This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: 3ZIGULtnFjoZbudk6a237DvXxFmNMl09PQCnDcWXwhs= Subject key identifier: 35:9B:69:8A:86:37:EB:DC:0B:EA:66:AB:C7:33:9C:0D:43:C8:96:C1 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B511758710312EA9DAF00C71E4D5781EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1424 Signing time: Wed 24 Dec 2025 16:00:42 +0000 Manifest this update: Wed 24 Dec 2025 16:00:42 +0000 Manifest next update: Thu 25 Dec 2025 16:00:42 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: iVctYwPyX3Raeaj/UI6XcVskMjZnGetYXZsO13MmcDA=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:58:71:03:12:ea:9d:af:00:c7:1e:4d:57:81:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Dec 24 16:00:42 2025 GMT Not After : Dec 25 16:00:42 2025 GMT Subject: CN=359b698a8637ebdc0bea66abc7339c0d43c896c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:6e:1b:3e:dc:d7:42:42:ff:33:26:52:e4: 9a:97:47:79:f2:f2:33:a0:7e:df:32:98:11:4c:eb: 59:fc:07:f1:6f:66:02:41:0f:e0:51:84:a3:2f:bf: d7:34:f8:c6:8a:5a:6c:ee:85:73:e2:a6:56:7f:c0: 83:b5:1b:ad:6e:44:c7:6b:4f:10:e7:e4:e1:04:72: 35:c9:d8:54:40:a3:11:1f:c4:bd:a1:6b:38:ee:df: a5:bb:ed:db:70:91:9e:6f:dd:fc:55:11:26:bf:d9: 31:12:f6:08:27:0e:a1:cb:15:3c:3d:61:81:0e:fe: c3:61:47:12:a2:c4:bd:ee:51:ba:9f:f0:0e:02:cd: 54:29:2e:d8:02:c1:fc:38:5f:46:7b:27:f7:1a:95: 9e:76:67:08:10:e5:a7:64:1e:bf:a2:2a:9c:98:48: 18:ad:73:40:dd:26:d2:c0:1d:21:bb:a4:54:de:0d: 4b:51:4e:da:2f:08:47:7e:95:17:db:65:57:03:38: c7:4d:7a:ff:d8:5c:46:c3:c5:f7:2a:90:ef:7e:83: 6a:5e:8c:a8:bb:75:d8:02:e2:ec:c7:20:d2:a1:0a: 97:7d:4c:6a:b9:c4:c5:61:77:de:4d:52:4a:0b:f3: 90:e2:9e:88:e8:71:da:17:d8:2c:c0:ac:6d:ae:8f: a2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9B:69:8A:86:37:EB:DC:0B:EA:66:AB:C7:33:9C:0D:43:C8:96:C1 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6b:f1:c3:ae:97:ac:47:ed:eb:30:f5:27:a7:1f:e4:f7:4e: 5c:30:2a:36:30:62:68:08:bc:23:a8:07:4b:58:62:51:cc:29: 1f:82:0f:22:fa:33:20:56:89:4d:7d:04:e0:60:c7:e0:73:30: 31:2c:84:e2:5a:5e:d2:cc:2e:85:e0:38:a8:f6:db:ae:cb:1e: a0:f7:c8:09:4f:73:37:c6:80:06:80:d9:30:de:ae:3a:b7:cb: 90:73:ab:0d:86:d3:c7:0f:15:cf:57:4a:2f:7a:04:45:9a:f5: de:e2:21:24:07:4e:12:76:a6:73:07:64:3c:6f:39:65:3f:d5: 1c:42:fa:08:99:c5:8b:28:4d:32:31:13:d1:f9:48:2a:b3:0a: d8:1c:92:92:ab:e1:a9:99:c2:ab:26:25:cb:e3:01:c8:20:99: 54:aa:ae:24:20:51:ef:c8:98:56:b6:26:ea:8d:2e:e2:16:ea: 67:29:5a:70:5e:d9:7a:69:91:63:12:96:26:3b:9f:8f:03:5a: 6e:29:18:23:87:cd:4a:a8:03:3f:99:0e:7e:12:88:5e:e7:a4: 18:df:7c:95:fc:0f:99:48:5b:78:ab:37:b8:15:f4:75:eb:c3: 20:29:00:1a:2f:1d:dd:32:cc:58:d6:53:79:47:4e:6a:6f:6d: 9f:ce:ac:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF1hxAxLqna8Axx5NV4HrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUxMjI0MTYwMDQyWhcNMjUxMjI1MTYwMDQyWjAzMTEwLwYDVQQD EygzNTliNjk4YTg2MzdlYmRjMGJlYTY2YWJjNzMzOWMwZDQzYzg5NmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16puGz7c10JC/zMmUuSal0d58vIz oH7fMpgRTOtZ/Afxb2YCQQ/gUYSjL7/XNPjGilps7oVz4qZWf8CDtRutbkTHa08Q 5+ThBHI1ydhUQKMRH8S9oWs47t+lu+3bcJGeb938VREmv9kxEvYIJw6hyxU8PWGB Dv7DYUcSosS97lG6n/AOAs1UKS7YAsH8OF9Geyf3GpWedmcIEOWnZB6/oiqcmEgY rXNA3SbSwB0hu6RU3g1LUU7aLwhHfpUX22VXAzjHTXr/2FxGw8X3KpDvfoNqXoyo u3XYAuLsxyDSoQqXfUxqucTFYXfeTVJKC/OQ4p6I6HHaF9gswKxtro+iQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWbaYqGN+vcC+pmq8cznA1DyJbBMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWvxw66X rEft6zD1J6cf5PdOXDAqNjBiaAi8I6gHS1hiUcwpH4IPIvozIFaJTX0E4GDH4HMw MSyE4lpe0swuheA4qPbbrsseoPfICU9zN8aABoDZMN6uOrfLkHOrDYbTxw8Vz1dK L3oERZr13uIhJAdOEnamcwdkPG85ZT/VHEL6CJnFiyhNMjET0flIKrMK2BySkqvh qZnCqyYly+MByCCZVKquJCBR78iYVrYm6o0u4hbqZylacF7ZemmRYxKWJjufjwNa bikYI4fNSqgDP5kOfhKIXuekGN98lfwPmUhbeKs3uBX0devDICkAGi8d3TLMWNZT eUdOam9tn86s5A== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:49 2025 by rpki-client