This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json) Hash identifier: YTWtkZFGw/QRkUb9v8meq2GLZcYoBcPUDbTtQPT7GfI= Subject key identifier: EB:FC:31:3F:2B:15:07:9D:9E:FD:A4:A8:A7:E1:D3:15:A1:07:CB:9A Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019B3BD91B3ABB7DD033695EEBB835518E58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 13:00:42 +0000 Manifest this update: Sat 20 Dec 2025 13:00:42 +0000 Manifest next update: Sun 21 Dec 2025 13:00:42 +0000 Files and hashes: 1: 2_aedBK1LsY-Ma99ssfiCM4P-q4.roa (hash: 88IybdKTdXl1XFfeFL40irO5Mp2itxxV1uFlENMQvcY=) 2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: NqiXs64S4ckyCXJcC56DVJNVDG9s7/liaSaH+YuU+j4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:1b:3a:bb:7d:d0:33:69:5e:eb:b8:35:51:8e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Dec 20 13:00:42 2025 GMT Not After : Dec 21 13:00:42 2025 GMT Subject: CN=ebfc313f2b15079d9efda4a8a7e1d315a107cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:11:aa:94:61:56:3f:b8:ba:38:53:e0:7c: 70:4b:fa:28:2a:3c:bc:da:5d:4b:68:26:d7:95:61: dc:ed:ed:2a:55:8a:9a:80:e7:05:cf:23:63:00:d0: 58:57:99:be:01:ef:83:9f:8e:64:cd:4d:04:d8:83: 6f:33:b0:6c:30:04:bf:99:58:49:c9:46:d6:7e:36: 11:12:90:79:d2:f1:b8:a0:37:99:e7:b0:22:17:63: 22:ee:c9:15:14:29:ba:d5:10:02:ff:d5:f2:72:b4: 6f:68:72:53:80:48:70:c0:39:69:81:71:ae:2c:5e: f7:97:b0:c2:d2:cb:75:71:bf:90:18:df:e8:27:42: 77:d7:e2:e3:f6:2c:c5:ce:26:bd:53:f3:eb:37:ac: cd:78:99:88:52:c4:62:a0:09:58:46:62:c3:a4:90: 77:52:f4:05:e7:61:ab:1c:5a:be:25:ab:4f:cb:be: c2:a5:a8:e7:fa:01:dd:fa:cb:6c:84:6b:ce:50:b4: 5f:ca:93:c4:11:f9:81:df:a7:b9:55:d7:2b:42:5c: cf:f5:33:75:5a:bc:eb:ae:ce:9b:b4:1c:c3:6a:e6: b8:8d:a7:27:51:ad:f8:67:83:f0:3a:a5:8e:47:4b: 36:10:68:62:df:86:7d:a3:45:79:44:11:d5:0f:77: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FC:31:3F:2B:15:07:9D:9E:FD:A4:A8:A7:E1:D3:15:A1:07:CB:9A X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6d:17:95:92:f4:c7:90:c8:73:1e:18:86:59:8c:89:2b:17: 47:f9:e5:6e:20:32:e0:8a:03:c8:96:02:21:d9:da:41:e9:77: 2b:84:b9:99:20:4e:9f:b5:e4:5e:e6:b7:47:9a:c8:96:24:6b: 25:2c:e5:fc:a0:45:bf:10:d8:81:5c:a3:10:04:d7:4f:c4:2c: 8c:61:48:db:a1:38:61:1e:a5:67:44:e3:50:b3:49:d5:8f:f4: c2:26:37:ed:b8:71:00:bc:57:28:e5:64:82:4e:51:23:cb:ab: 9f:fa:b1:45:73:67:1c:53:7b:7e:65:80:d9:b3:ec:a2:73:23: ea:36:e2:ba:c4:1f:32:f8:65:c1:4d:7f:8f:18:7f:da:0a:62: ac:4e:49:a9:4e:30:d2:eb:67:e6:f8:18:89:7e:b6:81:fe:ca: 51:b0:2c:74:fd:83:b9:2b:fa:d0:86:f0:94:8a:f2:4d:03:eb: 42:9d:d8:a6:7f:38:b7:9f:9b:a2:47:32:98:13:bd:dc:db:fa: f7:44:ae:84:a7:7e:d9:4f:55:2a:33:ba:78:5e:89:46:ae:d8: 02:8e:18:d3:85:19:ba:f6:8d:9b:68:ba:dc:0c:d6:eb:f2:af: 73:13:0d:88:c4:32:76:6d:6e:75:50:7d:fe:cc:bc:22:90:e1: 86:fc:20:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Rs6u33QM2le67g1UY5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjUxMjIwMTMwMDQyWhcNMjUxMjIxMTMwMDQyWjAzMTEwLwYDVQQD EyhlYmZjMzEzZjJiMTUwNzlkOWVmZGE0YThhN2UxZDMxNWExMDdjYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX4RqpRhVj+4ujhT4HxwS/ooKjy8 2l1LaCbXlWHc7e0qVYqagOcFzyNjANBYV5m+Ae+Dn45kzU0E2INvM7BsMAS/mVhJ yUbWfjYREpB50vG4oDeZ57AiF2Mi7skVFCm61RAC/9XycrRvaHJTgEhwwDlpgXGu LF73l7DC0st1cb+QGN/oJ0J31+Lj9izFzia9U/PrN6zNeJmIUsRioAlYRmLDpJB3 UvQF52GrHFq+JatPy77Cpajn+gHd+stshGvOULRfypPEEfmB36e5VdcrQlzP9TN1 Wrzrrs6btBzDaua4jacnUa34Z4PwOqWOR0s2EGhi34Z9o0V5RBHVD3cAPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv8MT8rFQednv2kqKfh0xWhB8uaMB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAim0XlZL0 x5DIcx4YhlmMiSsXR/nlbiAy4IoDyJYCIdnaQel3K4S5mSBOn7XkXua3R5rIliRr JSzl/KBFvxDYgVyjEATXT8QsjGFI26E4YR6lZ0TjULNJ1Y/0wiY37bhxALxXKOVk gk5RI8urn/qxRXNnHFN7fmWA2bPsonMj6jbiusQfMvhlwU1/jxh/2gpirE5JqU4w 0utn5vgYiX62gf7KUbAsdP2DuSv60IbwlIryTQPrQp3Ypn84t5+bokcymBO93Nv6 90SuhKd+2U9VKjO6eF6JRq7YAo4Y04UZuvaNm2i63AzW6/KvcxMNiMQydm1udVB9 /sy8IpDhhvwgbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:18:00 2025 by rpki-client