This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json) Hash identifier: 8KGus1u8FS08ktPGI5xmq3mNw0VZti+P/Gi2RQtVIOY= Subject key identifier: 65:80:81:F3:A8:0A:32:16:15:4B:74:62:6B:5A:E2:72:47:CC:77:DF Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019B4D3A8772187179DFCA8A9FDD500BD98F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft Manifest number: 1798 Signing time: Tue 23 Dec 2025 22:00:39 +0000 Manifest this update: Tue 23 Dec 2025 22:00:39 +0000 Manifest next update: Wed 24 Dec 2025 22:00:39 +0000 Files and hashes: 1: 2_aedBK1LsY-Ma99ssfiCM4P-q4.roa (hash: 88IybdKTdXl1XFfeFL40irO5Mp2itxxV1uFlENMQvcY=) 2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: NNANP5CeTdmUra1VC4AsRQe8h7OQCNTL4fYOZPaULfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:87:72:18:71:79:df:ca:8a:9f:dd:50:0b:d9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Dec 23 22:00:39 2025 GMT Not After : Dec 24 22:00:39 2025 GMT Subject: CN=658081f3a80a3216154b74626b5ae27247cc77df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:cc:89:b7:ba:88:36:03:ee:94:3a:de:b4: b5:39:92:65:d8:fe:55:15:8d:cf:b6:6c:13:22:45: 83:05:d2:f9:6d:17:ac:1e:40:10:78:6a:8c:c8:c0: 80:2b:1b:ae:af:01:11:fa:e4:72:90:5f:4d:2c:b1: 4c:68:d2:8b:98:04:6b:b7:5a:65:87:3c:bc:c6:e7: 6f:4b:b5:fb:df:87:b9:e9:ef:36:2d:99:3f:1c:d4: 7d:e8:fd:ec:9f:ec:bd:cc:ed:c1:34:fd:c2:33:16: e4:99:df:5b:ce:55:09:a6:26:33:3b:e0:96:f9:b1: 2e:33:7b:37:fd:81:e9:c3:54:c3:16:60:e8:08:7e: f3:da:46:38:5e:cf:6d:0f:16:22:b1:17:a7:ba:2a: 99:7e:97:6e:61:19:8f:a0:93:24:66:5e:09:4f:d9: b4:98:7a:f6:9f:7a:d2:38:0e:05:4e:2d:7d:77:e9: 5e:0d:ec:e5:eb:57:c0:02:c8:1d:c9:fd:94:cc:56: 10:6c:59:fb:a5:59:f8:9b:3c:7f:c0:42:f5:3c:3a: 91:90:aa:71:48:0f:aa:d3:c1:9c:64:fb:d6:ec:47: 63:a5:c1:fd:5c:f6:d9:31:e2:4f:cb:dc:08:f9:0a: bc:d3:99:9d:dc:25:06:7e:61:67:95:77:5a:f1:26: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:81:F3:A8:0A:32:16:15:4B:74:62:6B:5A:E2:72:47:CC:77:DF X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:40:62:14:45:e7:e1:42:be:ff:bf:7b:d4:28:15:71:16:bc: 1f:92:aa:a9:07:15:d4:dd:98:97:7a:f2:06:c7:4b:a5:f6:c0: b9:3f:57:19:49:ed:88:42:4d:97:5f:ab:cf:c6:cb:8e:68:50: 7b:c7:50:43:05:43:9b:75:7e:a4:64:d9:44:5f:03:55:24:c8: 06:c5:ff:4c:c4:d8:27:c4:9c:cc:3b:80:99:34:11:38:dd:64: e9:1e:27:8a:fa:86:9d:45:af:48:38:82:1d:18:44:b8:85:9a: 24:77:dd:a8:c0:a6:2e:9c:88:e2:c0:3b:ef:a5:95:8e:00:68: ff:a6:c4:9e:8d:41:14:47:a4:1f:8d:f2:68:32:c2:d1:ee:2e: b1:03:d2:f9:48:f9:8c:4e:f1:11:a2:e2:c2:16:66:da:a1:a3: 9b:5f:8b:6c:a6:16:9f:6c:46:0e:de:75:df:8a:49:1c:da:6b: 81:49:f4:f2:cc:fa:32:1a:91:a0:d4:2c:6f:45:44:d5:60:d3: 30:00:5d:75:8f:0f:d3:e2:f6:24:91:ca:58:e5:7d:51:aa:73: 3c:a6:0d:1a:cb:a3:0c:9b:d7:7f:84:6d:d2:ed:f7:f1:df:0f: 72:e7:ec:4f:4f:db:26:b1:b1:54:f7:0f:fc:de:7c:03:d0:48: 1d:6d:d0:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOodyGHF538qKn91QC9mPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjUxMjIzMjIwMDM5WhcNMjUxMjI0MjIwMDM5WjAzMTEwLwYDVQQD Eyg2NTgwODFmM2E4MGEzMjE2MTU0Yjc0NjI2YjVhZTI3MjQ3Y2M3N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvinMibe6iDYD7pQ63rS1OZJl2P5V FY3PtmwTIkWDBdL5bResHkAQeGqMyMCAKxuurwER+uRykF9NLLFMaNKLmARrt1pl hzy8xudvS7X734e56e82LZk/HNR96P3sn+y9zO3BNP3CMxbkmd9bzlUJpiYzO+CW +bEuM3s3/YHpw1TDFmDoCH7z2kY4Xs9tDxYisRenuiqZfpduYRmPoJMkZl4JT9m0 mHr2n3rSOA4FTi19d+leDezl61fAAsgdyf2UzFYQbFn7pVn4mzx/wEL1PDqRkKpx SA+q08GcZPvW7EdjpcH9XPbZMeJPy9wI+Qq805md3CUGfmFnlXda8SbpfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWAgfOoCjIWFUt0Ymta4nJHzHffMB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkBiFEXn 4UK+/7971CgVcRa8H5KqqQcV1N2Yl3ryBsdLpfbAuT9XGUntiEJNl1+rz8bLjmhQ e8dQQwVDm3V+pGTZRF8DVSTIBsX/TMTYJ8SczDuAmTQRON1k6R4nivqGnUWvSDiC HRhEuIWaJHfdqMCmLpyI4sA776WVjgBo/6bEno1BFEekH43yaDLC0e4usQPS+Uj5 jE7xEaLiwhZm2qGjm1+LbKYWn2xGDt5134pJHNprgUn08sz6MhqRoNQsb0VE1WDT MABddY8P0+L2JJHKWOV9UapzPKYNGsujDJvXf4Rt0u338d8PcufsT0/bJrGxVPcP /N58A9BIHW3Qqw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:07 2025 by rpki-client