This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json) Hash identifier: lZztia8mP2TP84+toJZO3nwREg4yeFcYdgtAPDbNKP8= Subject key identifier: 38:57:7E:B0:DE:16:09:A9:1B:9F:FF:BA:3C:D9:BA:EB:1A:D5:46:1F Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Certificate serial: 019B1CF2E5877029357F73C112F2AAD0586F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft Manifest number: 177F Signing time: Sun 14 Dec 2025 13:00:38 +0000 Manifest this update: Sun 14 Dec 2025 13:00:38 +0000 Manifest next update: Mon 15 Dec 2025 13:00:38 +0000 Files and hashes: 1: 2_aedBK1LsY-Ma99ssfiCM4P-q4.roa (hash: 88IybdKTdXl1XFfeFL40irO5Mp2itxxV1uFlENMQvcY=) 2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: d9WeCJW2+/iXjVJmDVz8vJic4YxMmtccczfAFEJHz9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f2:e5:87:70:29:35:7f:73:c1:12:f2:aa:d0:58:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9 Validity Not Before: Dec 14 13:00:38 2025 GMT Not After : Dec 15 13:00:38 2025 GMT Subject: CN=38577eb0de1609a91b9fffba3cd9baeb1ad5461f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:f4:35:a2:af:f6:b8:96:87:71:f2:4c:88: a9:d6:40:ff:78:25:57:48:f4:07:fa:2b:34:37:01: 8b:f2:86:32:21:6b:33:37:79:ed:c0:46:9e:28:28: 5f:71:89:58:46:25:47:2f:c8:ec:36:4e:45:42:e3: 80:72:5c:f0:42:6f:0b:96:aa:c4:a8:9e:0d:f6:2d: 90:91:85:a0:28:71:2f:a2:d0:bc:05:7d:23:88:63: 49:ff:23:04:72:56:6e:0d:55:cb:b1:46:88:3f:52: 31:cd:63:44:08:bc:02:32:f6:33:33:57:50:8e:a6: ee:88:aa:3c:04:3c:f4:d4:91:1b:f9:2e:87:33:b9: ac:9b:06:03:77:65:c7:d2:b1:4f:4e:66:5e:04:e7: 20:2a:3f:8b:8a:04:47:69:12:ce:69:95:e0:cd:a7: f3:d6:b3:c5:60:ff:10:42:10:05:13:32:52:87:c6: ad:30:8c:20:c7:9c:7f:63:d6:a5:6e:3e:d0:1f:54: 96:69:6f:c7:ed:d9:7b:f4:f1:f9:cd:35:5f:4b:9b: 49:4c:94:5d:f5:1d:3c:c3:44:1a:3c:ab:92:6c:eb: c1:bf:db:0a:42:e2:1a:2b:d6:b2:9d:e0:8a:41:37: 29:de:e1:3b:c0:2d:72:49:95:10:68:48:5b:87:b7: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:7E:B0:DE:16:09:A9:1B:9F:FF:BA:3C:D9:BA:EB:1A:D5:46:1F X509v3 Authority Key Identifier: keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:cb:5b:a9:07:ec:40:b6:a6:54:96:e9:9b:22:7f:aa:67:b0: 90:bf:64:84:24:dd:7e:7e:62:cd:c7:69:09:a9:b6:a9:32:37: 27:ab:93:5f:e9:32:de:49:c9:59:84:45:48:03:2a:b5:90:7e: 81:66:99:82:8f:0a:ef:a6:85:7b:cd:9e:ef:86:e5:9a:cb:a5: 29:54:23:f3:c9:68:0f:de:91:d9:63:77:d1:14:0a:b7:57:7c: 4e:d7:09:50:aa:37:c9:34:e1:bd:4e:36:8e:98:53:83:8b:ae: f7:c7:73:1c:e7:0d:ef:f6:4c:f3:49:0d:12:e0:ac:6d:a3:58: 6c:24:6a:62:e7:d1:18:f2:33:87:c5:68:d2:65:f3:51:18:3c: b2:ce:7e:0c:6f:05:68:15:71:b2:cf:45:62:02:54:98:bd:cc: 8d:4e:98:d3:71:d4:59:52:5d:d6:e5:5b:b1:28:2f:43:88:d1: bc:76:0c:04:56:e9:32:b1:6a:b4:50:aa:f8:17:26:29:de:32: f9:0a:d8:61:32:66:29:47:70:c0:6c:c2:35:a2:5c:b9:f4:7a: f4:bc:3d:b2:a7:47:38:91:0d:c7:a4:8f:96:54:29:4f:da:bf: b8:0e:55:e9:88:e6:c8:ad:ee:76:09:62:18:b7:6b:e0:73:f3: b1:8f:0c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8uWHcCk1f3PBEvKq0FhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm MmY5YTkwHhcNMjUxMjE0MTMwMDM4WhcNMjUxMjE1MTMwMDM4WjAzMTEwLwYDVQQD EygzODU3N2ViMGRlMTYwOWE5MWI5ZmZmYmEzY2Q5YmFlYjFhZDU0NjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpD0NaKv9riWh3HyTIip1kD/eCVX SPQH+is0NwGL8oYyIWszN3ntwEaeKChfcYlYRiVHL8jsNk5FQuOAclzwQm8LlqrE qJ4N9i2QkYWgKHEvotC8BX0jiGNJ/yMEclZuDVXLsUaIP1IxzWNECLwCMvYzM1dQ jqbuiKo8BDz01JEb+S6HM7msmwYDd2XH0rFPTmZeBOcgKj+LigRHaRLOaZXgzafz 1rPFYP8QQhAFEzJSh8atMIwgx5x/Y9albj7QH1SWaW/H7dl79PH5zTVfS5tJTJRd 9R08w0QaPKuSbOvBv9sKQuIaK9ayneCKQTcp3uE7wC1ySZUQaEhbh7dXowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhXfrDeFgmpG5//ujzZuusa1UYfMB8GA1UdIwQY MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4 LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8tbqQfs QLamVJbpmyJ/qmewkL9khCTdfn5izcdpCam2qTI3J6uTX+ky3knJWYRFSAMqtZB+ gWaZgo8K76aFe82e74blmsulKVQj88loD96R2WN30RQKt1d8TtcJUKo3yTThvU42 jphTg4uu98dzHOcN7/ZM80kNEuCsbaNYbCRqYufRGPIzh8Vo0mXzURg8ss5+DG8F aBVxss9FYgJUmL3MjU6Y03HUWVJd1uVbsSgvQ4jRvHYMBFbpMrFqtFCq+BcmKd4y +QrYYTJmKUdwwGzCNaJcufR69Lw9sqdHOJENx6SPllQpT9q/uA5V6YjmyK3udgli GLdr4HPzsY8MWw== -----END CERTIFICATE-----Generated at Sun Dec 14 22:00:27 2025 by rpki-client