This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft File: OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft (raw, json) Hash identifier: BEXvcmwteWAxgD7m/CUD+nCBeJUfUv45ljO0dO1HXxM= Subject key identifier: 10:5E:2B:CA:96:FE:89:D2:FA:2D:E4:78:EC:0F:A6:FB:23:DE:9C:9D Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d Certificate serial: 019AF5AF036E61ABE32CD62C70EBEDC30187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft Manifest number: 177A Signing time: Sat 06 Dec 2025 22:01:18 +0000 Manifest this update: Sat 06 Dec 2025 22:01:18 +0000 Manifest next update: Sun 07 Dec 2025 22:01:18 +0000 Files and hashes: 1: FL-63HYyWSOHaS0zatb3tBhA794.roa (hash: mLXwUnn3m8eIlstUhvReKOdJ0V5ZYWYpyzYXC0ze4xI=) 2: OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl (hash: 5t7c4ZVioPneB+UzbpeKWoG7JT7AcUZWsp3aTi+cc6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:03:6e:61:ab:e3:2c:d6:2c:70:eb:ed:c3:01:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d Validity Not Before: Dec 6 22:01:18 2025 GMT Not After : Dec 7 22:01:18 2025 GMT Subject: CN=105e2bca96fe89d2fa2de478ec0fa6fb23de9c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:03:f2:9a:3f:ff:89:71:94:a0:53:30:53: 04:9e:d1:f7:be:21:57:b9:8a:ba:7b:70:81:98:eb: 19:1c:77:dc:61:38:85:31:20:24:a7:4c:84:17:73: 3c:b7:10:cb:d7:44:da:de:18:86:e8:22:b8:4d:f5: f3:bc:4c:4a:38:08:28:f4:b7:60:0d:22:89:b5:a8: 55:2e:60:77:d2:57:a4:77:c8:62:ec:7f:57:c7:69: 99:89:5e:51:70:21:36:3a:20:1d:0c:b1:ac:73:45: 15:df:cf:90:ad:12:74:10:74:dd:e7:45:c2:64:d3: e8:98:ef:62:ff:50:a7:8d:8a:96:44:0f:1e:92:bc: 07:96:0b:c6:e3:95:e1:a0:19:ff:dd:0b:8e:de:c6: a7:0f:7f:7f:6c:dd:80:22:47:f3:20:e3:b9:c0:42: fc:a2:71:8f:68:16:38:b3:13:de:ea:5c:94:ce:85: e3:68:fd:3f:e7:88:2c:2d:9f:b6:55:ae:59:33:2b: e2:d2:1a:94:11:8c:cc:0a:58:3f:c5:b1:63:dc:88: 0d:53:d7:a6:2d:a9:82:10:81:41:ec:a7:06:27:8c: 37:40:e9:d4:48:3f:94:95:0f:74:13:3b:c4:0f:2c: ef:1c:7d:44:31:42:d9:a2:b5:c1:e0:e0:73:8b:17: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:2B:CA:96:FE:89:D2:FA:2D:E4:78:EC:0F:A6:FB:23:DE:9C:9D X509v3 Authority Key Identifier: keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:f7:42:e2:d8:dd:0f:0f:11:67:00:36:c0:a5:f3:b3:fa: 08:3e:87:93:74:e9:81:70:2e:29:3c:07:e2:dc:f0:36:aa:28: ff:70:c7:7d:6c:ba:97:95:15:74:64:60:22:2c:d0:cd:1b:ea: c5:24:ce:c2:7d:6d:ad:e0:8a:44:e3:33:17:f8:ef:8e:32:9d: 68:f3:b6:d6:21:5b:23:9c:94:3a:ed:d1:f1:40:cd:6c:62:90: 71:ca:52:86:30:a6:7b:4a:55:8a:7c:84:dd:56:ef:c5:c9:13: d5:b4:8f:1d:b4:8f:12:06:28:70:7e:f7:dd:af:92:44:b2:38: f6:d5:14:03:cc:ee:9d:7f:96:23:62:3a:1b:f9:b2:54:69:23: e7:77:20:0f:2b:bf:ca:ec:09:f4:3b:b5:b4:a8:a0:e2:d6:69: 1c:e3:5e:05:a9:f1:fc:a9:e3:79:10:4c:aa:19:b1:f9:24:ea: 7e:3b:ee:61:3b:f0:f5:cb:7e:5f:ae:7a:7b:96:b5:fa:85:a5: 91:36:fa:43:db:e2:fb:16:23:ed:b9:d7:5e:ca:93:cb:c3:25: f8:cb:58:76:12:9b:d4:0c:33:12:6b:db:48:f1:e1:79:46:87: d3:bf:62:48:60:1f:fc:fd:59:c6:ed:41:7f:17:df:e1:f1:a4: 2a:68:d7:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwNuYavjLNYscOvtwwGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Y2EzZjM4ZDhlNWEzMDFlYWY2OTI0YjkyNGZlOGY1N2Fh YzY5MGQwHhcNMjUxMjA2MjIwMTE4WhcNMjUxMjA3MjIwMTE4WjAzMTEwLwYDVQQD EygxMDVlMmJjYTk2ZmU4OWQyZmEyZGU0NzhlYzBmYTZmYjIzZGU5YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lID8po//4lxlKBTMFMEntH3viFX uYq6e3CBmOsZHHfcYTiFMSAkp0yEF3M8txDL10Ta3hiG6CK4TfXzvExKOAgo9Ldg DSKJtahVLmB30lekd8hi7H9Xx2mZiV5RcCE2OiAdDLGsc0UV38+QrRJ0EHTd50XC ZNPomO9i/1CnjYqWRA8ekrwHlgvG45XhoBn/3QuO3sanD39/bN2AIkfzIOO5wEL8 onGPaBY4sxPe6lyUzoXjaP0/54gsLZ+2Va5ZMyvi0hqUEYzMClg/xbFj3IgNU9em LamCEIFB7KcGJ4w3QOnUSD+UlQ90EzvEDyzvHH1EMULZorXB4OBzixe7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBeK8qW/onS+i3keOwPpvsj3pydMB8GA1UdIwQY MBaAFDjKPzjY5aMB6vaSS5JP6PV6rGkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT01vX09Oamxvd0hxOXBKTGtrX285WHFzYVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iYTY3NTUtNDI3My00OGUxLTg1ODIt NzEyZmE2NWEyNWJhLzEvT01vX09Oamxvd0hxOXBKTGtrX285WHFzYVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iYTY3NTUtNDI3My00OGUxLTg1ODItNzEyZmE2NWEyNWJh LzEvT01vX09Oamxvd0hxOXBKTGtrX285WHFzYVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNv3QuLY 3Q8PEWcANsCl87P6CD6Hk3TpgXAuKTwH4tzwNqoo/3DHfWy6l5UVdGRgIizQzRvq xSTOwn1treCKROMzF/jvjjKdaPO21iFbI5yUOu3R8UDNbGKQccpShjCme0pVinyE 3VbvxckT1bSPHbSPEgYocH733a+SRLI49tUUA8zunX+WI2I6G/myVGkj53cgDyu/ yuwJ9Du1tKig4tZpHONeBanx/KnjeRBMqhmx+STqfjvuYTvw9ct+X656e5a1+oWl kTb6Q9vi+xYj7bnXXsqTy8Ml+MtYdhKb1AwzEmvbSPHheUaH079iSGAf/P1Zxu1B fxff4fGkKmjXzg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:01 2025 by rpki-client