This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json) Hash identifier: dhVgKbZzR3g+Y2onqzMeWB0DnvuDSVYfmmTD7USlcnE= Subject key identifier: 7F:77:12:54:42:01:45:1F:98:AF:75:C6:C1:9C:2E:92:DA:E6:8D:F6 Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Certificate serial: 019B3DC7CD65C07212F7CBF86439FA5F5B6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:02 +0000 Manifest this update: Sat 20 Dec 2025 22:01:02 +0000 Manifest next update: Sun 21 Dec 2025 22:01:02 +0000 Files and hashes: 1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=) 2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: v6b7Xf6ouNXr81fpbCkc7CDUSBRl1U88N+rq0HxthHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:cd:65:c0:72:12:f7:cb:f8:64:39:fa:5f:5b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Validity Not Before: Dec 20 22:01:02 2025 GMT Not After : Dec 21 22:01:02 2025 GMT Subject: CN=7f7712544201451f98af75c6c19c2e92dae68df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c1:3f:03:39:4c:66:46:e3:c6:f0:a8:e8:bd: 55:87:95:80:c7:2f:ee:c7:66:3f:9b:b6:70:15:d3: 2b:46:9c:b3:43:dc:c8:ff:85:db:12:94:33:6f:e1: ad:b5:02:ff:50:a3:ea:41:e9:84:df:50:1f:a5:68: b9:b1:ad:f2:a9:d1:0f:f1:92:8a:6e:2d:ef:6f:2e: ce:19:ca:f3:a0:22:69:3d:85:ee:1c:4b:4b:e0:23: ec:b7:de:c2:24:c8:3c:69:7d:86:8e:9c:7d:cc:f7: e6:9d:54:29:40:f0:9a:8d:0d:4e:13:00:7c:02:2c: 2b:d5:c5:0c:c6:63:53:f0:49:e2:1d:79:88:ab:12: 43:90:0c:95:52:1c:6e:9b:1c:92:42:16:ab:71:9d: 38:ef:be:62:a4:ba:72:89:b5:f6:2b:ee:d3:94:2d: e4:e3:a4:9d:ff:0f:ff:6c:99:72:f6:08:71:a2:ce: 14:17:4a:d4:d2:48:e0:88:ee:c1:23:64:82:f8:f2: 49:da:e2:42:2f:68:a3:38:a4:bf:0d:dd:b5:fa:62: 9b:83:27:ad:0f:40:bb:9d:ee:e2:fc:b1:48:d0:e2: 82:9d:3a:f5:44:7e:be:3c:72:1b:9b:c8:d8:d9:5b: 15:5a:52:dd:50:a6:46:8e:82:17:3a:37:0b:4b:55: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:12:54:42:01:45:1F:98:AF:75:C6:C1:9C:2E:92:DA:E6:8D:F6 X509v3 Authority Key Identifier: keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d9:a8:e7:68:e5:95:33:a3:35:74:1a:15:5e:1d:11:bc:8e: 58:f3:38:04:11:51:7c:c8:19:b8:d5:c0:00:f2:9d:e8:27:3c: 02:af:60:d3:f4:3e:ec:2a:db:5f:05:4a:6c:b4:0a:fb:62:16: 98:13:03:8f:fa:63:85:3d:f7:6b:0f:93:ae:ac:b9:1e:7d:4c: 5b:2c:03:94:70:da:3d:f0:b0:c8:31:21:53:7a:9a:1c:45:01: 7a:08:e2:55:b8:32:3c:33:c5:76:2b:c3:57:9b:f4:d8:9e:4a: a6:38:93:1b:38:c5:3c:4b:12:e9:19:b7:d4:c0:db:b2:cd:a1: a2:e8:5a:2b:5b:65:1a:3d:08:70:85:53:ec:19:fe:44:78:a7: 44:10:19:7c:7e:f1:d1:24:ad:ea:5e:f5:b5:27:76:2c:87:c4: e0:78:35:88:49:e4:d2:5c:60:c9:66:6e:3b:6a:b2:dc:8e:f1: fc:d1:53:96:dd:d9:cc:6b:eb:a4:b9:ea:f8:7b:9d:0f:d9:ba: 2c:36:1c:b6:ba:5f:a0:08:70:57:c3:eb:ce:80:3b:e2:77:0a: 62:19:b0:d9:20:61:a6:7f:15:dc:db:a4:22:a5:96:06:5a:c0: 86:ac:d7:d6:a9:56:fc:2f:c5:a0:18:cc:66:43:7c:c2:85:09: b0:62:1c:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x81lwHIS98v4ZDn6X1tsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw MzkzM2MwHhcNMjUxMjIwMjIwMTAyWhcNMjUxMjIxMjIwMTAyWjAzMTEwLwYDVQQD Eyg3Zjc3MTI1NDQyMDE0NTFmOThhZjc1YzZjMTljMmU5MmRhZTY4ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8E/AzlMZkbjxvCo6L1Vh5WAxy/u x2Y/m7ZwFdMrRpyzQ9zI/4XbEpQzb+GttQL/UKPqQemE31AfpWi5sa3yqdEP8ZKK bi3vby7OGcrzoCJpPYXuHEtL4CPst97CJMg8aX2Gjpx9zPfmnVQpQPCajQ1OEwB8 Aiwr1cUMxmNT8EniHXmIqxJDkAyVUhxumxySQharcZ04775ipLpyibX2K+7TlC3k 46Sd/w//bJly9ghxos4UF0rU0kjgiO7BI2SC+PJJ2uJCL2ijOKS/Dd21+mKbgyet D0C7ne7i/LFI0OKCnTr1RH6+PHIbm8jY2VsVWlLdUKZGjoIXOjcLS1XC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH93ElRCAUUfmK91xsGcLpLa5o32MB8GA1UdIwQY MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt YTBjNTk3MGE2Zjc2LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2 LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNmo52jl lTOjNXQaFV4dEbyOWPM4BBFRfMgZuNXAAPKd6Cc8Aq9g0/Q+7CrbXwVKbLQK+2IW mBMDj/pjhT33aw+Trqy5Hn1MWywDlHDaPfCwyDEhU3qaHEUBegjiVbgyPDPFdivD V5v02J5KpjiTGzjFPEsS6Rm31MDbss2houhaK1tlGj0IcIVT7Bn+RHinRBAZfH7x 0SSt6l71tSd2LIfE4Hg1iEnk0lxgyWZuO2qy3I7x/NFTlt3ZzGvrpLnq+HudD9m6 LDYctrpfoAhwV8PrzoA74ncKYhmw2SBhpn8V3NukIqWWBlrAhqzX1qlW/C/FoBjM ZkN8woUJsGIccw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:34 2025 by rpki-client