This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: bI+e1lr2VWpRklblgKvCtQRgfQvReuoCSaNIs8p2Ggg=
Subject key identifier: 95:25:D1:7C:87:75:59:11:E0:89:E0:4A:07:50:E9:65:FF:7D:EB:DC
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019C02FA2EE643A19A214C42E02F03CCF5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 1734
Signing time: Wed 28 Jan 2026 05:01:16 +0000
Manifest this update: Wed 28 Jan 2026 05:01:16 +0000
Manifest next update: Thu 29 Jan 2026 05:01:16 +0000
Files and hashes: 1: 4CWfekzf4x-HS1fJIidism45k8I.roa (hash: BHdLLhr5F9G9d810caL7Kieqc8ckL+IwjTONjFXfuYQ=)
2: AleCDdJblQdVI-S091EQULB75VY.roa (hash: eSD+DKApi4DxBKaxewRCjm2s463W9mcSqjdhdutCm0w=)
3: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: h3ezNIWLAniEgvgSODSjx2IUtaEVc+PDawOIbtOlmEs=)
4: Sl9bNPBsXlBI0DeUAp-mjVlbQuQ.roa (hash: OCH6KKa8NHD+YpgJ2LuApSob95p9PeDsu1ZA6J3sKlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:02:fa:2e:e6:43:a1:9a:21:4c:42:e0:2f:03:cc:f5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Jan 28 05:01:16 2026 GMT
Not After : Jan 29 05:01:16 2026 GMT
Subject: CN=9525d17c87755911e089e04a0750e965ff7debdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:73:38:b5:97:ef:10:07:5e:79:8f:45:0f:
08:38:59:02:22:13:48:77:c7:04:c2:fd:0d:12:6f:
9b:eb:45:b8:cf:6e:40:3f:b5:ef:d9:13:98:5a:6c:
51:46:30:af:ee:4c:3e:c6:bf:f6:f9:a7:e2:fd:bf:
e2:64:f0:85:40:2b:9d:f9:ac:24:57:35:20:f7:95:
47:dc:49:01:d4:b7:4c:d0:aa:9b:9e:32:11:55:26:
57:b4:db:5d:b9:6a:ab:cb:a4:19:fd:74:ea:35:d5:
9e:47:85:53:00:07:6a:02:c3:c0:de:9c:68:95:04:
79:96:31:ef:8b:88:f1:9a:52:3a:fa:62:1d:06:d8:
f1:0e:c1:97:6a:e1:cf:04:07:5d:e9:ca:d2:1f:9e:
da:d9:e5:40:c8:9a:6d:0b:a8:d6:54:60:4c:af:f9:
62:b1:f4:a0:55:a3:85:9e:08:93:83:ff:7f:53:5b:
be:2c:86:c9:23:ff:97:db:b3:32:3f:11:41:b7:ab:
96:9a:2e:17:ff:e9:e2:42:a6:06:24:bd:7b:72:13:
6b:d0:f4:30:87:33:89:01:3b:74:e4:de:df:ea:c0:
20:3a:b9:94:45:c6:9a:c0:df:17:25:45:7c:a5:9e:
51:5d:1c:a5:36:7b:6d:2f:fb:1c:d7:ad:57:be:65:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:D1:7C:87:75:59:11:E0:89:E0:4A:07:50:E9:65:FF:7D:EB:DC
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:82:a1:4a:b3:6a:27:c6:b7:8f:aa:76:50:6e:a3:c0:cc:c5:
da:68:40:f7:89:25:7d:ef:04:f0:ba:1b:68:c2:35:8f:10:93:
83:82:7c:ef:de:8e:46:aa:0e:bf:56:7c:05:d3:5b:95:f3:95:
e6:54:eb:bc:cb:14:72:ab:6a:64:c4:5f:33:27:1e:44:20:0b:
50:92:78:11:f3:7a:97:43:17:fd:92:27:1d:17:d4:a3:29:5c:
10:a6:38:2d:7a:27:f5:5f:72:8a:6b:7c:eb:31:25:bb:f4:e8:
25:89:f2:90:0f:38:90:de:55:7a:c2:01:42:ed:5b:35:22:be:
53:38:18:95:10:7f:ed:4c:cd:41:4f:b4:d9:98:81:c2:4c:38:
78:97:6a:14:5b:60:a9:1b:17:38:68:03:04:c6:50:40:ff:7e:
da:f5:bc:3b:6f:d5:b3:36:07:5a:44:dc:5c:f1:bc:b6:54:f6:
bd:85:23:67:c7:f1:3d:ae:8e:ca:9f:94:3f:31:f0:07:3e:8b:
bb:47:73:d2:b5:cd:58:95:13:3c:fc:86:f7:e7:57:8a:b5:79:
aa:2f:cc:e8:11:61:98:90:48:17:ff:07:76:ac:57:e6:ea:22:
59:75:23:56:b1:e5:c8:d9:b1:34:11:0b:cc:da:d5:ba:b5:3a:
81:12:f7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwC+i7mQ6GaIUxC4C8DzPXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNjg1Y2Y4OGE3ZmM0M2ZlMWM3ZmUzNGE2ZmYzZGRiYjQx
NGYwYjUwHhcNMjYwMTI4MDUwMTE2WhcNMjYwMTI5MDUwMTE2WjAzMTEwLwYDVQQD
Eyg5NTI1ZDE3Yzg3NzU1OTExZTA4OWUwNGEwNzUwZTk2NWZmN2RlYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunBzOLWX7xAHXnmPRQ8IOFkCIhNI
d8cEwv0NEm+b60W4z25AP7Xv2ROYWmxRRjCv7kw+xr/2+afi/b/iZPCFQCud+awk
VzUg95VH3EkB1LdM0KqbnjIRVSZXtNtduWqry6QZ/XTqNdWeR4VTAAdqAsPA3pxo
lQR5ljHvi4jxmlI6+mIdBtjxDsGXauHPBAdd6crSH57a2eVAyJptC6jWVGBMr/li
sfSgVaOFngiTg/9/U1u+LIbJI/+X27MyPxFBt6uWmi4X/+niQqYGJL17chNr0PQw
hzOJATt05N7f6sAgOrmURcaawN8XJUV8pZ5RXRylNnttL/sc161XvmUqfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUl0XyHdVkR4IngSgdQ6WX/fevcMB8GA1UdIwQY
MBaAFDpoXPiKf8Q/4cf+NKb/Pdu0FPC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDct
NTlkNmNhNjVjY2JjLzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNjVjMjctYWVmNS00ODZkLWI1ZDctNTlkNmNhNjVjY2Jj
LzEvT21oYy1JcF94RF9oeF80MHB2ODkyN1FVOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4KhSrNq
J8a3j6p2UG6jwMzF2mhA94klfe8E8LobaMI1jxCTg4J8796ORqoOv1Z8BdNblfOV
5lTrvMsUcqtqZMRfMyceRCALUJJ4EfN6l0MX/ZInHRfUoylcEKY4LXon9V9yimt8
6zElu/ToJYnykA84kN5VesIBQu1bNSK+UzgYlRB/7UzNQU+02ZiBwkw4eJdqFFtg
qRsXOGgDBMZQQP9+2vW8O2/VszYHWkTcXPG8tlT2vYUjZ8fxPa6Oyp+UPzHwBz6L
u0dz0rXNWJUTPPyG9+dXirV5qi/M6BFhmJBIF/8HdqxX5uoiWXUjVrHlyNmxNBEL
zNrVurU6gRL3Zg==
-----END CERTIFICATE-----
Generated at Wed Jan 28 07:18:40 2026 by rpki-client