This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json) Hash identifier: NKd7AM4NLwBZbx7HI5ic8PSe6H8OY8tukPrONFktHZk= Subject key identifier: 15:E8:0B:16:56:48:12:13:BB:6D:49:63:1A:DD:FD:AB:A2:D6:36:F5 Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Certificate serial: 019BFAD261ED4B01636B34EC0BDD51F6DE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 15:00:50 +0000 Manifest this update: Mon 26 Jan 2026 15:00:50 +0000 Manifest next update: Tue 27 Jan 2026 15:00:50 +0000 Files and hashes: 1: Xw-YfGo9dbYYynT4e8fytlvPIDM.roa (hash: GIydqVz0uBGXp6zRLhHB8inOB1N9/5K9aw+gLa9sp4c=) 2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: +ExZ/OKZfJb79LhZdXDIOCC84YngZDF33K1IqB1f1dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:61:ed:4b:01:63:6b:34:ec:0b:dd:51:f6:de:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Validity Not Before: Jan 26 15:00:50 2026 GMT Not After : Jan 27 15:00:50 2026 GMT Subject: CN=15e80b1656481213bb6d49631addfdaba2d636f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:50:7f:69:d9:55:d7:fc:e7:2b:23:3d:aa: 4e:d3:ab:b6:9e:21:b5:59:85:10:ef:37:ac:37:a0: a7:2a:18:71:b0:4d:18:b9:5d:9e:63:5a:ee:75:6d: e5:9d:71:9c:c6:67:83:e1:b8:9f:3c:b5:fa:63:d5: 17:f2:c7:68:c6:a6:26:34:e7:d4:30:06:c1:d8:13: 8a:c3:67:0b:49:b2:cc:dd:00:48:6c:5f:91:d1:87: db:9f:40:d3:40:98:d9:0e:54:06:60:df:65:14:a5: db:34:dc:7a:5c:90:5d:16:0d:9c:5d:88:bc:a3:21: f1:21:8b:7f:57:94:b3:99:f2:3a:ff:93:25:52:da: c9:70:54:51:f4:20:f3:a9:7b:1e:ce:2d:18:1a:29: 00:47:e2:29:fe:ae:ba:3c:42:42:cc:fd:5a:2a:56: 39:29:9a:3c:9a:be:bf:16:ec:00:3e:00:f7:38:5a: 8c:a9:61:c8:63:84:4b:07:5b:ae:1f:a7:35:43:fc: e1:a9:fa:e8:50:29:7d:b3:f0:41:0b:e0:eb:f0:d1: 29:44:ba:a1:3f:71:a8:8a:80:af:c7:24:e0:45:86: 9b:b3:96:02:6b:71:10:6a:64:99:70:60:17:d2:98: a2:53:0b:6a:0b:8a:de:ee:d3:25:33:89:5a:e0:05: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E8:0B:16:56:48:12:13:BB:6D:49:63:1A:DD:FD:AB:A2:D6:36:F5 X509v3 Authority Key Identifier: keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5d:68:3d:05:3f:a4:86:80:7b:13:3e:26:8c:f6:cf:2c:63: d8:2b:84:96:cb:86:46:a0:26:7d:ee:6a:28:ac:85:9b:5b:4d: 61:27:a6:3c:44:94:12:42:4c:37:84:40:02:de:3d:f9:06:c4: 8b:59:82:d6:90:b7:3e:ae:dc:72:93:c4:bb:89:5b:6a:82:6b: d1:03:e8:51:1c:82:24:90:bf:25:e5:f0:d9:19:8d:4a:b8:61: 18:76:bc:68:00:77:d7:1c:67:6c:40:23:a7:84:ef:e9:bb:d8: 74:5f:f0:2d:15:19:fb:30:0c:ab:1d:de:17:82:c7:f7:46:ad: 21:df:8b:7e:85:34:38:68:a0:82:1b:85:f5:b5:14:c5:17:25: eb:57:42:ff:ad:17:2a:07:e8:68:64:df:b6:33:eb:7e:f8:18: 16:5b:e1:4b:29:d7:67:69:6a:fc:83:5a:80:3f:59:05:8b:e5: 96:e7:ef:27:2c:03:2e:e4:dd:76:1b:41:6d:3d:a3:9d:f1:66: ea:5f:b9:28:ec:50:30:73:41:d0:b8:6d:49:6f:9f:0f:ed:04: 44:0b:96:6a:89:36:c2:c7:b0:8e:d7:2e:99:47:d4:bb:fe:88: 99:71:e1:76:57:4d:46:e4:8a:4c:65:71:f6:55:72:b7:c1:64: 09:46:58:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60mHtSwFjazTsC91R9t5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw MzkzM2MwHhcNMjYwMTI2MTUwMDUwWhcNMjYwMTI3MTUwMDUwWjAzMTEwLwYDVQQD EygxNWU4MGIxNjU2NDgxMjEzYmI2ZDQ5NjMxYWRkZmRhYmEyZDYzNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb1Qf2nZVdf85ysjPapO06u2niG1 WYUQ7zesN6CnKhhxsE0YuV2eY1rudW3lnXGcxmeD4bifPLX6Y9UX8sdoxqYmNOfU MAbB2BOKw2cLSbLM3QBIbF+R0Yfbn0DTQJjZDlQGYN9lFKXbNNx6XJBdFg2cXYi8 oyHxIYt/V5SzmfI6/5MlUtrJcFRR9CDzqXsezi0YGikAR+Ip/q66PEJCzP1aKlY5 KZo8mr6/FuwAPgD3OFqMqWHIY4RLB1uuH6c1Q/zhqfroUCl9s/BBC+Dr8NEpRLqh P3GoioCvxyTgRYabs5YCa3EQamSZcGAX0piiUwtqC4re7tMlM4la4AU45QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXoCxZWSBITu21JYxrd/aui1jb1MB8GA1UdIwQY MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt YTBjNTk3MGE2Zjc2LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2 LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf11oPQU/ pIaAexM+Joz2zyxj2CuElsuGRqAmfe5qKKyFm1tNYSemPESUEkJMN4RAAt49+QbE i1mC1pC3Pq7ccpPEu4lbaoJr0QPoURyCJJC/JeXw2RmNSrhhGHa8aAB31xxnbEAj p4Tv6bvYdF/wLRUZ+zAMqx3eF4LH90atId+LfoU0OGigghuF9bUUxRcl61dC/60X KgfoaGTftjPrfvgYFlvhSynXZ2lq/INagD9ZBYvllufvJywDLuTddhtBbT2jnfFm 6l+5KOxQMHNB0LhtSW+fD+0ERAuWaok2wsewjtcumUfUu/6ImXHhdldNRuSKTGVx 9lVyt8FkCUZYwg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:11 2026 by rpki-client