This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File:                     YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier:          hmV37djH+bxUaidMGoGyBivYuxhohurdq52mQl5x4zU=
Subject key identifier:   57:2D:57:C6:6E:E5:E6:FB:CC:2E:4B:B1:B3:F9:06:A6:8D:DF:AB:F7
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer:       /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial:       019AF23F6A41C7AC0E6B3F2D6287AD7A4EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number:          0B87
Signing time:             Sat 06 Dec 2025 06:00:33 +0000
Manifest this update:     Sat 06 Dec 2025 06:00:33 +0000
Manifest next update:     Sun 07 Dec 2025 06:00:33 +0000
Files and hashes:         1: P8hK1xx0uR9M_W5wlPbcjI1WZ6Q.roa (hash: SCdC0Do6rE7PvJaZA3lqj9Cb1JlbAfPHO9i2vBKpJo4=)
                          2: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
                          3: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: 340hmimID/Wxa/3YqGb1AamdlvrC0rIZnpciKwGtUaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:3f:6a:41:c7:ac:0e:6b:3f:2d:62:87:ad:7a:4e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
        Validity
            Not Before: Dec  6 06:00:33 2025 GMT
            Not After : Dec  7 06:00:33 2025 GMT
        Subject: CN=572d57c66ee5e6fbcc2e4bb1b3f906a68ddfabf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:55:9c:5c:1a:e7:2b:b1:42:25:1e:14:70:
                    19:19:ee:b3:72:45:90:09:e6:a2:88:2d:22:dd:43:
                    e2:f8:1b:48:27:ec:0c:fd:23:a8:db:15:49:7d:6f:
                    0f:76:2f:60:c9:34:55:4e:dc:c5:26:bb:30:3f:64:
                    aa:5e:01:39:42:b3:49:e2:9b:46:88:6e:35:86:6b:
                    2e:8f:28:27:3d:3f:65:f5:93:d2:ad:db:cd:1e:20:
                    d6:74:24:ca:74:79:d3:a9:f6:87:d3:db:a7:fb:7d:
                    53:41:3a:da:62:ef:f7:9a:af:d4:05:1b:84:7b:cf:
                    b8:ea:d9:d3:c7:94:9d:a0:07:1c:0a:91:ca:29:52:
                    ab:e6:05:29:c0:5b:bc:4c:ac:ef:d2:79:85:35:38:
                    6d:04:97:bc:a8:b2:43:6f:00:4f:ab:ca:bc:fe:8f:
                    48:c7:7c:19:36:90:dd:76:25:fb:b6:6d:61:30:4c:
                    40:2a:0e:5e:1b:2a:14:a4:f3:b4:f5:04:90:ed:96:
                    0f:09:dd:36:0a:61:63:13:66:27:1f:09:a8:c5:7c:
                    4b:65:4a:58:03:27:a3:37:a0:1a:d1:0b:8f:13:84:
                    b7:3a:e7:b0:02:d2:b8:e7:2b:42:af:86:47:b6:b7:
                    b8:a0:e1:c9:85:4c:e5:82:07:52:ff:43:6a:91:bc:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2D:57:C6:6E:E5:E6:FB:CC:2E:4B:B1:B3:F9:06:A6:8D:DF:AB:F7
            X509v3 Authority Key Identifier:
                keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         fb:70:aa:0e:e8:33:86:47:18:a2:31:52:91:05:a0:fc:a0:b9:
         78:d1:20:b4:9a:4f:41:a5:10:7b:87:64:4f:15:08:e0:12:c0:
         fd:14:43:e0:76:fd:4f:95:d3:4d:2a:6a:23:e9:06:29:f7:4f:
         c8:d3:8a:32:2d:3d:81:f6:8f:6f:28:d3:68:d3:68:c0:7f:43:
         47:ca:31:3e:36:c0:5d:5b:af:02:5e:93:9d:be:65:17:20:2f:
         ea:91:0d:12:67:46:f2:e7:e0:55:0b:de:e8:d1:01:5b:e8:45:
         19:fa:23:89:fa:f5:a7:8a:7a:ac:ec:3f:9e:7d:05:05:9e:47:
         0d:11:0d:27:63:b9:6a:b9:d5:54:f9:ae:9c:29:4b:a4:56:bf:
         45:03:57:85:8c:9d:dd:0a:4c:27:50:7b:3e:59:96:bc:bc:0b:
         8a:32:a5:92:85:d3:0f:82:18:bc:31:bf:d2:5f:49:26:6c:f7:
         fa:b7:04:3f:a3:d7:9c:52:6e:cb:e0:b1:c4:bc:22:aa:43:2b:
         50:28:84:52:92:76:77:3d:ef:c3:46:72:31:2b:9b:e2:1b:ed:
         c7:2f:7e:6c:74:30:44:9b:30:d6:19:0e:8a:83:d1:57:03:81:
         5a:9e:8b:73:4f:50:5b:fe:fc:6a:cc:77:d6:d9:78:0c:4f:73:
         bf:cb:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:31 2025 by rpki-client