This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json) Hash identifier: TTQ0wznYhHW62dtfIL6nEGheG2o5BPGEGM6Ttuf1LIY= Subject key identifier: 9A:19:BE:2B:0C:DF:06:C4:67:FD:8C:1D:54:87:E7:A5:11:D0:D4:E3 Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Certificate serial: 019B476FFC425C3540BF97F0E47F4E48B4F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 19:01:19 +0000 Manifest this update: Mon 22 Dec 2025 19:01:19 +0000 Manifest next update: Tue 23 Dec 2025 19:01:19 +0000 Files and hashes: 1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=) 2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: vEthSexINA5KTMdnGh/9EKsqqQA9ARzu0AXjxdOTOD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:fc:42:5c:35:40:bf:97:f0:e4:7f:4e:48:b4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Validity Not Before: Dec 22 19:01:19 2025 GMT Not After : Dec 23 19:01:19 2025 GMT Subject: CN=9a19be2b0cdf06c467fd8c1d5487e7a511d0d4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:46:63:b0:e9:e1:37:f1:b7:a5:08:27:e6: 92:63:ea:70:4f:c5:07:fe:5f:87:8e:6f:04:5a:d8: c6:3e:bc:d0:a3:c7:ff:d2:b5:89:87:b1:75:e1:91: 34:b3:cd:00:2c:ab:cf:61:bf:b3:ae:cd:41:54:bc: 43:d5:03:65:e0:53:43:78:12:e4:e5:7c:fc:48:15: 02:3c:cb:1d:8d:31:99:b5:09:06:a3:f5:32:b3:be: 43:7e:17:7c:6a:0c:dc:82:fc:f5:6a:cf:ae:69:a5: f9:e4:57:4b:9e:2d:85:34:b9:f2:3d:a7:20:9e:7d: 5a:54:95:96:eb:4e:e4:33:14:64:bb:3e:af:4c:80: 96:ee:14:86:94:fc:e6:98:83:21:f5:18:f3:a6:d0: d3:30:70:f7:67:26:11:b4:7a:38:3e:81:cb:6b:15: 99:c7:73:3d:53:21:c8:b8:1d:20:08:a4:37:3b:ae: 8c:0d:cf:ab:f3:62:90:44:17:3f:89:08:ad:f3:cf: 3c:a4:2f:2b:3b:73:98:f2:95:f4:4d:a0:48:e6:d1: d2:89:cd:f4:bc:0a:b3:73:39:67:6d:fe:60:35:33: 88:71:c9:2b:7d:c5:a8:1b:90:84:80:73:13:e0:32: 86:5e:29:65:af:ad:86:d3:24:d5:3f:a6:9e:5e:66: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:19:BE:2B:0C:DF:06:C4:67:FD:8C:1D:54:87:E7:A5:11:D0:D4:E3 X509v3 Authority Key Identifier: keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d9:ee:22:e6:bb:f3:37:87:c8:c8:d6:b7:79:c5:4a:d3:d5: 1b:75:1e:59:65:19:e5:a7:97:b1:46:06:19:48:d2:81:e0:21: b0:7c:c2:82:ab:d8:fb:ff:f2:15:7f:c8:2d:f3:6a:ab:be:0b: 19:3d:cf:02:5a:5f:64:da:e9:0a:0f:e9:02:4b:3e:f9:97:39: db:be:95:0d:32:69:64:0f:cf:3a:87:67:dc:f2:5b:e5:d7:c8: a9:5e:ef:b8:ee:5b:06:51:4c:14:e3:24:3d:69:f4:9f:fb:b1: bc:d2:fb:ce:e1:19:c5:06:97:70:11:8b:e4:82:f6:00:08:22: d0:a8:67:eb:9c:72:77:26:c5:0f:7f:0e:68:29:31:21:87:db: 10:ae:0d:f7:7b:cd:f2:8c:d6:47:a4:fc:d7:9a:86:44:4f:00: 51:f4:c2:82:d0:90:fb:ab:e2:df:c4:d6:1c:74:78:6e:f3:48: db:48:2c:31:5e:c8:92:a2:e2:54:30:c2:7e:d5:8d:7f:1d:26: 9f:5b:97:44:7d:ab:84:a9:a0:ac:c6:70:51:9d:b3:66:c6:d2: a2:9d:b9:eb:91:cd:0f:49:a0:1e:f4:95:c7:b3:f4:80:68:b8: f4:16:df:2b:2c:6b:e4:7e:97:93:b3:bb:1c:b4:ac:07:87:5f: d6:85:b1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb/xCXDVAv5fw5H9OSLTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw MzkzM2MwHhcNMjUxMjIyMTkwMTE5WhcNMjUxMjIzMTkwMTE5WjAzMTEwLwYDVQQD Eyg5YTE5YmUyYjBjZGYwNmM0NjdmZDhjMWQ1NDg3ZTdhNTExZDBkNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8VGY7Dp4Tfxt6UIJ+aSY+pwT8UH /l+Hjm8EWtjGPrzQo8f/0rWJh7F14ZE0s80ALKvPYb+zrs1BVLxD1QNl4FNDeBLk 5Xz8SBUCPMsdjTGZtQkGo/Uys75Dfhd8agzcgvz1as+uaaX55FdLni2FNLnyPacg nn1aVJWW607kMxRkuz6vTICW7hSGlPzmmIMh9RjzptDTMHD3ZyYRtHo4PoHLaxWZ x3M9UyHIuB0gCKQ3O66MDc+r82KQRBc/iQit8888pC8rO3OY8pX0TaBI5tHSic30 vAqzczlnbf5gNTOIcckrfcWoG5CEgHMT4DKGXillr62G0yTVP6aeXmYb7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoZvisM3wbEZ/2MHVSH56UR0NTjMB8GA1UdIwQY MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt YTBjNTk3MGE2Zjc2LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2 LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadnuIua7 8zeHyMjWt3nFStPVG3UeWWUZ5aeXsUYGGUjSgeAhsHzCgqvY+//yFX/ILfNqq74L GT3PAlpfZNrpCg/pAks++Zc5276VDTJpZA/POodn3PJb5dfIqV7vuO5bBlFMFOMk PWn0n/uxvNL7zuEZxQaXcBGL5IL2AAgi0Khn65xydybFD38OaCkxIYfbEK4N93vN 8ozWR6T815qGRE8AUfTCgtCQ+6vi38TWHHR4bvNI20gsMV7IkqLiVDDCftWNfx0m n1uXRH2rhKmgrMZwUZ2zZsbSop2565HND0mgHvSVx7P0gGi49BbfKyxr5H6Xk7O7 HLSsB4df1oWxOQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:24:39 2025 by rpki-client