This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File:                     yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier:          tJigNEf2cdsDn4ZdLxrrcOWbczkAMKepF80TH55Gfnw=
Subject key identifier:   18:18:51:EE:E0:C7:0F:50:79:06:21:57:0B:88:BC:87:B8:18:83:31
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer:       /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial:       019B2061C7822F696167E6E9C66292AE0A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number:          1778
Signing time:             Mon 15 Dec 2025 05:00:37 +0000
Manifest this update:     Mon 15 Dec 2025 05:00:37 +0000
Manifest next update:     Tue 16 Dec 2025 05:00:37 +0000
Files and hashes:         1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
                          2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
                          3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: +Re21fMOO126gVRHq0kFmRMl6zgJ5IIBkqvsOwwJ2VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:20:61:c7:82:2f:69:61:67:e6:e9:c6:62:92:ae:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
        Validity
            Not Before: Dec 15 05:00:37 2025 GMT
            Not After : Dec 16 05:00:37 2025 GMT
        Subject: CN=181851eee0c70f50790621570b88bc87b8188331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:bf:8a:36:81:54:ea:49:c6:57:fb:b5:f3:
                    44:db:89:05:58:bf:8c:cc:bd:69:cb:cd:59:12:94:
                    03:27:b5:84:62:65:dc:e7:e8:e8:20:23:73:0b:1c:
                    78:0e:4d:bc:55:fb:44:53:2f:f2:df:c9:a7:12:f8:
                    44:21:be:bc:b8:3b:85:96:f1:10:c7:54:6d:f2:a2:
                    f2:27:59:a9:e5:70:f7:d2:9e:cc:a3:6f:91:c2:34:
                    c5:cd:b6:f8:68:45:f8:20:3c:53:f2:31:98:c1:c5:
                    06:b3:6e:45:52:ee:a1:ef:3c:c7:90:ed:76:d4:83:
                    70:a1:cf:65:14:78:c4:8e:b6:4a:e3:5f:ee:fd:a1:
                    93:94:64:79:94:74:bd:ac:e0:9d:9d:d7:1c:69:03:
                    c9:4d:54:78:5d:f8:a6:13:4a:eb:1d:d1:72:82:0b:
                    27:69:b1:dc:ff:00:2c:15:c1:24:f6:71:c4:cd:48:
                    5e:c8:d4:70:b9:d2:a3:3a:8d:18:7a:4f:39:46:7a:
                    a5:67:35:eb:72:f2:2c:09:bd:9f:ef:cb:b7:8c:07:
                    e6:de:46:7f:f2:40:e1:ac:9a:81:c8:b1:da:79:31:
                    9b:45:1e:7a:8c:69:27:99:28:85:5a:69:c6:7b:59:
                    5a:b4:99:25:5e:ff:87:aa:c3:a9:e0:17:ad:ad:da:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:18:51:EE:E0:C7:0F:50:79:06:21:57:0B:88:BC:87:B8:18:83:31
            X509v3 Authority Key Identifier:
                keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:92:95:ea:02:a5:e3:6f:a9:8b:2c:64:9e:07:b9:3f:56:
         79:f8:15:b2:8c:9e:ba:f2:e7:a9:a7:25:4a:d5:f3:f0:de:6c:
         58:24:d3:32:04:98:72:ba:3a:5b:55:35:8b:ee:26:68:ee:61:
         77:cd:bc:9e:4d:b7:d8:15:6d:29:16:4c:9c:c1:05:29:f5:35:
         de:e9:33:e6:7b:d4:66:c3:b8:aa:37:d5:47:81:e2:e0:2f:8d:
         bc:1e:9f:2e:e3:ec:a5:82:5e:34:da:b7:50:fb:6e:ba:33:7b:
         2c:11:6f:ea:3f:cd:8d:69:35:23:f8:07:21:81:e9:03:26:56:
         70:ee:63:0e:ee:2c:98:f3:01:32:2b:f0:17:69:74:ab:bc:86:
         dd:e5:ed:7b:9d:d3:aa:89:bc:62:1d:f2:5f:66:12:e5:8f:d6:
         19:8f:53:da:c4:c4:66:a7:06:83:e8:53:84:3c:9c:51:2c:12:
         5d:fa:a4:38:97:3c:8a:10:0f:4f:92:68:25:7d:5c:ff:82:3c:
         35:b6:39:b5:c6:f8:0d:37:fd:1a:db:8e:7b:a1:21:b7:b8:90:
         a3:4b:b3:f1:11:e3:86:1b:04:d2:c1:15:4c:6c:91:8c:61:d3:
         77:dd:89:35:06:5a:ab:a2:34:0d:93:86:23:93:ce:a2:9f:3e:
         93:b8:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:40:31 2025 by rpki-client