:17 +0000
Manifest next update: Tue 10 Feb 2026 15:00:17 +0000
Files and hashes: 1: OmaGndGplxZLpPoj4P1B-zrLEL4.crl (hash: nyRkvkSCTs3WqoBixpb76JRDznlYu4301nAoRMk86GY=)
2: Whf025AQDA8tBzOKuKXx8fPC43Q.roa (hash: dUevim2/BiChkKpYz6TYK8JPdP42XFVj+fxwUEJ/mxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:eb:58:cf:cc:43:36:fe:02:82:c9:6b:b2:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Validity
Not Before: Feb 9 15:00:17 2026 GMT
Not After : Feb 10 15:00:17 2026 GMT
Subject: CN=75f5c43cb4a104bff873febfe88a5be3948db2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:f4:df:66:4f:3a:ae:a0:5b:0b:5d:d3:b5:
53:2d:0b:bf:cd:66:ca:3a:83:6c:3c:4b:f0:ab:e3:
27:49:2a:87:c2:de:a3:ab:dc:90:41:d4:e9:60:fc:
a0:31:d5:f1:47:32:87:a6:db:5c:c5:36:c8:0e:27:
f1:12:97:6b:15:90:ce:7a:ee:54:9c:00:d6:44:16:
1b:ae:1b:60:7e:c1:61:3f:15:b3:04:7b:a3:f2:23:
a2:2b:d2:3b:e8:99:61:c6:58:a2:3e:49:ac:14:bc:
8e:b9:12:0e:a6:af:5c:20:03:6c:7b:6d:26:09:15:
c4:fc:06:ac:af:a0:15:2c:19:f7:80:a2:a4:a3:81:
7b:14:e2:39:dc:9d:bd:9a:ab:89:48:77:21:a2:93:
6f:18:4e:71:8c:a0:c0:5f:d2:d5:1e:3a:02:f5:34:
73:b1:3c:e3:60:86:5a:9a:e5:06:9d:86:da:9f:c2:
b7:79:1d:a0:34:ab:8e:2d:ea:76:bd:51:0d:48:d8:
2c:8e:8b:e6:c0:48:d6:a8:fd:6d:74:2c:b3:ef:ac:
3d:1b:0b:6b:b0:e2:32:df:92:4f:7a:51:c0:70:e5:
20:c0:29:c4:24:1f:f0:74:09:88:ca:5e:60:c3:4c:
bd:e9:cd:9f:71:3e:20:ec:88:59:04:bc:11:32:37:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:C4:3C:B4:A1:04:BF:F8:73:FE:BF:E8:8A:5B:E3:94:8D:B2:A1
X509v3 Authority Key Identifier:
keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:53:f8:4d:7c:fa:00:44:14:17:09:72:e6:b2:cc:f0:16:
0a:bd:04:a5:8d:5e:e3:cc:97:b2:48:cc:4e:73:17:7f:69:74:
37:1b:18:34:7c:04:c7:06:c2:1a:26:bd:64:e2:ec:60:b0:1e:
9e:12:96:44:65:f4:7a:bc:ed:fb:28:1e:7f:4f:36:7f:a2:c5:
f4:1d:4b:b6:b3:c5:94:54:22:b2:d0:8f:5f:77:ac:3a:87:9d:
2c:cd:b3:cb:72:32:29:dd:a0:19:84:27:58:e9:f6:05:42:fe:
b2:d9:58:b7:6e:03:e1:bd:ee:d1:c0:fe:cd:cf:d1:d9:b6:80:
ab:da:50:1a:d7:67:d2:17:1d:0d:50:d5:b9:13:65:d2:1a:6d:
81:74:fa:a7:b5:3d:c2:58:ab:9c:bb:42:f4:9c:fb:3b:6f:be:
43:4c:d8:0e:1d:51:7c:80:4f:a5:60:2b:28:6c:41:20:8b:2a:
0d:c6:0a:d7:8c:e3:37:e1:8b:0b:b0:25:a4:12:06:8c:2f:f8:
09:d1:8a:c8:1f:84:03:59:af:f6:a4:f6:52:42:31:3d:a7:84:
47:89:c8:68:f3:e3:07:45:66:8f:ed:4e:e9:b2:25:58:b2:50:
a9:6d:3d:30:56:79:b9:7a:8b:30:95:70:37:8e:bd:92:2b:13:
8f:8a:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:48 2026 by rpki-client