This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft File: eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json) Hash identifier: D0lBnWwkey7Lh6iEkZbqfMFcAcZcrm/Q3kddS2p1kCk= Subject key identifier: 35:16:E1:57:07:E0:47:63:19:77:FF:34:16:B6:BA:0B:53:4C:49:44 Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Certificate serial: 019AF465A4EEC0AAF65CFE16789227C7109F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:33 +0000 Manifest this update: Sat 06 Dec 2025 16:01:33 +0000 Manifest next update: Sun 07 Dec 2025 16:01:33 +0000 Files and hashes: 1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=) 2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: 5I+yVfTvEpSz0e7NJIqCKumJYYiSqzJPYIMSHZACk0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a4:ee:c0:aa:f6:5c:fe:16:78:92:27:c7:10:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c Validity Not Before: Dec 6 16:01:33 2025 GMT Not After : Dec 7 16:01:33 2025 GMT Subject: CN=3516e15707e047631977ff3416b6ba0b534c4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:62:dd:34:e5:41:14:46:77:d2:14:27:3c: 8d:95:0c:63:9b:9f:3c:a7:15:91:20:9d:36:cf:99: 63:b3:22:6d:fb:a5:a0:04:bc:b5:49:44:35:3d:16: 64:09:a7:b5:41:20:84:df:48:fe:71:63:16:61:4f: bc:73:6c:d1:02:ba:1f:8e:bc:33:33:9b:a7:a8:3c: 2f:67:16:30:32:d3:51:22:5c:15:94:bd:7e:98:eb: 9d:11:7f:07:c5:0b:c4:9e:5b:ad:c8:71:b7:d6:c3: 30:3b:1d:23:a2:15:76:1c:11:ab:6a:21:e9:73:dc: bd:6d:fc:2e:39:cb:d5:37:da:01:46:07:d2:50:9b: bf:9c:97:c5:8d:7c:c2:ad:04:88:ae:f2:4f:e5:48: ba:48:09:b8:4b:32:a5:8c:02:de:44:54:9f:85:30: 0e:fd:b1:22:51:39:c6:ce:79:2a:21:04:87:28:40: b2:cb:11:6d:a3:5f:17:c9:b7:97:81:60:e2:99:0c: 59:26:20:f8:94:10:55:57:19:65:e8:f4:62:65:12: bd:f0:b0:3e:ab:c8:60:38:f3:ae:78:d5:23:13:0d: 48:eb:bd:39:ec:90:af:b4:6c:e6:8b:d1:1b:90:7e: 18:7e:9c:fa:89:97:35:b8:a3:bd:4e:77:84:fa:d8: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:E1:57:07:E0:47:63:19:77:FF:34:16:B6:BA:0B:53:4C:49:44 X509v3 Authority Key Identifier: keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8a:0b:85:bc:78:f2:4f:8c:27:d5:01:10:6c:c0:cb:d3:d6: 12:e5:4c:d2:a1:96:45:b9:d6:5c:79:b8:ae:09:8c:ce:da:18: d0:4b:3a:e9:7b:02:99:60:1e:7b:71:8c:87:c7:c4:01:a7:94: f7:df:61:92:d1:08:de:f1:6a:01:a2:f6:24:17:6e:37:dc:27: 26:60:cf:fe:93:72:30:a0:80:57:ad:16:b8:78:b6:57:d4:5d: 18:95:99:c0:3c:a9:9e:70:6e:e4:89:33:88:70:72:55:8d:4b: 49:f0:7b:e4:0c:6e:5b:85:5e:d8:1d:65:68:36:05:a4:b7:1a: e2:ca:b8:a5:96:e7:fd:78:02:7a:ff:31:7f:18:1a:25:91:ab: 6b:34:b3:2f:5f:0d:e8:15:7b:19:83:ec:82:50:58:a8:07:20: 80:65:53:c0:c5:14:c1:04:39:c8:c6:fb:c3:21:0c:08:86:02: f1:09:47:4c:8e:ae:c4:c9:25:25:c9:f9:4b:d4:a1:0f:15:24: d7:0b:63:f3:74:94:98:62:16:bd:1c:30:7e:08:7d:ea:0e:a2: e1:08:91:8e:0c:89:e8:ce:77:78:53:88:0f:ef:64:4a:42:51: 1d:b6:f5:16:98:e3:61:62:10:8e:aa:cf:79:d9:63:1a:bb:e3: 5e:7f:48:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaTuwKr2XP4WeJInxxCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOGExZTgzNmZhOTIxZDI5YWY4OWM0YTZlZDZhMDQ1MDAw MzkzM2MwHhcNMjUxMjA2MTYwMTMzWhcNMjUxMjA3MTYwMTMzWjAzMTEwLwYDVQQD EygzNTE2ZTE1NzA3ZTA0NzYzMTk3N2ZmMzQxNmI2YmEwYjUzNGM0OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt1i3TTlQRRGd9IUJzyNlQxjm588 pxWRIJ02z5ljsyJt+6WgBLy1SUQ1PRZkCae1QSCE30j+cWMWYU+8c2zRArofjrwz M5unqDwvZxYwMtNRIlwVlL1+mOudEX8HxQvEnlutyHG31sMwOx0johV2HBGraiHp c9y9bfwuOcvVN9oBRgfSUJu/nJfFjXzCrQSIrvJP5Ui6SAm4SzKljALeRFSfhTAO /bEiUTnGznkqIQSHKECyyxFto18XybeXgWDimQxZJiD4lBBVVxll6PRiZRK98LA+ q8hgOPOueNUjEw1I67057JCvtGzmi9EbkH4Yfpz6iZc1uKO9TneE+tgmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUW4VcH4EdjGXf/NBa2ugtTTElEMB8GA1UdIwQY MBaAFHqKHoNvqSHSmvicSm7WoEUAA5M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMt YTBjNTk3MGE2Zjc2LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjZiOWQtMGU2MS00ZmFkLTk4ZjMtYTBjNTk3MGE2Zjc2 LzEvZW9vZWcyLXBJZEthLUp4S2J0YWdSUUFEa3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYoLhbx4 8k+MJ9UBEGzAy9PWEuVM0qGWRbnWXHm4rgmMztoY0Es66XsCmWAee3GMh8fEAaeU 999hktEI3vFqAaL2JBduN9wnJmDP/pNyMKCAV60WuHi2V9RdGJWZwDypnnBu5Ikz iHByVY1LSfB75AxuW4Ve2B1laDYFpLca4sq4pZbn/XgCev8xfxgaJZGrazSzL18N 6BV7GYPsglBYqAcggGVTwMUUwQQ5yMb7wyEMCIYC8QlHTI6uxMklJcn5S9ShDxUk 1wtj83SUmGIWvRwwfgh96g6i4QiRjgyJ6M53eFOID+9kSkJRHbb1FpjjYWIQjqrP edljGrvjXn9I/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:24 2025 by rpki-client