This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier: C9XHVeR7lOnMrMoDtFXxOj1crM4xtJxPXDjacKH1frU=
Subject key identifier: CA:EB:86:E0:42:3A:0A:35:90:8C:F1:51:A0:0B:4B:9F:0D:6F:11:F3
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 019B3BD920C797D5F31D303005A406F4B708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number: 1419
Signing time: Sat 20 Dec 2025 13:00:43 +0000
Manifest this update: Sat 20 Dec 2025 13:00:43 +0000
Manifest next update: Sun 21 Dec 2025 13:00:43 +0000
Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=)
2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: LT0dAYTKwUlFj0TUTN9dqnRJRZs83Y5v6kjGj7trr+A=)
15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=)
18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:20:c7:97:d5:f3:1d:30:30:05:a4:06:f4:b7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Dec 20 13:00:43 2025 GMT
Not After : Dec 21 13:00:43 2025 GMT
Subject: CN=caeb86e0423a0a35908cf151a00b4b9f0d6f11f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:01:9c:1f:c8:92:e9:a1:bc:09:38:68:90:
f8:49:ee:35:74:8f:ea:a4:04:ec:17:d9:3c:3d:77:
37:c3:25:5a:38:4e:8a:2d:cc:d8:e2:61:59:cd:49:
65:91:83:e5:a3:c4:66:e3:29:8e:e0:0e:10:74:b3:
9d:d9:e9:57:e3:9c:4f:7a:7c:ba:50:4a:46:70:49:
24:53:52:9e:d7:0c:a9:ac:ec:5b:c3:32:79:86:7c:
e4:00:ce:02:b3:22:3f:a5:94:55:b1:79:81:80:f1:
46:bf:ba:95:01:d8:fe:ac:e1:42:92:55:05:de:40:
b1:4f:5b:ee:46:dd:de:27:33:e7:e9:e6:17:f6:f4:
99:f8:bc:73:56:b7:3e:1c:f7:f3:c9:2a:f1:c3:1c:
63:84:95:ac:30:eb:ff:40:8e:44:4c:6d:dc:aa:5a:
fb:52:ed:63:0c:2e:f3:0b:c0:96:f7:03:20:7d:67:
9b:3c:ab:46:b0:69:ba:85:a8:58:d7:70:92:84:0b:
7b:3d:05:70:66:a7:4c:4a:ac:fe:59:5a:f7:2b:d4:
35:07:54:ce:9f:b9:5f:3e:e0:1d:af:36:29:c9:2f:
e6:cd:c1:3b:d9:f1:26:4f:29:7d:13:19:1d:0e:81:
66:1d:25:7c:3c:3e:07:a5:e4:9d:53:96:51:21:17:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:86:E0:42:3A:0A:35:90:8C:F1:51:A0:0B:4B:9F:0D:6F:11:F3
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:5f:1b:50:0a:ed:c6:64:86:86:db:e9:df:08:d9:0e:09:
cc:3c:20:a7:a3:80:c7:73:9b:47:82:35:20:8b:39:f2:d3:4d:
d0:88:f2:13:f2:2b:c0:b7:62:c5:59:83:ca:1d:77:32:2a:e9:
1a:98:18:8e:c6:b9:87:8a:41:53:77:55:f5:0b:5c:04:f7:cb:
48:7b:d8:75:82:85:ea:e3:28:24:6c:b7:5d:51:35:65:5c:d9:
67:b1:4b:d5:77:82:e3:bd:e5:34:fd:c8:a6:21:f5:bb:8b:12:
4e:85:37:e4:76:66:ca:bf:86:17:e4:95:77:aa:42:0f:7d:67:
30:5a:7f:45:6a:14:3a:63:42:9c:0e:f9:f1:fa:b8:0b:8c:65:
e1:45:91:db:e2:ee:d8:3d:d5:6d:74:f4:4b:87:fc:cd:cd:d7:
21:91:b5:c9:f2:f5:34:69:c8:a1:b7:d3:63:0a:ab:d4:7e:96:
5d:dd:8a:8f:e0:07:7e:f2:57:21:d3:02:5a:c2:85:dd:b9:e5:
c8:90:2f:88:26:3e:0a:7f:da:a7:08:77:24:8d:39:01:96:58:
6e:1b:5a:1e:81:16:09:33:63:01:51:1d:b6:1f:c1:80:d5:05:
04:5e:a3:d2:c8:9f:66:83:95:2b:63:34:02:b6:d0:e6:3c:7d:
62:a7:ea:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs72SDHl9XzHTAwBaQG9LcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjUxMjIwMTMwMDQzWhcNMjUxMjIxMTMwMDQzWjAzMTEwLwYDVQQD
EyhjYWViODZlMDQyM2EwYTM1OTA4Y2YxNTFhMDBiNGI5ZjBkNmYxMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLIBnB/IkumhvAk4aJD4Se41dI/q
pATsF9k8PXc3wyVaOE6KLczY4mFZzUllkYPlo8Rm4ymO4A4QdLOd2elX45xPeny6
UEpGcEkkU1Ke1wyprOxbwzJ5hnzkAM4CsyI/pZRVsXmBgPFGv7qVAdj+rOFCklUF
3kCxT1vuRt3eJzPn6eYX9vSZ+LxzVrc+HPfzySrxwxxjhJWsMOv/QI5ETG3cqlr7
Uu1jDC7zC8CW9wMgfWebPKtGsGm6hahY13CShAt7PQVwZqdMSqz+WVr3K9Q1B1TO
n7lfPuAdrzYpyS/mzcE72fEmTyl9ExkdDoFmHSV8PD4HpeSdU5ZRIRdkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrrhuBCOgo1kIzxUaALS58NbxHzMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0dfG1AK
7cZkhobb6d8I2Q4JzDwgp6OAx3ObR4I1IIs58tNN0IjyE/IrwLdixVmDyh13Mirp
GpgYjsa5h4pBU3dV9QtcBPfLSHvYdYKF6uMoJGy3XVE1ZVzZZ7FL1XeC473lNP3I
piH1u4sSToU35HZmyr+GF+SVd6pCD31nMFp/RWoUOmNCnA758fq4C4xl4UWR2+Lu
2D3VbXT0S4f8zc3XIZG1yfL1NGnIobfTYwqr1H6WXd2Kj+AHfvJXIdMCWsKF3bnl
yJAviCY+Cn/apwh3JI05AZZYbhtaHoEWCTNjAVEdth/BgNUFBF6j0sifZoOVK2M0
ArbQ5jx9YqfqoA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:41:44 2025 by rpki-client