This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File:                     YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier:          6enuFqX2Nc0Lq1Z5SqTNoUbr5cN0foiwriKb6eCNxBk=
Subject key identifier:   8D:48:2E:8E:D3:D8:1E:C2:56:31:99:77:EE:9C:75:9B:57:B4:78:24
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer:       /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial:       019BB10260A455156A1FD9F7257B528633F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number:          0BEA
Signing time:             Mon 12 Jan 2026 07:01:21 +0000
Manifest this update:     Mon 12 Jan 2026 07:01:21 +0000
Manifest next update:     Tue 13 Jan 2026 07:01:21 +0000
Files and hashes:         1: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: HNSb+QKkiUC1jCNX3ys8nCZ3jIla7Fph4UMBx0JIFsk=)
                          2: caBIae9CEHVeobDlhrsIwWgLPPE.roa (hash: ag5394iSdE8oZzWf2j6ilocmezqzkT0RpT4UFS5WgGg=)
                          3: uT_DZnppDbYyGpbRufk93-G-qXc.roa (hash: DhGqIEL5HRNKYGVeysWOoXm6c538KCGb6awXVVDvM3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b1:02:60:a4:55:15:6a:1f:d9:f7:25:7b:52:86:33:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
        Validity
            Not Before: Jan 12 07:01:21 2026 GMT
            Not After : Jan 13 07:01:21 2026 GMT
        Subject: CN=8d482e8ed3d81ec256319977ee9c759b57b47824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:14:04:9a:c8:f5:e5:64:bb:af:b7:a9:2d:
                    f4:70:d4:03:ce:08:46:64:a9:b4:5a:c8:f8:a3:47:
                    7b:99:6f:0f:8b:3b:1f:cc:2e:05:00:97:22:4d:e3:
                    fd:43:7e:cd:28:0d:c2:ed:5e:5b:84:76:6c:15:d5:
                    d2:80:6f:3e:2c:65:dd:c5:1c:a2:e7:5d:3d:41:7b:
                    c1:c9:a1:e9:5e:88:c6:8c:1a:f2:de:23:4c:b1:02:
                    26:0e:61:51:88:4d:65:6c:45:0e:cf:cf:a4:1b:0f:
                    80:bf:f3:bc:ae:8d:8c:8a:2e:9e:2e:d9:ae:ea:23:
                    ea:d7:3a:ed:20:ba:4a:eb:5a:0a:68:54:4a:6c:f2:
                    30:f4:85:e0:22:56:88:0f:02:73:4b:bb:c5:e6:fb:
                    15:86:a0:47:30:6e:66:c6:85:9d:a6:3f:50:90:d3:
                    8b:75:3a:20:7f:ec:a6:88:72:ed:30:18:b2:4f:d3:
                    bd:06:c9:14:30:17:ff:29:48:19:20:40:6d:b6:72:
                    3c:30:3a:04:ab:b2:82:b3:a8:d9:8d:57:41:51:2d:
                    2e:d0:3c:76:c0:f8:7e:e1:8a:d3:5b:d0:84:5d:bb:
                    43:28:75:d0:a0:4f:ed:30:70:4b:44:20:24:f0:dc:
                    b8:7e:13:23:b7:f2:82:28:b8:a8:85:a4:55:83:ae:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:2E:8E:D3:D8:1E:C2:56:31:99:77:EE:9C:75:9B:57:B4:78:24
            X509v3 Authority Key Identifier:
                keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         fd:97:14:44:c8:d9:d7:cf:26:66:39:f9:80:98:4f:65:a9:21:
         44:e4:d6:3b:62:6e:8f:7e:97:ca:e7:be:e1:f1:38:56:26:fd:
         c7:c1:43:a7:8b:10:b4:20:f9:1f:d3:38:6e:01:c0:e6:c2:78:
         90:4f:ba:70:72:e9:c1:67:fc:83:2a:44:4a:42:e3:53:ee:88:
         13:9a:63:ec:81:80:8d:fa:0e:90:65:4a:20:a0:b3:67:6c:e5:
         eb:37:b3:7f:95:95:f4:c3:60:2c:62:ec:ac:7c:fd:ff:13:f8:
         5e:34:4d:c2:81:05:5d:85:2a:e0:fd:b4:43:74:39:69:12:d7:
         80:b8:d9:db:4c:15:61:68:e6:d9:ce:79:b5:2e:95:a4:d1:e0:
         b9:da:36:16:9d:66:f6:da:7b:d3:58:e9:3f:ef:43:b3:60:57:
         55:09:f6:b8:43:06:b1:99:4f:ac:eb:a6:fb:45:25:67:45:83:
         14:a9:b1:ba:2c:5d:1d:7b:a6:73:3c:45:66:d7:61:ae:33:6c:
         17:30:79:2a:f9:c7:55:e7:8b:17:10:1e:a2:f8:af:8d:80:c2:
         57:68:57:e0:3a:f9:03:0d:18:b6:62:53:f3:af:15:49:53:55:
         67:08:69:32:56:b0:f5:e3:93:13:8e:97:cb:63:53:68:e4:bb:
         b6:a1:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:57:20 2026 by rpki-client