This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File:                     YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier:          R0OI51Q0oPQRDy9pNCmbZNEeWoZc2nKFjBIm9cZkNoQ=
Subject key identifier:   7B:F8:AD:75:1F:1B:F5:8F:48:9C:B7:3C:F0:21:DC:BD:9D:4C:37:34
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer:       /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial:       019AF42E3187191915E6739A5330B8846C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number:          0B88
Signing time:             Sat 06 Dec 2025 15:00:59 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:59 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:59 +0000
Files and hashes:         1: P8hK1xx0uR9M_W5wlPbcjI1WZ6Q.roa (hash: SCdC0Do6rE7PvJaZA3lqj9Cb1JlbAfPHO9i2vBKpJo4=)
                          2: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
                          3: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: oudkPw44/lsCVHTF2p2uovhFNglQP2QvcVwqJfoida0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:2e:31:87:19:19:15:e6:73:9a:53:30:b8:84:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
        Validity
            Not Before: Dec  6 15:00:59 2025 GMT
            Not After : Dec  7 15:00:59 2025 GMT
        Subject: CN=7bf8ad751f1bf58f489cb73cf021dcbd9d4c3734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:7e:93:68:ee:7a:f2:1d:ca:ad:ec:2e:7f:
                    0f:a5:04:a2:94:53:85:62:8c:ec:dc:b4:b7:9e:7d:
                    e2:47:c5:6b:79:6b:1e:b0:c3:17:8c:d4:e4:75:f9:
                    b0:db:cd:5f:84:73:a6:d9:62:ee:4f:d3:4a:45:d0:
                    c6:80:6d:96:a5:46:e6:8b:ac:0d:85:0e:ff:18:e3:
                    fb:2d:65:c8:03:0c:60:59:c3:f0:39:3e:b9:cc:01:
                    7f:db:ba:e5:34:bc:54:54:30:37:9e:e7:64:35:3d:
                    f2:f4:01:2c:3c:25:88:5a:04:4b:eb:d4:43:1c:65:
                    a7:db:cd:1f:bd:2d:a4:1f:c3:f4:af:da:79:05:52:
                    38:83:6c:0e:2d:74:6d:23:51:1e:a8:93:ca:a9:4e:
                    14:60:15:8b:70:57:6c:e4:ad:73:0c:18:8c:b2:be:
                    13:31:5a:63:33:15:4c:ee:4f:af:6c:ae:8b:a1:75:
                    49:22:f6:79:7e:6e:44:8f:e9:69:f9:3f:f6:a7:e2:
                    e8:e6:69:68:9e:1c:1b:54:36:bd:df:f6:50:ad:33:
                    7d:25:e5:7e:c6:d4:ce:61:f1:d9:e5:06:a2:42:47:
                    c1:e8:ed:60:bc:0f:f8:b9:64:14:a3:93:08:a9:9d:
                    e9:7d:53:90:72:c7:7b:ca:df:52:06:df:fc:5b:c3:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F8:AD:75:1F:1B:F5:8F:48:9C:B7:3C:F0:21:DC:BD:9D:4C:37:34
            X509v3 Authority Key Identifier:
                keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:a7:04:10:d3:c5:b3:93:1e:68:98:ac:b7:14:7c:c5:a5:
         16:18:1f:6d:5a:ac:02:15:38:ce:db:43:88:0e:a7:79:71:9e:
         d5:ce:34:b9:4c:c2:b4:4a:5a:91:9a:6b:20:2f:ff:59:82:45:
         d5:27:9c:62:55:60:f8:1f:f6:8c:e1:83:86:be:9f:c5:f2:a1:
         f1:93:f4:8c:84:fd:61:d6:69:9c:2a:0e:18:f9:3a:8c:db:87:
         05:bf:49:bb:fc:00:8a:e1:76:bf:10:8d:71:f3:ac:35:b9:1a:
         b1:45:ab:38:48:a9:51:79:30:7d:0c:10:2f:47:f6:9c:b5:88:
         a1:2f:86:af:57:5d:d7:45:0b:fe:98:35:95:ff:df:eb:78:b0:
         b6:16:09:95:05:91:f8:10:d0:56:7d:b9:dc:79:37:51:f8:08:
         23:39:f7:b3:3b:ed:da:dd:8e:61:8b:a7:2b:7b:a3:f1:68:24:
         26:92:98:f2:30:13:ea:fa:a7:3a:6f:ac:7f:7b:ec:b1:d5:71:
         94:35:22:16:34:82:62:b9:dc:c5:ff:38:2a:df:d2:ff:99:f9:
         0a:df:6c:5a:1b:78:72:ed:1c:88:82:0c:ae:9f:a7:d4:97:ba:
         b6:ae:43:5e:a5:77:fe:73:af:b9:04:1e:fd:a7:be:eb:f8:5d:
         22:68:a7:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr0LjGHGRkV5nOaUzC4hGxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmI5YmEyMTllMzYyYjJhODI3NzIwYTA1YzQzYzdkMWMx
ZmE4ZWYwHhcNMjUxMjA2MTUwMDU5WhcNMjUxMjA3MTUwMDU5WjAzMTEwLwYDVQQD
Eyg3YmY4YWQ3NTFmMWJmNThmNDg5Y2I3M2NmMDIxZGNiZDlkNGMzNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzx+k2juevIdyq3sLn8PpQSilFOF
Yozs3LS3nn3iR8VreWsesMMXjNTkdfmw281fhHOm2WLuT9NKRdDGgG2WpUbmi6wN
hQ7/GOP7LWXIAwxgWcPwOT65zAF/27rlNLxUVDA3nudkNT3y9AEsPCWIWgRL69RD
HGWn280fvS2kH8P0r9p5BVI4g2wOLXRtI1EeqJPKqU4UYBWLcFds5K1zDBiMsr4T
MVpjMxVM7k+vbK6LoXVJIvZ5fm5Ej+lp+T/2p+Lo5mlonhwbVDa93/ZQrTN9JeV+
xtTOYfHZ5QaiQkfB6O1gvA/4uWQUo5MIqZ3pfVOQcsd7yt9SBt/8W8O8YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv4rXUfG/WPSJy3PPAh3L2dTDc0MB8GA1UdIwQY
MBaAFGBrm6IZ42KyqCdyCgXEPH0cH6jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTIt
YjRmYjU3MDhkYjE1LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81YTBhZjgtMjRiMi00MTU0LWE0MTItYjRmYjU3MDhkYjE1
LzEvWUd1Ym9obmpZcktvSjNJS0JjUThmUndmcU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsqnBBDT
xbOTHmiYrLcUfMWlFhgfbVqsAhU4zttDiA6neXGe1c40uUzCtEpakZprIC//WYJF
1SecYlVg+B/2jOGDhr6fxfKh8ZP0jIT9YdZpnCoOGPk6jNuHBb9Ju/wAiuF2vxCN
cfOsNbkasUWrOEipUXkwfQwQL0f2nLWIoS+Gr1dd10UL/pg1lf/f63iwthYJlQWR
+BDQVn253Hk3UfgIIzn3szvt2t2OYYunK3uj8WgkJpKY8jAT6vqnOm+sf3vssdVx
lDUiFjSCYrncxf84Kt/S/5n5Ct9sWht4cu0ciIIMrp+n1Je6tq5DXqV3/nOvuQQe
/ae+6/hdImin8A==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:18:07 2025 by rpki-client