This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft File: om-n7jCto1qx_ATzQP7fZHqfgWI.mft (raw, json) Hash identifier: Dr/ArhHXgXj0u+axpKSaja8gWGI1bKXFg3EntLO/ne8= Subject key identifier: E3:27:31:0C:AF:D8:60:F2:5D:BE:3E:27:07:69:51:DD:26:53:29:FA Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 Certificate issuer: /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Certificate serial: 019AF1D1EC9C716337EDDF017ACEC8C3B9D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: GTYzwhiUq_J5h32d88k5dHS-pBI.roa (hash: DRh7rLYfY68cEV1ylr9M82OojbgdOB+T4zEG9BafNT4=) 2: om-n7jCto1qx_ATzQP7fZHqfgWI.crl (hash: w/QW1cFmlmAI39CT3Hf9xzUvsyp8evgajrX+8wON3Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ec:9c:71:63:37:ed:df:01:7a:ce:c8:c3:b9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=e327310cafd860f25dbe3e27076951dd265329fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:67:97:74:8a:37:26:75:99:85:08:70:72: b4:a0:de:0a:a2:8a:61:51:5e:fd:cc:2a:a9:c8:ab: 04:71:e2:a5:fc:17:40:f7:4a:9b:90:c2:ba:7c:09: aa:6c:f8:4a:59:2e:a0:83:f5:7d:f4:2e:39:f3:8d: 12:ae:ec:49:33:64:fb:61:44:b5:f0:80:1a:56:86: 8b:85:3e:52:c4:3f:6f:62:8c:dd:97:25:77:eb:e6: f9:bc:1b:3f:60:f4:5a:1d:5e:00:4d:f3:a0:d7:78: 49:9b:90:73:91:2f:08:cd:0a:27:7f:78:40:cf:5b: 80:1a:e9:4f:2e:cb:f3:c4:bd:42:e3:ff:70:b1:57: 08:f6:8a:cd:84:64:b8:84:b3:42:d1:ef:6c:80:62: f6:ea:e2:5d:2f:d1:5b:2c:52:4c:35:52:07:d4:3e: d2:d2:4f:97:e9:29:34:3e:a8:bd:43:0f:43:23:90: 9d:b3:61:74:80:d7:19:d0:a9:8d:c7:c9:ef:12:68: ee:28:9e:5a:37:37:a1:33:1a:43:bb:6c:cb:13:08: b0:f2:59:5b:d9:2b:0a:14:ca:34:84:78:84:30:1c: 0c:ba:3d:7b:96:dd:c5:f5:c3:e1:f9:a9:6b:5f:72: 74:a9:49:dd:de:ea:75:1a:38:f0:ef:19:39:cf:28: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:31:0C:AF:D8:60:F2:5D:BE:3E:27:07:69:51:DD:26:53:29:FA X509v3 Authority Key Identifier: keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:47:3b:25:f4:69:b0:38:ca:48:fe:c2:6f:4b:ad:76:27:4b: 8c:6e:13:11:69:98:02:fe:48:f0:e7:a5:dd:9f:51:a0:ac:18: 5b:2d:fa:05:d7:65:f7:1d:04:19:56:80:4d:df:24:91:e2:33: 8a:ff:6e:1e:ff:a5:b0:fc:48:e4:90:7f:a4:78:d1:a8:99:c9: de:a8:3a:21:93:61:e3:6f:e7:cb:17:1b:57:c9:52:93:a8:a5: 78:48:3c:34:4d:5a:b9:5f:6e:51:8b:b1:4d:8a:13:cb:76:1c: 0c:00:6a:96:fd:31:f3:3c:c6:ae:ac:f0:ee:fb:a4:e4:b6:4d: 58:a5:91:0a:01:87:0b:70:60:35:ee:5d:48:c3:1d:2d:c8:2a: a0:82:34:3f:91:b9:fd:7f:e4:97:3e:c5:02:0e:53:63:3c:dd: e1:ac:8e:3d:ef:09:56:81:3f:94:b2:3a:33:83:99:59:9b:6c: 8b:12:44:55:cd:e3:a1:69:ef:26:42:b0:20:40:c3:56:fc:6c: 8e:b3:cb:16:1f:f0:65:68:a6:d7:e3:95:4c:5a:76:59:0a:43: 37:ba:4e:59:28:fc:43:69:92:85:c0:a7:23:dc:fe:37:fd:48: 6d:a2:7b:69:ce:62:c2:4b:80:1e:94:b7:11:d5:a2:98:9a:07: ad:4d:a7:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eyccWM37d8Bes7Iw7nYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNmZhN2VlMzBhZGEzNWFiMWZjMDRmMzQwZmVkZjY0N2E5 ZjgxNjIwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EyhlMzI3MzEwY2FmZDg2MGYyNWRiZTNlMjcwNzY5NTFkZDI2NTMyOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Fnl3SKNyZ1mYUIcHK0oN4Kooph UV79zCqpyKsEceKl/BdA90qbkMK6fAmqbPhKWS6gg/V99C45840SruxJM2T7YUS1 8IAaVoaLhT5SxD9vYozdlyV36+b5vBs/YPRaHV4ATfOg13hJm5BzkS8IzQonf3hA z1uAGulPLsvzxL1C4/9wsVcI9orNhGS4hLNC0e9sgGL26uJdL9FbLFJMNVIH1D7S 0k+X6Sk0Pqi9Qw9DI5Cds2F0gNcZ0KmNx8nvEmjuKJ5aNzehMxpDu2zLEwiw8llb 2SsKFMo0hHiEMBwMuj17lt3F9cPh+alrX3J0qUnd3up1Gjjw7xk5zyi3twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMnMQyv2GDyXb4+JwdpUd0mUyn6MB8GA1UdIwQY MBaAFKJvp+4wraNasfwE80D+32R6n4FiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQt ZTkyNGNlNWE3NWIzLzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iODdhMGQtY2M0Yy00ODI1LWE3ZTQtZTkyNGNlNWE3NWIz LzEvb20tbjdqQ3RvMXF4X0FUelFQN2ZaSHFmZ1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEc7JfRp sDjKSP7Cb0utdidLjG4TEWmYAv5I8Oel3Z9RoKwYWy36Bddl9x0EGVaATd8kkeIz iv9uHv+lsPxI5JB/pHjRqJnJ3qg6IZNh42/nyxcbV8lSk6ileEg8NE1auV9uUYux TYoTy3YcDABqlv0x8zzGrqzw7vuk5LZNWKWRCgGHC3BgNe5dSMMdLcgqoII0P5G5 /X/klz7FAg5TYzzd4ayOPe8JVoE/lLI6M4OZWZtsixJEVc3joWnvJkKwIEDDVvxs jrPLFh/wZWim1+OVTFp2WQpDN7pOWSj8Q2mShcCnI9z+N/1IbaJ7ac5iwkuAHpS3 EdWimJoHrU2nqA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:08 2025 by rpki-client