This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File:                     YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier:          xDfDVaqbisNHy+LEUtUKUJDGBX8iiJ53oB3oBl/ec+c=
Subject key identifier:   1F:88:76:3F:04:2C:8D:79:2D:0F:8E:AF:EB:A7:31:0E:37:1B:F7:31
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer:       /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial:       019AF31CC526317AF4C2DB9A4E7C0E3D5A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number:          1767
Signing time:             Sat 06 Dec 2025 10:02:20 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:20 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:20 +0000
Files and hashes:         1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
                          2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: MFMBk6ce9F8Ih0z5a/CIyat+ZlxouA8P8//CA1Qfock=)
                          3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:c5:26:31:7a:f4:c2:db:9a:4e:7c:0e:3d:5a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
        Validity
            Not Before: Dec  6 10:02:20 2025 GMT
            Not After : Dec  7 10:02:20 2025 GMT
        Subject: CN=1f88763f042c8d792d0f8eafeba7310e371bf731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:fb:74:d7:0d:53:9c:9e:7a:73:05:0c:3e:
                    b4:79:db:3a:2b:23:d7:45:06:69:5d:34:24:da:1e:
                    a3:42:ed:5a:45:b7:4b:c4:73:7d:fd:ac:c0:48:f6:
                    51:5a:98:a2:d0:cd:96:cd:42:3f:0d:0a:00:ed:68:
                    89:31:34:91:2c:8d:05:8f:50:cc:dd:30:75:7c:f4:
                    d2:2e:f9:66:74:a4:10:ca:87:41:35:5c:fb:5c:b9:
                    7a:1b:f6:be:86:31:e8:1f:7a:4c:ef:ec:70:ba:b2:
                    68:e2:10:03:ad:82:72:24:8c:15:43:4d:27:aa:61:
                    39:aa:3a:e2:e1:be:fb:b8:bb:da:e1:f1:97:b3:e8:
                    80:c2:6e:ae:be:d9:ce:f1:d2:76:23:96:0a:7c:38:
                    b2:d5:01:0b:54:92:25:d4:43:14:99:3c:44:97:4b:
                    a3:62:f7:1d:43:e4:da:4c:96:d3:50:26:0d:82:db:
                    da:84:cd:6b:30:a0:1e:84:97:30:e2:c5:82:fd:41:
                    ec:32:9f:70:ec:8e:f9:e5:34:c3:9a:0e:c1:c5:6b:
                    69:70:43:d0:b7:33:22:9e:bf:b1:38:59:de:c4:60:
                    fb:44:4c:ec:e7:20:73:ce:ad:f9:11:cc:b9:b9:53:
                    02:4e:54:45:4f:13:de:d1:28:36:3a:fc:ad:45:05:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:88:76:3F:04:2C:8D:79:2D:0F:8E:AF:EB:A7:31:0E:37:1B:F7:31
            X509v3 Authority Key Identifier:
                keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:56:02:b3:0a:08:ec:ae:97:32:4f:ae:b6:5e:fa:9c:15:
         a2:27:5e:9e:a4:02:39:e3:70:43:39:b7:0d:83:15:17:bf:d1:
         14:af:00:bc:5d:4e:b6:8e:3f:e2:b7:fd:5c:c2:c4:c2:a6:79:
         38:95:27:fb:54:27:11:ff:1c:cc:0b:a4:a3:71:31:5b:98:51:
         e4:56:d3:82:40:b1:ca:5c:ad:c7:38:c4:66:07:e8:48:0d:be:
         25:09:71:8c:1e:e1:41:cd:ec:50:ff:6a:4b:a0:46:13:91:92:
         c9:51:e2:55:4b:f2:c9:fc:1f:3c:31:50:a0:37:ef:66:0a:04:
         24:83:24:a9:dd:87:15:31:a8:db:22:50:c5:20:ce:67:01:1b:
         5a:96:f2:5a:75:42:8e:ca:73:80:ce:9a:6d:9f:6d:c9:04:ea:
         37:97:c3:95:89:1c:34:53:50:96:93:bc:2c:ee:c2:cd:a1:1e:
         0d:b2:45:2d:42:b8:05:6c:bf:04:3e:90:72:24:54:18:7c:d3:
         d2:b3:47:fc:ac:96:f5:9f:57:66:08:b5:f5:60:98:83:d6:31:
         8b:12:5a:b8:b1:26:64:49:9e:f2:66:e1:30:c6:45:7e:05:1e:
         8d:30:90:aa:36:50:11:d2:a0:e2:77:38:6a:23:52:01:df:a1:
         21:99:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:16:10 2025 by rpki-client