This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json) Hash identifier: 0UVuE80tb5LkdPK3TyV991ogMStWHtnN9VDlSqE2pxg= Subject key identifier: 42:38:F4:89:7A:34:F8:F4:FD:6D:3F:61:EF:B7:BD:D7:57:E3:6F:CB Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019BF61A158AD5C86EB9559C4F71AE2394AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 17:01:03 +0000 Manifest this update: Sun 25 Jan 2026 17:01:03 +0000 Manifest next update: Mon 26 Jan 2026 17:01:03 +0000 Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=) 2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: A7DE+aO3oAmbuA8tYgYZnAeJVDnnFaPh1f0/XjsPMnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:15:8a:d5:c8:6e:b9:55:9c:4f:71:ae:23:94:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Jan 25 17:01:03 2026 GMT Not After : Jan 26 17:01:03 2026 GMT Subject: CN=4238f4897a34f8f4fd6d3f61efb7bdd757e36fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:f7:bf:fa:d6:c2:42:d4:92:e7:0b:95:0d: 2a:d8:48:2a:f6:8f:76:32:37:80:c5:a1:48:51:cc: 2d:37:04:46:31:7f:2a:b7:43:fe:39:09:95:4a:f3: 68:6c:59:e8:4e:1c:c3:5d:33:7c:f0:03:81:50:bb: 56:ec:9c:3b:c9:36:12:04:39:d4:c4:2e:dd:6c:00: 0c:e1:36:c0:be:bd:c4:13:17:82:f7:89:34:5b:0d: 1e:4c:89:0c:6c:b4:a7:eb:55:35:8b:2f:12:02:9d: 98:62:a1:21:5c:1f:aa:83:72:19:08:f2:9a:19:ad: 67:db:cc:03:33:38:32:51:5f:d1:9f:e4:71:1e:83: 6e:65:b1:b9:39:37:d4:c8:6b:0b:12:69:68:2a:ee: c6:2a:ec:4d:dd:8b:65:d3:21:72:f0:44:24:c6:de: 2f:ef:fc:c9:5d:e6:83:c8:bf:a9:44:45:22:ef:f4: c4:d0:dc:da:32:61:55:a1:25:ec:d4:cb:51:44:60: dc:14:46:41:98:d2:c9:c6:ce:42:f2:3c:a8:d3:a6: 58:b2:e5:e2:64:cd:94:0f:d6:6b:73:e0:10:b4:e4: 7f:68:1c:9f:72:19:06:f6:7a:0a:1e:45:1b:e2:80: b7:5f:5f:88:c8:2c:85:d9:b3:1f:6f:f8:d4:18:e9: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:F4:89:7A:34:F8:F4:FD:6D:3F:61:EF:B7:BD:D7:57:E3:6F:CB X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:70:cf:6b:72:95:59:59:fa:7b:d8:94:f7:30:bb:c2:bd:84: a2:ac:3c:75:37:91:95:38:00:73:4c:01:d0:a4:b4:90:d0:d1: 35:3b:14:f5:d3:1a:73:46:9d:f9:30:1d:6c:46:3e:fb:f4:63: 8b:f9:df:c5:7e:bd:47:30:83:4e:a3:3d:72:d8:52:69:d7:14: 71:27:19:1c:9d:33:1d:11:4d:18:3b:d6:e6:7c:bb:35:fd:f5: 85:d5:24:77:50:c6:1b:af:06:06:27:97:e8:fa:18:f2:25:82: 6e:cb:a2:1d:03:3d:d9:20:10:74:b8:cb:c3:e7:19:07:9d:79: aa:c5:67:d8:3c:fa:a6:ed:f9:39:c1:3b:07:7b:93:99:e8:cf: 74:f7:13:4b:33:c0:51:b1:27:93:cb:f9:6e:fd:db:21:2e:dd: fa:82:31:e6:35:96:f8:15:97:cc:59:80:c3:c6:79:23:bf:59: a3:ad:db:bc:ce:e3:16:7c:bf:a8:b1:4d:15:08:fb:2b:17:ce: 6a:95:83:68:b9:88:1d:05:ae:23:8a:c2:2b:62:8b:90:9e:3d: c8:ed:57:eb:6e:5f:3a:a3:7b:da:84:9d:3f:f0:9e:a0:7b:a5: 18:be:15:a2:fe:fb:4f:3e:39:26:7c:b8:c6:74:ea:e6:b9:30: 74:bf:34:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GhWK1chuuVWcT3GuI5SqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjYwMTI1MTcwMTAzWhcNMjYwMTI2MTcwMTAzWjAzMTEwLwYDVQQD Eyg0MjM4ZjQ4OTdhMzRmOGY0ZmQ2ZDNmNjFlZmI3YmRkNzU3ZTM2ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1v3v/rWwkLUkucLlQ0q2Egq9o92 MjeAxaFIUcwtNwRGMX8qt0P+OQmVSvNobFnoThzDXTN88AOBULtW7Jw7yTYSBDnU xC7dbAAM4TbAvr3EExeC94k0Ww0eTIkMbLSn61U1iy8SAp2YYqEhXB+qg3IZCPKa Ga1n28wDMzgyUV/Rn+RxHoNuZbG5OTfUyGsLEmloKu7GKuxN3Ytl0yFy8EQkxt4v 7/zJXeaDyL+pREUi7/TE0NzaMmFVoSXs1MtRRGDcFEZBmNLJxs5C8jyo06ZYsuXi ZM2UD9Zrc+AQtOR/aByfchkG9noKHkUb4oC3X1+IyCyF2bMfb/jUGOljcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI49Il6NPj0/W0/Ye+3vddX42/LMB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnDPa3KV WVn6e9iU9zC7wr2Eoqw8dTeRlTgAc0wB0KS0kNDRNTsU9dMac0ad+TAdbEY++/Rj i/nfxX69RzCDTqM9cthSadcUcScZHJ0zHRFNGDvW5ny7Nf31hdUkd1DGG68GBieX 6PoY8iWCbsuiHQM92SAQdLjLw+cZB515qsVn2Dz6pu35OcE7B3uTmejPdPcTSzPA UbEnk8v5bv3bIS7d+oIx5jWW+BWXzFmAw8Z5I79Zo63bvM7jFny/qLFNFQj7KxfO apWDaLmIHQWuI4rCK2KLkJ49yO1X625fOqN72oSdP/CeoHulGL4Vov77Tz45Jny4 xnTq5rkwdL80mA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:02 2026 by rpki-client