This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File:                     r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier:          xrtYxOzMYFQAtMvgwgtY9xjE2SZA4z59DTdXsX07Z0k=
Subject key identifier:   72:AD:4E:58:15:5C:EC:AB:99:04:D2:EE:87:05:9F:B5:4D:B3:F7:91
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       019AF276F2C65BEEC01C538A13ACFBE0E1D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number:          13F3
Signing time:             Sat 06 Dec 2025 07:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:12 +0000
Files and hashes:         1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=)
                          2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
                          3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
                          4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
                          5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
                          6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
                          7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
                          8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
                          9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
                          10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
                          11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
                          12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
                          13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
                          14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: ZO4AkUKv9Cf2rFtW0K7aIEUDjqNpY+i1VfIOzTmBGkg=)
                          15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
                          16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
                          17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=)
                          18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:f2:c6:5b:ee:c0:1c:53:8a:13:ac:fb:e0:e1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Dec  6 07:01:12 2025 GMT
            Not After : Dec  7 07:01:12 2025 GMT
        Subject: CN=72ad4e58155cecab9904d2ee87059fb54db3f791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:88:8b:9b:cf:7b:42:fc:fb:1d:99:37:47:
                    0f:7f:ae:6a:11:54:7b:3e:d8:33:20:d0:cb:d3:32:
                    e8:74:0a:79:56:cd:ed:b6:b1:a9:10:69:7b:35:69:
                    08:87:23:1e:0c:34:67:8a:66:c4:14:f0:22:84:bd:
                    3e:b3:b7:3c:57:a4:86:b4:bd:26:46:d2:31:ed:88:
                    58:70:12:18:f9:2b:db:cf:e2:13:0f:36:72:6f:b4:
                    89:aa:7d:87:be:5e:aa:b0:d7:6e:ec:db:98:97:f1:
                    cc:21:57:c2:60:8a:e2:d7:3b:9c:94:c8:d2:cd:e9:
                    00:3e:88:4f:f0:8d:14:13:b5:e5:31:06:5f:77:b3:
                    d2:c7:39:e7:8c:19:9a:7f:f3:7b:0f:7c:5e:7c:d4:
                    35:73:7f:33:6f:2e:e3:d0:fc:17:22:0b:60:f3:ba:
                    8b:ec:ed:66:6d:18:8b:29:67:4e:ea:99:15:71:c7:
                    b5:39:c2:4f:0f:39:60:2a:44:65:7a:f1:60:b8:27:
                    8e:4e:27:36:2b:02:02:0f:d9:54:77:7c:8f:2f:76:
                    e0:0e:32:b1:1f:87:72:84:57:53:a7:94:bb:c6:4c:
                    e7:86:cd:b7:b9:fa:e0:74:7f:e4:fb:4a:dd:1b:3e:
                    77:f5:12:6f:49:6f:4e:a5:1e:d5:53:59:fd:dd:6b:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AD:4E:58:15:5C:EC:AB:99:04:D2:EE:87:05:9F:B5:4D:B3:F7:91
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:30:a1:08:11:2a:0e:27:89:85:f8:24:69:e7:34:b5:d4:cc:
         c6:fc:90:1c:51:2e:01:f5:de:47:1a:b0:3c:55:1f:4b:7d:71:
         6e:93:07:a7:ff:76:25:14:9f:21:b5:9b:9b:51:68:af:a3:dd:
         18:7f:3d:e9:95:08:8d:df:9e:fc:2a:22:e8:95:16:83:bb:af:
         61:59:77:16:a4:70:31:bf:fc:84:3c:99:cd:a9:61:a5:30:a2:
         50:2e:e8:d1:5e:44:60:6b:32:8a:4e:29:68:e6:3e:77:30:4c:
         ac:e4:3a:d2:ad:84:7f:ff:ad:cf:07:a9:36:f8:17:75:ad:04:
         f0:bf:43:c2:45:2b:f5:99:bb:62:86:6b:d9:75:aa:12:e3:ab:
         e1:37:62:66:eb:cf:ae:64:9e:2c:2b:da:d1:78:d2:15:04:a0:
         b7:42:c9:11:45:3e:68:fc:89:be:ea:b7:b2:f8:82:97:71:c1:
         4d:fc:bc:67:dc:39:e4:74:cf:dd:cd:eb:ad:9c:f0:0f:42:54:
         a1:5e:c0:c6:dd:9b:a7:9d:f9:5d:a8:5b:50:c8:2c:65:00:0e:
         56:14:30:b9:23:39:b6:93:b1:7e:42:0e:09:0c:c8:5f:1c:44:
         c2:85:ca:b2:37:b9:a1:14:8e:d0:d5:b6:a7:b6:9b:1e:5d:b4:
         72:e0:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:09:27 2025 by rpki-client