This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File:                     yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier:          ciceRp3lj3o4dC2AgKtubRk5VYHqvIt6N5ye8EPgJh8=
Subject key identifier:   B5:94:46:6C:41:C7:19:89:66:25:C6:7F:D4:F3:AB:7C:B6:9D:AC:30
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer:       /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial:       019B3F486F0C88589402AACFB45F1A46E272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number:          1788
Signing time:             Sun 21 Dec 2025 05:01:10 +0000
Manifest this update:     Sun 21 Dec 2025 05:01:10 +0000
Manifest next update:     Mon 22 Dec 2025 05:01:10 +0000
Files and hashes:         1: ENc4V7s5D9VI1PWlf_wPokzkahE.roa (hash: BXmB/X/SHXqjZRpYnJuPeo2gTwWyCsvdek5X4RHOx9c=)
                          2: XzkhM4tHkIA85DIOJH6Mas-Ys2s.roa (hash: pgsdIi3wdOFYz6s+5BVFRjWsDjSb+kftFl9lENuJtlQ=)
                          3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: X4jbqCOfBTDccJO+eS5RXzv0lEA0zct/rTI2UXTcEeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3f:48:6f:0c:88:58:94:02:aa:cf:b4:5f:1a:46:e2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
        Validity
            Not Before: Dec 21 05:01:10 2025 GMT
            Not After : Dec 22 05:01:10 2025 GMT
        Subject: CN=b594466c41c719896625c67fd4f3ab7cb69dac30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:9e:27:ba:87:79:ad:b2:f6:fb:2c:c1:75:
                    54:6f:e1:13:df:0c:cb:fd:e7:63:ac:31:0a:84:34:
                    c5:14:01:6c:45:b5:8e:a8:2f:af:ea:84:7b:41:4d:
                    b1:bb:ca:b1:ac:cb:53:bf:48:c6:f9:8e:af:73:d6:
                    51:d2:96:4e:12:72:58:1d:66:49:8e:1c:0f:c8:d1:
                    63:54:13:82:10:01:57:b0:ba:18:69:e4:d3:0f:b2:
                    55:35:f7:99:da:3f:3e:00:24:a7:31:6c:bc:7e:61:
                    8d:7e:29:a9:6d:51:0f:d7:9c:4d:7c:0c:f4:b3:d3:
                    0d:80:9d:6c:25:b2:b0:38:d6:2c:8f:29:89:7e:5e:
                    af:b6:0b:5f:04:41:f2:1c:41:ff:cf:22:8d:2a:3b:
                    af:00:77:42:dd:41:69:ed:0b:3c:05:fd:a2:24:cc:
                    a0:83:1f:ee:1d:c4:03:c5:e5:f3:3d:91:d1:84:cf:
                    3e:86:b1:61:49:ed:f0:c2:b6:1a:33:e4:d9:0e:89:
                    05:9d:5a:6e:1d:51:78:d2:2a:37:56:28:1f:e7:ce:
                    d4:7e:76:b4:b6:0c:a2:47:d7:09:be:09:60:ae:2f:
                    70:2d:14:48:8c:b1:42:1f:cb:4c:02:bf:ee:f1:b7:
                    57:91:4f:8a:9f:89:74:75:3e:83:77:5e:8c:14:65:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:94:46:6C:41:C7:19:89:66:25:C6:7F:D4:F3:AB:7C:B6:9D:AC:30
