This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File:                     usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier:          /pAI3NzdEeubI5A3mivIiPzbR9SDRuCy9j94bCsiJSc=
Subject key identifier:   6E:1D:EE:1C:53:2B:21:26:04:3E:6B:36:81:50:6E:AE:42:3E:AA:33
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer:       /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial:       019B247615A246D176A389278FDF9D176E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number:          16
Signing time:             Tue 16 Dec 2025 00:01:17 +0000
Manifest this update:     Tue 16 Dec 2025 00:01:17 +0000
Manifest next update:     Wed 17 Dec 2025 00:01:17 +0000
Files and hashes:         1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=)
                          2: 6wdz3UOZ9WAT3BEVKu977wzSb_Y.roa (hash: j0wO5SPrwe9SF358RdnDGX3XEdT1IQMBpaTX8mDR3sE=)
                          3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: dyKJPIyUJAiH/PiadXbtqYJQyg8xiSg1IKVDKth5cNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:76:15:a2:46:d1:76:a3:89:27:8f:df:9d:17:6e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
        Validity
            Not Before: Dec 16 00:01:17 2025 GMT
            Not After : Dec 17 00:01:17 2025 GMT
        Subject: CN=6e1dee1c532b2126043e6b3681506eae423eaa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:db:81:f7:0e:f5:50:fc:a5:5c:8b:bd:73:
                    02:39:c1:41:b4:36:c7:af:da:fd:df:25:9b:a3:9c:
                    09:c4:d7:25:a4:20:d2:9c:f1:f4:4b:7a:fb:78:e9:
                    05:f8:8d:33:ed:a3:92:98:ac:64:fa:57:77:8f:41:
                    1c:3e:d8:00:4b:3a:5b:e6:b2:2e:d2:9a:28:b1:61:
                    52:65:68:91:55:62:64:b9:28:34:c9:1a:0e:91:63:
                    ba:9a:0f:bc:05:99:3f:69:a5:cd:ff:e6:9e:bb:59:
                    22:28:fd:91:6c:30:11:4c:37:a7:ee:fd:00:cd:25:
                    4e:69:fb:7f:60:8a:20:07:85:ea:67:2d:17:01:4a:
                    b8:20:0e:5e:0c:c9:37:3b:7e:04:0c:76:b3:44:62:
                    49:d4:7f:26:81:73:38:9d:3d:96:5f:3a:a1:8e:ac:
                    19:19:a0:fa:4a:a8:0f:8f:2b:a4:60:ab:c4:8a:1d:
                    4f:83:3e:2a:b5:21:92:5f:64:cd:7e:f0:e0:22:36:
                    ed:a8:7c:86:f2:fd:69:6a:19:64:28:44:2d:fb:b5:
                    1e:fa:91:41:22:fb:7c:11:4c:38:7f:2d:9e:67:86:
                    37:77:e7:ce:7d:51:44:1b:6f:2a:89:d0:dd:3b:56:
                    a5:4c:be:2a:e8:58:e0:94:eb:08:32:9f:1f:80:0b:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1D:EE:1C:53:2B:21:26:04:3E:6B:36:81:50:6E:AE:42:3E:AA:33
            X509v3 Authority Key Identifier:
                keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:ec:3b:1d:c7:f6:cb:13:aa:d8:55:8b:aa:2f:2a:ae:e8:
         16:39:f1:bc:95:ca:49:fe:82:b1:dc:b1:54:f6:77:bb:03:71:
         be:41:5d:48:60:e4:8b:d6:56:9b:5d:f3:cd:b6:f1:7b:21:4c:
         26:e2:6a:a7:b9:28:bc:ea:80:ae:35:a3:99:9b:5f:98:2e:b3:
         2d:5a:94:1f:61:9b:e9:1a:08:56:19:c5:7b:6e:05:bd:05:59:
         f9:79:5c:13:37:95:69:3e:8f:dc:8a:3c:18:0e:6c:10:95:95:
         56:1d:29:5c:ed:fb:55:4a:ed:ea:ca:2b:03:15:8a:af:a7:da:
         08:cd:64:1e:b5:2f:b5:1d:16:0b:6a:8f:e3:d1:f6:62:1d:89:
         90:d8:d1:53:59:9d:a1:7a:e9:17:22:be:57:9d:71:ed:b4:75:
         cc:53:41:42:55:80:93:f3:4b:5c:f1:a3:de:79:60:1b:58:76:
         00:91:05:37:ba:64:3a:75:08:02:b6:06:b3:7a:67:99:0f:1e:
         0a:84:49:5a:35:78:c7:6a:0b:51:cf:d3:c2:d6:3a:1a:3f:8c:
         0d:e9:a0:e5:09:2d:96:03:1e:78:17:69:36:e4:b3:24:62:3b:
         9b:a5:ec:a6:0f:ff:45:f2:80:df:e4:62:72:7e:f3:0b:56:33:
         7f:73:64:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZskdhWiRtF2o4knj9+dF257MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYzRhMDg5ZjhlNjhhODMwZWI5OGE1YzFmZTI1NjA2NTFl
NWIzOWIwHhcNMjUxMjE2MDAwMTE3WhcNMjUxMjE3MDAwMTE3WjAzMTEwLwYDVQQD
Eyg2ZTFkZWUxYzUzMmIyMTI2MDQzZTZiMzY4MTUwNmVhZTQyM2VhYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNrbgfcO9VD8pVyLvXMCOcFBtDbH
r9r93yWbo5wJxNclpCDSnPH0S3r7eOkF+I0z7aOSmKxk+ld3j0EcPtgASzpb5rIu
0poosWFSZWiRVWJkuSg0yRoOkWO6mg+8BZk/aaXN/+aeu1kiKP2RbDARTDen7v0A
zSVOaft/YIogB4XqZy0XAUq4IA5eDMk3O34EDHazRGJJ1H8mgXM4nT2WXzqhjqwZ
GaD6SqgPjyukYKvEih1Pgz4qtSGSX2TNfvDgIjbtqHyG8v1pahlkKEQt+7Ue+pFB
Ivt8EUw4fy2eZ4Y3d+fOfVFEG28qidDdO1alTL4q6FjglOsIMp8fgAvojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4d7hxTKyEmBD5rNoFQbq5CPqozMB8GA1UdIwQY
MBaAFLrEoIn45oqDDrmKXB/iVgZR5bObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWU5NmEtZTkxZi00MTdiLWEzMmQt
MDk2MGMxNmY3NGJmLzEvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWU5NmEtZTkxZi00MTdiLWEzMmQtMDk2MGMxNmY3NGJm
LzEvdXNTZ2lmam1pb01PdVlwY0gtSldCbEhsczVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9HsOx3H
9ssTqthVi6ovKq7oFjnxvJXKSf6CsdyxVPZ3uwNxvkFdSGDki9ZWm13zzbbxeyFM
JuJqp7kovOqArjWjmZtfmC6zLVqUH2Gb6RoIVhnFe24FvQVZ+XlcEzeVaT6P3Io8
GA5sEJWVVh0pXO37VUrt6sorAxWKr6faCM1kHrUvtR0WC2qP49H2Yh2JkNjRU1md
oXrpFyK+V51x7bR1zFNBQlWAk/NLXPGj3nlgG1h2AJEFN7pkOnUIArYGs3pnmQ8e
CoRJWjV4x2oLUc/TwtY6Gj+MDemg5QktlgMeeBdpNuSzJGI7m6Xspg//RfKA3+Ri
cn7zC1Yzf3Nk5g==
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:32:44 2025 by rpki-client