This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json) Hash identifier: gm3QCyNJ0JcWYhDIbWiELDXll5wfVntoa4Bs15j+PBE= Subject key identifier: 50:53:2F:5B:7C:16:AA:CA:A8:57:F8:E7:4F:3F:99:3E:A7:E1:8E:DF Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019C416AD64344ABDB247C2F16A0410A9847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft Manifest number: 1817 Signing time: Mon 09 Feb 2026 08:00:46 +0000 Manifest this update: Mon 09 Feb 2026 08:00:46 +0000 Manifest next update: Tue 10 Feb 2026 08:00:46 +0000 Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=) 2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: LiMWyc+UpPg188r+QpI9B5I9Ct1aZoG16sqZHKA9nhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:d6:43:44:ab:db:24:7c:2f:16:a0:41:0a:98:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Feb 9 08:00:46 2026 GMT Not After : Feb 10 08:00:46 2026 GMT Subject: CN=50532f5b7c16aacaa857f8e74f3f993ea7e18edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:e7:a4:82:1b:7f:1d:34:79:76:30:f5:e3: ad:d6:77:6d:2e:49:a2:2f:82:26:b2:15:9e:47:71: 96:13:c5:fc:d7:bf:4d:f2:b9:33:7a:44:12:6b:fd: b2:9a:ca:6f:23:9d:03:42:ea:c8:a6:54:b1:dc:da: 1f:c2:f8:79:1d:e6:bf:c8:61:38:37:19:6d:63:03: a2:b7:fc:d0:3e:44:22:13:fa:2a:29:03:21:06:1b: 9f:95:6c:6a:d7:1a:96:0a:e0:f6:64:e8:b7:33:2d: 09:18:b4:d5:fc:b4:06:63:a3:3d:46:90:f9:32:5e: 1e:9d:e8:38:b3:e6:8d:b6:51:dd:14:ae:7b:a6:73: 46:7c:5f:bb:74:cd:03:11:25:25:4c:8f:2b:cf:28: 0e:6a:a2:a1:e1:c5:2b:7d:ab:2c:53:74:cf:48:f3: d9:9f:63:6d:d2:83:b8:b3:ca:c8:10:20:8e:30:f2: c0:7a:7c:a3:14:cd:62:70:91:a8:35:3d:3d:b7:78: 28:74:7f:f5:3c:21:27:07:7b:ba:34:94:2b:46:67: 25:6c:e8:82:78:ae:c3:28:64:04:3e:42:69:11:ac: 01:11:07:b3:f6:c2:30:80:b9:cf:c4:cb:85:4a:17: 80:f5:91:ca:f5:c3:b1:14:14:4e:ef:f8:d7:ba:e9: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:53:2F:5B:7C:16:AA:CA:A8:57:F8:E7:4F:3F:99:3E:A7:E1:8E:DF X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0c:4d:9f:cd:76:d3:bf:c1:ba:e4:58:fe:19:f1:fe:b0:65: 3f:86:22:71:37:d2:bd:8e:89:0c:d9:8b:34:64:3a:67:40:15: ef:65:a7:73:81:05:a6:28:42:56:6f:bc:21:72:7e:41:18:d1: 1e:5a:bd:47:11:fe:d2:71:0d:39:ab:dc:e9:df:00:38:d5:0d: f3:11:e0:e5:57:c1:34:bb:dd:86:5d:3c:0c:0a:6d:a9:b2:9d: 74:46:c7:f4:a5:a0:b8:24:d3:49:a4:72:b1:b3:ce:56:e1:88: bb:8f:c5:fc:7e:0a:fd:af:81:49:6a:39:b3:51:9c:f9:99:f8: a6:8f:c7:53:fb:34:a4:62:c9:dc:94:21:9c:f3:f5:b7:c4:31: 8e:45:11:ff:59:42:b6:aa:17:23:40:f6:75:a3:e9:59:33:f4: 8e:bf:5f:da:15:c1:4a:d2:e0:b3:b0:72:04:2b:80:45:bd:92: a8:34:17:cb:5e:1a:ba:45:73:89:e4:fb:6a:03:42:62:f7:0d: 3a:4a:83:45:b5:af:77:d3:7a:49:b2:42:fb:e2:7d:74:71:b6: 7e:8a:45:1a:53:ca:3d:03:90:6e:4e:6e:d0:40:e4:41:0d:a3: 68:63:02:3a:c6:af:6d:b5:95:ac:d9:02:d0:08:c1:36:b6:e5: 45:c9:35:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBatZDRKvbJHwvFqBBCphHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjYwMjA5MDgwMDQ2WhcNMjYwMjEwMDgwMDQ2WjAzMTEwLwYDVQQD Eyg1MDUzMmY1YjdjMTZhYWNhYTg1N2Y4ZTc0ZjNmOTkzZWE3ZTE4ZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dXnpIIbfx00eXYw9eOt1ndtLkmi L4ImshWeR3GWE8X8179N8rkzekQSa/2ymspvI50DQurIplSx3Nofwvh5Hea/yGE4 NxltYwOit/zQPkQiE/oqKQMhBhuflWxq1xqWCuD2ZOi3My0JGLTV/LQGY6M9RpD5 Ml4eneg4s+aNtlHdFK57pnNGfF+7dM0DESUlTI8rzygOaqKh4cUrfassU3TPSPPZ n2Nt0oO4s8rIECCOMPLAenyjFM1icJGoNT09t3godH/1PCEnB3u6NJQrRmclbOiC eK7DKGQEPkJpEawBEQez9sIwgLnPxMuFSheA9ZHK9cOxFBRO7/jXuunzkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBTL1t8FqrKqFf4508/mT6n4Y7fMB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQxNn812 07/BuuRY/hnx/rBlP4YicTfSvY6JDNmLNGQ6Z0AV72Wnc4EFpihCVm+8IXJ+QRjR Hlq9RxH+0nENOavc6d8AONUN8xHg5VfBNLvdhl08DAptqbKddEbH9KWguCTTSaRy sbPOVuGIu4/F/H4K/a+BSWo5s1Gc+Zn4po/HU/s0pGLJ3JQhnPP1t8QxjkUR/1lC tqoXI0D2daPpWTP0jr9f2hXBStLgs7ByBCuARb2SqDQXy14aukVzieT7agNCYvcN OkqDRbWvd9N6SbJC++J9dHG2fopFGlPKPQOQbk5u0EDkQQ2jaGMCOsavbbWVrNkC 0AjBNrblRck1IQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:33 2026 by rpki-client