This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft File: omhVmAsnPlrlfcG56yLp9fOnzfc.mft (raw, json) Hash identifier: vNKqZpMohQoap2qK2UBMql5TxHA6K/8XqMiegrvgA38= Subject key identifier: B0:8A:E9:2E:0E:8B:AF:A5:3F:02:5B:AB:13:CA:07:87:6F:36:1E:F5 Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7 Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7 Certificate serial: 019AF2092D3426DA96EA85A210C9EE228F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (hash: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=) 2: omhVmAsnPlrlfcG56yLp9fOnzfc.crl (hash: aC2XskbU8YgYnXTSEEROhbDftBewmIBT1gEw0J25NM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2d:34:26:da:96:ea:85:a2:10:c9:ee:22:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=b08ae92e0e8bafa53f025bab13ca07876f361ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:ad:b9:c9:75:db:70:bc:0a:21:19:ba:82: 33:f6:e2:e2:99:a9:4d:c6:3e:04:a5:42:7a:d7:5b: 8a:ed:48:1c:d7:1d:a2:b6:94:85:2b:e9:8c:16:46: 4d:1f:13:b0:9d:e1:90:18:57:83:0e:65:45:7e:35: 14:06:ef:db:a3:84:5a:d6:a1:c0:dc:a0:81:cf:fa: 28:13:4b:b5:58:4a:90:3d:88:18:c6:57:5b:67:a1: b3:db:4d:8d:43:d7:de:87:27:87:65:08:44:b8:16: 05:f2:b9:1a:c2:88:3b:de:df:0c:88:ad:69:83:4c: c9:63:82:c4:5e:5d:81:88:45:bc:09:8d:77:de:18: 8a:cb:ac:72:52:5e:e5:77:a7:a8:ec:f5:fc:8e:81: ee:3e:71:f6:6b:c2:f2:09:a3:29:27:b0:cb:35:1b: df:95:3d:b4:8a:07:68:de:3c:cd:d2:11:86:c0:50: 67:f9:b5:40:95:66:50:64:51:44:14:14:bb:2f:0b: 9d:79:4d:0c:8f:3e:24:75:7b:4c:b1:09:75:1f:1b: b3:0e:f4:c2:b8:78:bc:d4:a4:58:60:d0:11:0b:4f: 78:ef:87:61:9e:e3:9d:a8:c6:49:43:43:90:c7:78: 88:28:77:e7:04:92:72:f3:83:a0:20:95:a9:c7:53: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8A:E9:2E:0E:8B:AF:A5:3F:02:5B:AB:13:CA:07:87:6F:36:1E:F5 X509v3 Authority Key Identifier: keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:84:7a:9f:51:9b:cf:a5:dd:47:00:d2:f4:b8:2d:38:c2:8c: 66:db:00:96:81:50:87:1f:08:a4:f1:44:48:ac:20:4c:e7:13: 87:60:ef:f4:47:d6:f4:5a:12:51:c0:cc:9f:67:06:5c:28:72: 44:9e:4c:07:c9:79:3c:18:84:c0:18:9e:94:6f:89:ac:6a:33: 78:c4:84:4f:61:a0:7e:c6:73:93:01:f5:84:b5:3b:01:77:51: 80:7b:b2:d4:cf:86:20:d6:23:13:f5:83:d4:8d:46:f7:9a:21: 5a:7d:fc:26:1d:ed:07:6b:fd:c0:1d:c6:22:8a:60:0d:c3:44: 44:fb:97:dd:53:e3:63:d4:66:15:c6:9e:e1:58:30:42:1a:52: 48:2d:dd:ab:8c:b0:37:c6:12:40:c9:fe:34:60:7c:c3:fe:ce: cb:96:56:ad:a5:ba:8b:d6:08:02:28:ec:13:44:a8:50:e9:7d: a3:39:7e:37:af:a4:ee:4d:96:11:13:d9:14:99:04:bb:e2:90: 69:f1:41:f0:14:fa:b0:10:81:a6:19:ae:a1:5e:e1:ef:a8:75: 68:c6:f4:77:e0:3c:b7:7f:60:8f:7a:e6:d3:e0:c5:c3:98:4f: 5d:5f:d5:56:49:85:ee:31:5b:25:e1:15:15:84:03:1b:95:e8: ed:54:c0:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS00JtqW6oWiEMnuIo+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNjg1NTk4MGIyNzNlNWFlNTdkYzFiOWViMjJlOWY1ZjNh N2NkZjcwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhiMDhhZTkyZTBlOGJhZmE1M2YwMjViYWIxM2NhMDc4NzZmMzYxZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhitucl123C8CiEZuoIz9uLimalN xj4EpUJ611uK7Ugc1x2itpSFK+mMFkZNHxOwneGQGFeDDmVFfjUUBu/bo4Ra1qHA 3KCBz/ooE0u1WEqQPYgYxldbZ6Gz202NQ9fehyeHZQhEuBYF8rkawog73t8MiK1p g0zJY4LEXl2BiEW8CY133hiKy6xyUl7ld6eo7PX8joHuPnH2a8LyCaMpJ7DLNRvf lT20igdo3jzN0hGGwFBn+bVAlWZQZFFEFBS7LwudeU0Mjz4kdXtMsQl1HxuzDvTC uHi81KRYYNARC09474dhnuOdqMZJQ0OQx3iIKHfnBJJy84OgIJWpx1M+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCK6S4Oi6+lPwJbqxPKB4dvNh71MB8GA1UdIwQY MBaAFKJoVZgLJz5a5X3Buesi6fXzp833MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEt ODFlYjYxZjViNzFlLzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWZkZGEtNmM2Yi00NTg3LThhMjEtODFlYjYxZjViNzFl LzEvb21oVm1Bc25QbHJsZmNHNTZ5THA5Zk9uemZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYR6n1Gb z6XdRwDS9LgtOMKMZtsAloFQhx8IpPFESKwgTOcTh2Dv9EfW9FoSUcDMn2cGXChy RJ5MB8l5PBiEwBielG+JrGozeMSET2GgfsZzkwH1hLU7AXdRgHuy1M+GINYjE/WD 1I1G95ohWn38Jh3tB2v9wB3GIopgDcNERPuX3VPjY9RmFcae4VgwQhpSSC3dq4yw N8YSQMn+NGB8w/7Oy5ZWraW6i9YIAijsE0SoUOl9ozl+N6+k7k2WERPZFJkEu+KQ afFB8BT6sBCBphmuoV7h76h1aMb0d+A8t39gj3rm0+DFw5hPXV/VVkmF7jFbJeEV FYQDG5Xo7VTAFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:34 2025 by rpki-client