This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: 8Ub7iXUyNGE0RTNCuLDyseQpXEbrdf4FDOXuSVm0KMI= Subject key identifier: 34:C0:BC:BE:0C:12:84:4F:DD:15:BD:44:2D:37:20:E3:51:D7:11:FA Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B0F6E1E4C5E8E84AD30A176BA99AB96D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 1402 Signing time: Thu 11 Dec 2025 22:00:33 +0000 Manifest this update: Thu 11 Dec 2025 22:00:33 +0000 Manifest next update: Fri 12 Dec 2025 22:00:33 +0000 Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=) 2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=) 3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=) 4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=) 5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=) 6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=) 7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=) 8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=) 9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=) 10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=) 11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=) 12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=) 13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: UhrBZag1EBLB3jSKHRy8/R4fEHiLEF/eFIGJqR4SGU0=) 15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=) 16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=) 17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=) 18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:1e:4c:5e:8e:84:ad:30:a1:76:ba:99:ab:96:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Dec 11 22:00:33 2025 GMT Not After : Dec 12 22:00:33 2025 GMT Subject: CN=34c0bcbe0c12844fdd15bd442d3720e351d711fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:a0:60:eb:df:3b:3d:ea:60:98:71:aa:e9: 3f:04:e4:5f:e5:36:84:95:df:ef:8b:eb:04:f1:05: 63:66:a3:4b:6f:92:8c:fb:94:67:b3:60:b1:28:83: ab:6b:b3:10:90:68:fb:d0:ba:95:e8:dd:f0:7a:a5: a4:4e:cb:fa:74:b8:ff:b8:ef:aa:7b:73:ee:ee:54: 46:8e:85:84:e9:bf:b4:fb:a8:9c:b6:bf:e5:df:30: 31:a7:52:82:2c:16:51:3b:08:2b:76:58:fd:df:58: f1:f7:1b:9f:94:58:0c:31:31:14:55:f0:cb:19:46: 76:37:da:a4:21:a1:6e:78:46:50:b7:15:a9:99:f3: a7:ca:79:67:66:57:05:12:20:38:1b:22:4a:8a:54: 86:18:72:3c:e6:58:6a:fb:d8:32:eb:08:1d:b3:ac: 35:83:9a:5a:cf:83:2c:28:32:30:d4:5d:a9:0b:2b: 70:4e:fa:72:27:fc:41:4e:53:56:af:f6:ec:2e:ad: 21:d8:ec:b6:a8:64:46:a8:c7:89:96:28:94:6a:d2: 1f:40:2a:2a:64:b2:00:9b:01:ab:b9:13:5a:81:50: 65:30:5e:e1:83:7b:d1:c0:dd:60:0c:d8:21:7c:2a: 94:50:07:93:d8:2d:4a:e1:08:90:10:e5:d3:a0:51: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:BC:BE:0C:12:84:4F:DD:15:BD:44:2D:37:20:E3:51:D7:11:FA X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:06:58:80:71:c9:2a:68:eb:bc:6d:06:f0:c4:23:ad:0e:2c: 14:4b:b4:fc:24:34:5d:fd:49:99:d9:99:a6:da:96:bb:74:40: 51:fa:07:d2:3b:8d:fa:48:9b:14:1b:1f:f4:a5:c9:aa:e7:cb: 39:7f:20:58:53:af:15:5e:da:a4:f3:53:ec:98:d8:5a:d3:bb: d4:ef:94:7d:25:cb:5c:bd:28:72:8d:a7:33:e7:fe:3b:2f:7c: 14:a8:d4:3d:f3:15:2a:7d:f4:47:b2:e8:23:c2:3e:f3:27:73: f1:7f:6a:17:8e:b8:97:5f:7d:c3:a8:d7:0a:22:47:41:ad:b9: 2c:92:cb:d7:07:27:4e:49:97:f4:53:15:7c:2f:07:87:b3:98: 41:f9:0c:b8:cb:e2:5f:06:14:7c:01:f2:84:98:47:10:5a:3a: e5:d7:e1:d5:ab:d3:36:c5:59:0a:bb:c6:24:5f:24:fa:41:80: 27:49:7e:49:e5:ec:73:5b:cf:80:af:f3:16:a8:ca:d7:cf:9b: 5a:75:00:f7:46:7d:b0:22:27:59:93:5f:8e:7f:56:19:c4:d6: 9a:67:e7:dd:c2:fb:b4:82:c8:63:34:f5:f9:55:ee:37:d4:66: bc:ce:5f:7d:83:27:7b:53:7d:b9:a6:7d:ca:71:9e:5d:9f:dc: bc:27:22:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbh5MXo6ErTChdrqZq5bRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjUxMjExMjIwMDMzWhcNMjUxMjEyMjIwMDMzWjAzMTEwLwYDVQQD EygzNGMwYmNiZTBjMTI4NDRmZGQxNWJkNDQyZDM3MjBlMzUxZDcxMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd+gYOvfOz3qYJhxquk/BORf5TaE ld/vi+sE8QVjZqNLb5KM+5Rns2CxKIOra7MQkGj70LqV6N3weqWkTsv6dLj/uO+q e3Pu7lRGjoWE6b+0+6ictr/l3zAxp1KCLBZROwgrdlj931jx9xuflFgMMTEUVfDL GUZ2N9qkIaFueEZQtxWpmfOnynlnZlcFEiA4GyJKilSGGHI85lhq+9gy6wgds6w1 g5paz4MsKDIw1F2pCytwTvpyJ/xBTlNWr/bsLq0h2Oy2qGRGqMeJliiUatIfQCoq ZLIAmwGruRNagVBlMF7hg3vRwN1gDNghfCqUUAeT2C1K4QiQEOXToFGWQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTAvL4MEoRP3RW9RC03IONR1xH6MB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAZYgHHJ KmjrvG0G8MQjrQ4sFEu0/CQ0Xf1JmdmZptqWu3RAUfoH0juN+kibFBsf9KXJqufL OX8gWFOvFV7apPNT7JjYWtO71O+UfSXLXL0oco2nM+f+Oy98FKjUPfMVKn30R7Lo I8I+8ydz8X9qF464l199w6jXCiJHQa25LJLL1wcnTkmX9FMVfC8Hh7OYQfkMuMvi XwYUfAHyhJhHEFo65dfh1avTNsVZCrvGJF8k+kGAJ0l+SeXsc1vPgK/zFqjK18+b WnUA90Z9sCInWZNfjn9WGcTWmmfn3cL7tILIYzT1+VXuN9RmvM5ffYMne1N9uaZ9 ynGeXZ/cvCci0g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:21 2025 by rpki-client