This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json) Hash identifier: 3ASxF00HqEgsTPGly6/0AOq45YXKZo8J9Fuf4s5mZJE= Subject key identifier: 3A:5B:0D:3F:64:E2:3A:0D:35:C3:13:5D:81:CE:76:AF:FE:7E:A9:9F Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Certificate serial: 019B1CF3A60B5042B7D2F8C8F12B9CBCDBEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 13:01:28 +0000 Manifest this update: Sun 14 Dec 2025 13:01:28 +0000 Manifest next update: Mon 15 Dec 2025 13:01:28 +0000 Files and hashes: 1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=) 2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: 6oZD4Xg83lMNQR3yV16KxKZ2sGj3n5ULVY9hPasM0Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:a6:0b:50:42:b7:d2:f8:c8:f1:2b:9c:bc:db:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Validity Not Before: Dec 14 13:01:28 2025 GMT Not After : Dec 15 13:01:28 2025 GMT Subject: CN=3a5b0d3f64e23a0d35c3135d81ce76affe7ea99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:96:d6:19:42:f4:cc:7d:5b:17:07:22:60: db:5a:d3:10:6e:59:c1:f0:10:74:02:50:34:38:55: bf:51:a0:d3:e1:58:b7:ac:fa:d3:8d:1c:de:36:08: ea:3f:95:3f:2a:7f:c0:93:b9:38:e0:fe:fb:67:01: 33:d1:26:db:c0:95:fa:0a:6a:7c:08:68:07:5c:31: 72:ad:9a:64:6d:4a:3c:a4:38:6e:13:ed:8a:4b:6a: 09:cc:07:7b:fb:5b:34:d4:5e:b9:df:4d:92:92:0e: 89:62:48:da:06:70:19:d7:2f:28:54:3e:4d:57:fc: ec:66:97:0e:10:0d:51:23:08:e2:b0:dc:ff:ac:06: a2:5a:9e:0e:05:b8:7a:04:c4:03:00:8c:51:39:6a: c8:ea:c1:bf:7a:3e:6c:d6:7a:63:2c:51:d1:9a:56: 9e:9f:24:73:b2:1a:ec:1a:fa:9b:66:00:89:2a:2f: 81:03:40:f0:5b:6a:6b:b8:28:6c:71:3c:12:ad:38: ed:83:5e:56:b8:aa:34:47:0b:f7:b3:2f:e1:87:af: b2:1d:0c:70:cd:a9:02:d8:ee:83:45:fb:7c:8f:2a: 2f:ec:76:c1:56:67:5d:c6:29:4a:c7:45:ca:81:03: 2a:0d:d9:40:40:f0:0a:04:c3:dc:44:6a:1c:0e:28: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5B:0D:3F:64:E2:3A:0D:35:C3:13:5D:81:CE:76:AF:FE:7E:A9:9F X509v3 Authority Key Identifier: keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:49:57:a6:ac:a0:01:fe:2a:18:f6:b6:1c:ee:f4:30:fe:3a: 3a:8a:4d:d9:f3:05:4f:5b:2d:0e:2a:d2:ac:9d:6c:9b:9a:a2: 3b:0b:10:6d:d1:c6:3f:8b:6f:a0:f1:d4:1f:55:f4:aa:1a:f9: a0:f1:2d:28:75:38:1b:12:3b:53:e4:62:1a:b6:5f:ab:b8:31: 33:4b:42:3b:5e:00:62:95:37:6f:ff:fe:e9:82:df:ee:2a:73: 9f:a2:a7:c6:1f:23:28:42:38:7f:88:c2:a8:6c:d3:82:82:35: 56:84:8e:e2:d4:67:2a:c2:15:5c:35:2b:d0:d6:64:15:3b:8b: c8:ff:e1:3b:ef:6a:54:41:7c:a5:5e:a9:1b:c4:e2:54:83:23: 64:bf:f0:ca:7b:b5:cd:fa:2c:a0:b1:89:2d:35:c4:f0:19:96: 60:99:4f:9c:bf:41:69:90:c2:27:e0:71:3e:9a:3b:09:5f:3a: 88:30:b1:f2:ce:fb:b4:7a:bc:96:0a:d9:c0:19:ad:a5:8a:6f: 80:85:6d:24:0b:1e:18:92:a3:be:1b:ea:3e:2a:7a:05:3c:9c: 85:cd:7a:a1:34:98:ff:db:36:b9:5d:7c:57:77:8e:49:9f:3c: 54:f3:40:d6:27:8c:e6:6c:5b:2d:cc:5a:81:d8:17:4b:f3:3d: 5e:68:77:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc86YLUEK30vjI8SucvNvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw MzkzM2MwHhcNMjUxMjE0MTMwMTI4WhcNMjUxMjE1MTMwMTI4WjAzMTEwLwYDVQQD EygzYTViMGQzZjY0ZTIzYTBkMzVjMzEzNWQ4MWNlNzZhZmZlN2VhOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+W1hlC9Mx9WxcHImDbWtMQblnB 8BB0AlA0OFW/UaDT4Vi3rPrTjRzeNgjqP5U/Kn/Ak7k44P77ZwEz0SbbwJX6Cmp8 CGgHXDFyrZpkbUo8pDhuE+2KS2oJzAd7+1s01F65302Skg6JYkjaBnAZ1y8oVD5N V/zsZpcOEA1RIwjisNz/rAaiWp4OBbh6BMQDAIxROWrI6sG/ej5s1npjLFHRmlae nyRzshrsGvqbZgCJKi+BA0DwW2pruChscTwSrTjtg15WuKo0Rwv3sy/hh6+yHQxw zakC2O6DRft8jyov7HbBVmddxilKx0XKgQMqDdlAQPAKBMPcRGocDigTvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpbDT9k4joNNcMTXYHOdq/+fqmfMB8GA1UdIwQY MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt YTBjNTk3MGE2Zjc2LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2 LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUlXpqyg Af4qGPa2HO70MP46OopN2fMFT1stDirSrJ1sm5qiOwsQbdHGP4tvoPHUH1X0qhr5 oPEtKHU4GxI7U+RiGrZfq7gxM0tCO14AYpU3b//+6YLf7ipzn6Knxh8jKEI4f4jC qGzTgoI1VoSO4tRnKsIVXDUr0NZkFTuLyP/hO+9qVEF8pV6pG8TiVIMjZL/wynu1 zfosoLGJLTXE8BmWYJlPnL9BaZDCJ+BxPpo7CV86iDCx8s77tHq8lgrZwBmtpYpv gIVtJAseGJKjvhvqPip6BTychc16oTSY/9s2uV18V3eOSZ88VPNA1ieM5mxbLcxa gdgXS/M9Xmh3KQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:02:17 2025 by rpki-client