This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json) Hash identifier: K4cYAhC06gtNbczZncpWV43UN8/LKklguzHZ604e8QE= Subject key identifier: 19:44:79:51:5A:5D:8D:FA:C9:62:51:E7:2C:9A:E3:E5:31:F7:99:B7 Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019AF27701B4699277F9D151BB05A97ADB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: 2_aedBK1LsY-Ma99ssfiCM4P-q4.roa (hash: 88IybdKTdXl1XFfeFL40irO5Mp2itxxV1uFlENMQvcY=) 2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: /T6Z8VJk4VwZMnGPAXwwlLe7/s+Mei4zHUtqEK2FDT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:01:b4:69:92:77:f9:d1:51:bb:05:a9:7a:db:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=194479515a5d8dfac96251e72c9ae3e531f799b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a9:58:b8:52:08:3b:44:8c:1a:ad:ec:3d:34: 62:41:5e:67:85:09:2a:c9:12:7b:da:01:fb:e3:ac: 90:71:2a:f6:83:5e:66:a1:01:6c:a2:d4:78:88:93: 6d:8e:87:74:9a:cb:68:c0:f2:01:8a:f3:bd:bf:61: b9:1e:62:44:28:80:67:24:c0:67:a6:c0:df:5b:66: 90:6b:45:6b:22:ed:7c:8c:26:56:f8:ad:c3:8e:67: a9:54:77:f6:9e:ea:8b:5e:0a:f0:7d:e9:13:28:10: 9c:56:00:21:21:dd:66:99:b4:f8:87:bc:fa:cd:2d: de:34:30:55:2d:ed:d9:69:17:59:4c:bc:d3:4a:db: 2c:65:5f:9c:d4:53:c5:ea:ac:c1:ea:96:4a:59:1c: 7b:06:b4:48:eb:b4:18:55:b4:d1:b3:af:77:e1:b3: c6:ee:ba:25:a4:22:23:65:c4:e7:0e:c7:8f:bd:9d: 4f:7c:07:51:6f:9e:97:51:12:51:09:62:bb:33:3f: 83:a7:f2:fe:3a:4c:b4:f6:19:4f:72:16:4a:3f:dc: b8:f4:74:57:43:32:95:9c:a6:eb:36:ae:c4:09:b5: 94:a5:75:49:03:95:9f:53:a4:0b:a4:c0:c2:b1:3a: 85:b0:1c:c8:44:b9:e6:08:e1:43:f1:9d:1a:87:d6: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:44:79:51:5A:5D:8D:FA:C9:62:51:E7:2C:9A:E3:E5:31:F7:99:B7 X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d2:58:13:a6:4b:5d:2b:00:38:a1:8d:89:e0:c7:e4:33:59: c5:de:c4:0c:b6:67:be:35:a6:fb:77:2f:a1:0b:f3:2a:26:73: af:6a:19:fc:60:6c:c2:2d:ea:5b:79:8b:4a:88:f8:4d:f7:db: bb:79:80:d3:22:8a:1b:2e:c5:49:06:0b:c3:a8:59:0c:67:21: 2a:05:b0:0b:a7:76:26:30:db:54:70:bd:19:51:13:5c:7e:dd: 3f:70:69:11:f6:eb:cf:cc:c5:b0:c7:9d:10:29:af:92:e3:86: f6:90:19:28:53:87:c6:e1:32:79:77:de:27:3b:f3:a9:9a:c0: 00:b2:75:5d:eb:6e:e3:eb:4e:a3:e0:f4:f6:0d:28:1d:e0:26: cf:24:68:59:f6:5c:15:3d:74:b5:ff:b0:1e:55:f0:09:c3:5b: ae:35:c7:43:60:c9:35:70:c9:b5:61:8d:94:13:51:b9:fb:c2: 8a:a5:b7:22:35:3d:68:d7:55:e5:92:9d:ec:e9:18:6a:7b:ff: 2a:f2:0a:b6:79:62:ed:f9:bb:61:a9:dc:26:80:76:8c:aa:f4: 74:ad:bf:9d:42:1d:2c:15:a2:df:a1:21:26:5e:68:81:f2:90: 59:6e:0a:05:00:ec:fa:3d:02:64:60:b9:51:71:df:96:36:93: c3:2a:01:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwG0aZJ3+dFRuwWpetufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EygxOTQ0Nzk1MTVhNWQ4ZGZhYzk2MjUxZTcyYzlhZTNlNTMxZjc5OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8alYuFIIO0SMGq3sPTRiQV5nhQkq yRJ72gH746yQcSr2g15moQFsotR4iJNtjod0mstowPIBivO9v2G5HmJEKIBnJMBn psDfW2aQa0VrIu18jCZW+K3DjmepVHf2nuqLXgrwfekTKBCcVgAhId1mmbT4h7z6 zS3eNDBVLe3ZaRdZTLzTStssZV+c1FPF6qzB6pZKWRx7BrRI67QYVbTRs6934bPG 7rolpCIjZcTnDsePvZ1PfAdRb56XURJRCWK7Mz+Dp/L+Oky09hlPchZKP9y49HRX QzKVnKbrNq7ECbWUpXVJA5WfU6QLpMDCsTqFsBzIRLnmCOFD8Z0ah9aolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlEeVFaXY36yWJR5yya4+Ux95m3MB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNJYE6ZL XSsAOKGNieDH5DNZxd7EDLZnvjWm+3cvoQvzKiZzr2oZ/GBswi3qW3mLSoj4Tffb u3mA0yKKGy7FSQYLw6hZDGchKgWwC6d2JjDbVHC9GVETXH7dP3BpEfbrz8zFsMed ECmvkuOG9pAZKFOHxuEyeXfeJzvzqZrAALJ1Xetu4+tOo+D09g0oHeAmzyRoWfZc FT10tf+wHlXwCcNbrjXHQ2DJNXDJtWGNlBNRufvCiqW3IjU9aNdV5ZKd7OkYanv/ KvIKtnli7fm7YancJoB2jKr0dK2/nUIdLBWi36EhJl5ogfKQWW4KBQDs+j0CZGC5 UXHfljaTwyoB6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:27 2025 by rpki-client