            X509v3 Authority Key Identifier:
                keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:71:6d:85:6d:f5:3f:bb:26:2c:51:67:db:11:78:4b:3e:18:
         3d:97:ec:61:37:28:b0:34:a6:8d:7b:70:8e:7d:f7:38:eb:d3:
         f5:4e:ff:9e:a5:73:f0:b6:90:6a:8a:0b:0e:b1:b0:42:45:f8:
         22:8e:fd:8f:e0:1e:8e:95:69:80:da:5a:03:33:eb:53:b9:58:
         bd:b9:7c:ac:f4:7e:66:73:c5:9f:04:8a:66:22:bb:80:ab:ef:
         c3:14:f8:33:2b:f3:14:3a:56:dc:14:c4:7f:2c:2a:08:b6:27:
         33:ee:95:58:78:bd:fe:25:67:5d:19:ea:70:e0:ff:b6:c5:26:
         92:a2:d4:07:15:c0:d1:77:7a:56:c7:a9:bc:af:5d:d4:2b:a7:
         0d:8a:57:6e:59:bc:14:b5:5d:52:ae:4f:a6:78:ea:73:d5:01:
         3a:28:f9:2a:f5:b0:17:86:b1:c9:b3:55:28:ee:41:fe:e0:c2:
         4c:9f:a3:12:18:a1:aa:1e:4d:34:69:9f:7d:b9:0a:c4:21:e0:
         dc:fa:6e:4a:f8:c9:28:16:40:82:90:21:4b:e4:85:26:90:86:
         7c:ec:5f:38:bd:22:21:92:76:d8:4d:e6:35:b8:3b:45:e8:2b:
         1b:be:22:d4:41:d1:f5:73:f5:a8:58:8f:04:39:d5:a1:57:29:
         9d:81:ce:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs/SG8MiFiUAqrPtF8aRuJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZmFmNmZhMjViOGQyYWNiMWI0NGRjZGQ1NTQzN2FiYTIy
MjZlOWUwHhcNMjUxMjIxMDUwMTEwWhcNMjUxMjIyMDUwMTEwWjAzMTEwLwYDVQQD
EyhiNTk0NDY2YzQxYzcxOTg5NjYyNWM2N2ZkNGYzYWI3Y2I2OWRhYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbeeJ7qHea2y9vsswXVUb+ET3wzL
/edjrDEKhDTFFAFsRbWOqC+v6oR7QU2xu8qxrMtTv0jG+Y6vc9ZR0pZOEnJYHWZJ
jhwPyNFjVBOCEAFXsLoYaeTTD7JVNfeZ2j8+ACSnMWy8fmGNfimpbVEP15xNfAz0
s9MNgJ1sJbKwONYsjymJfl6vtgtfBEHyHEH/zyKNKjuvAHdC3UFp7Qs8Bf2iJMyg
gx/uHcQDxeXzPZHRhM8+hrFhSe3wwrYaM+TZDokFnVpuHVF40io3Vigf587Ufna0
tgyiR9cJvglgri9wLRRIjLFCH8tMAr/u8bdXkU+Kn4l0dT6Dd16MFGX4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWURmxBxxmJZiXGf9Tzq3y2nawwMB8GA1UdIwQY
MBaAFMr69voluNKssbRNzdVUN6uiIm6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YzY1MDctOWQ3Zi00MmM3LTlkMTIt
MGUzNTAwMTc3OGE1LzEveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85YzY1MDctOWQ3Zi00MmM3LTlkMTItMGUzNTAwMTc3OGE1
LzEveXZyMi1pVzQwcXl4dEUzTjFWUTNxNklpYnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXFthW31
P7smLFFn2xF4Sz4YPZfsYTcosDSmjXtwjn33OOvT9U7/nqVz8LaQaooLDrGwQkX4
Io79j+AejpVpgNpaAzPrU7lYvbl8rPR+ZnPFnwSKZiK7gKvvwxT4MyvzFDpW3BTE
fywqCLYnM+6VWHi9/iVnXRnqcOD/tsUmkqLUBxXA0Xd6VsepvK9d1CunDYpXblm8
FLVdUq5Ppnjqc9UBOij5KvWwF4axybNVKO5B/uDCTJ+jEhihqh5NNGmffbkKxCHg
3PpuSvjJKBZAgpAhS+SFJpCGfOxfOL0iIZJ22E3mNbg7RegrG74i1EHR9XP1qFiP
BDnVoVcpnYHOXg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 14:39:09 2025 by rpki-client