This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File:                     r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier:          cAtRGQvSPChwUv8Il+iAducg4u55g/g3ulP9XXzzJJ4=
Subject key identifier:   3A:D7:F4:78:1B:BC:0E:46:2E:CC:0C:F8:A8:EA:86:99:A0:BF:90:29
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       019B39EAACA93C80CB3A79C0A8730E56D4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number:          1418
Signing time:             Sat 20 Dec 2025 04:00:39 +0000
Manifest this update:     Sat 20 Dec 2025 04:00:39 +0000
Manifest next update:     Sun 21 Dec 2025 04:00:39 +0000
Files and hashes:         1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=)
                          2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
                          3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
                          4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
                          5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
                          6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
                          7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
                          8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
                          9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
                          10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
                          11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
                          12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
                          13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
                          14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: ahSCT0X2hqvIMmj7NO9kFgtW5GA2bDnmF1pDMRpdH00=)
                          15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
                          16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
                          17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=)
                          18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:ea:ac:a9:3c:80:cb:3a:79:c0:a8:73:0e:56:d4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Dec 20 04:00:39 2025 GMT
            Not After : Dec 21 04:00:39 2025 GMT
        Subject: CN=3ad7f4781bbc0e462ecc0cf8a8ea8699a0bf9029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:47:c1:f4:eb:e7:3f:d3:aa:c8:c3:9e:a1:
                    27:38:8f:a9:4f:e4:bb:08:13:36:ce:90:3e:b9:c5:
                    6f:5a:ff:c1:8a:1a:cc:bc:08:00:08:05:d6:5d:5a:
                    cc:db:2b:7f:7a:b7:19:57:45:ec:2c:12:ee:c4:ca:
                    2d:c8:63:05:4c:83:1a:4f:5a:da:2a:a1:10:72:86:
                    59:7b:2a:07:c6:79:43:8e:b7:7b:a9:6f:51:d6:31:
                    d6:46:79:27:b4:bb:3e:5b:f0:1c:d2:fe:5e:26:00:
                    6a:0c:01:f1:84:84:c4:e4:ba:12:7d:c7:73:6b:53:
                    d0:82:db:06:3d:7a:fe:9e:96:8a:dc:10:48:9d:78:
                    48:8e:5d:87:58:09:2f:4f:c8:7c:3f:89:b8:b0:82:
                    f3:8f:27:7a:fb:5a:50:27:61:f4:f1:af:b9:05:b4:
                    0a:81:7f:27:f5:71:87:be:16:6f:79:0f:a6:ad:ca:
                    83:58:f8:a6:62:ee:29:e9:c6:96:ee:d6:6f:59:fb:
                    73:de:22:50:79:93:f4:4a:69:77:c2:c9:5d:81:ec:
                    3d:59:44:21:9f:34:1b:97:54:25:9e:7b:f7:d3:38:
                    5e:1e:11:47:2e:1a:22:91:be:d4:30:0a:20:70:b5:
                    82:59:db:08:47:cb:55:13:aa:d9:13:aa:75:c3:6e:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D7:F4:78:1B:BC:0E:46:2E:CC:0C:F8:A8:EA:86:99:A0:BF:90:29
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:48:e6:50:7e:61:8d:af:50:8e:2d:5a:2f:38:08:77:07:95:
         75:57:a9:fb:ef:2f:7a:4f:f0:ef:c3:2d:ec:e7:ae:46:1b:0e:
         01:aa:01:cd:c6:eb:28:b0:80:87:c5:d5:ec:fc:97:aa:11:cb:
         13:4e:a9:11:d3:36:fb:d7:d3:9e:78:cf:53:97:e7:3b:8b:8d:
         8f:26:01:50:28:51:45:46:fd:91:bd:ef:c0:af:ab:4b:0c:32:
         02:52:f5:9c:ea:ec:36:24:c1:16:16:3c:bc:5e:cd:87:2d:21:
         8f:9a:35:ec:62:35:b2:3a:23:87:e6:84:ce:06:f1:89:d6:f7:
         48:24:34:e2:c7:ec:b6:10:31:0b:dd:8f:d3:b8:7a:15:d3:07:
         fc:d3:cf:e8:73:7d:82:5b:ad:1b:41:23:fe:04:0f:e9:8f:f0:
         12:27:62:d3:10:67:44:02:5e:39:95:61:9c:8d:69:70:ab:ff:
         4a:89:f4:8a:3e:4d:9b:b5:02:24:6e:70:9d:bf:61:fd:7d:1d:
         1b:ad:34:d4:db:bf:de:47:b1:62:a0:ac:4b:d2:1d:42:ff:f1:
         47:f0:da:9d:39:15:84:dc:79:bb:1d:e1:ae:30:d8:d6:1a:7c:
         03:63:a6:56:d9:a1:27:0f:41:48:d9:3d:d6:14:65:fd:76:cd:
         2e:ee:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:19:46 2025 by rpki-client