This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier: xrtYxOzMYFQAtMvgwgtY9xjE2SZA4z59DTdXsX07Z0k=
Subject key identifier: 72:AD:4E:58:15:5C:EC:AB:99:04:D2:EE:87:05:9F:B5:4D:B3:F7:91
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 019AF276F2C65BEEC01C538A13ACFBE0E1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number: 13F3
Signing time: Sat 06 Dec 2025 07:01:12 +0000
Manifest this update: Sat 06 Dec 2025 07:01:12 +0000
Manifest next update: Sun 07 Dec 2025 07:01:12 +0000
Files and hashes: 1: 5sGdFc_1Zid-hBM7mInO1hEaSqE.roa (hash: 7bwxpMhgqxIjIH4tFXJcxeBHbkei+D+EpzaJzJaJhv4=)
2: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
3: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
4: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
5: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
6: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
7: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
8: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
9: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
10: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
11: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
12: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
13: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: ZO4AkUKv9Cf2rFtW0K7aIEUDjqNpY+i1VfIOzTmBGkg=)
15: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
16: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
17: w6--t_5wz0JDy2YG6__bLL736lk.roa (hash: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=)
18: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:f2:c6:5b:ee:c0:1c:53:8a:13:ac:fb:e0:e1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Dec 6 07:01:12 2025 GMT
Not After : Dec 7 07:01:12 2025 GMT
Subject: CN=72ad4e58155cecab9904d2ee87059fb54db3f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:88:8b:9b:cf:7b:42:fc:fb:1d:99:37:47:
0f:7f:ae:6a:11:54:7b:3e:d8:33:20:d0:cb:d3:32:
e8:74:0a:79:56:cd:ed:b6:b1:a9:10:69:7b:35:69:
08:87:23:1e:0c:34:67:8a:66:c4:14:f0:22:84:bd:
3e:b3:b7:3c:57:a4:86:b4:bd:26:46:d2:31:ed:88:
58:70:12:18:f9:2b:db:cf:e2:13:0f:36:72:6f:b4:
89:aa:7d:87:be:5e:aa:b0:d7:6e:ec:db:98:97:f1:
cc:21:57:c2:60:8a:e2:d7:3b:9c:94:c8:d2:cd:e9:
00:3e:88:4f:f0:8d:14:13:b5:e5:31:06:5f:77:b3:
d2:c7:39:e7:8c:19:9a:7f:f3:7b:0f:7c:5e:7c:d4:
35:73:7f:33:6f:2e:e3:d0:fc:17:22:0b:60:f3:ba:
8b:ec:ed:66:6d:18:8b:29:67:4e:ea:99:15:71:c7:
b5:39:c2:4f:0f:39:60:2a:44:65:7a:f1:60:b8:27:
8e:4e:27:36:2b:02:02:0f:d9:54:77:7c:8f:2f:76:
e0:0e:32:b1:1f:87:72:84:57:53:a7:94:bb:c6:4c:
e7:86:cd:b7:b9:fa:e0:74:7f:e4:fb:4a:dd:1b:3e:
77:f5:12:6f:49:6f:4e:a5:1e:d5:53:59:fd:dd:6b:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:4E:58:15:5C:EC:AB:99:04:D2:EE:87:05:9F:B5:4D:B3:F7:91
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:30:a1:08:11:2a:0e:27:89:85:f8:24:69:e7:34:b5:d4:cc:
c6:fc:90:1c:51:2e:01:f5:de:47:1a:b0:3c:55:1f:4b:7d:71:
6e:93:07:a7:ff:76:25:14:9f:21:b5:9b:9b:51:68:af:a3:dd:
18:7f:3d:e9:95:08:8d:df:9e:fc:2a:22:e8:95:16:83:bb:af:
61:59:77:16:a4:70:31:bf:fc:84:3c:99:cd:a9:61:a5:30:a2:
50:2e:e8:d1:5e:44:60:6b:32:8a:4e:29:68:e6:3e:77:30:4c:
ac:e4:3a:d2:ad:84:7f:ff:ad:cf:07:a9:36:f8:17:75:ad:04:
f0:bf:43:c2:45:2b:f5:99:bb:62:86:6b:d9:75:aa:12:e3:ab:
e1:37:62:66:eb:cf:ae:64:9e:2c:2b:da:d1:78:d2:15:04:a0:
b7:42:c9:11:45:3e:68:fc:89:be:ea:b7:b2:f8:82:97:71:c1:
4d:fc:bc:67:dc:39:e4:74:cf:dd:cd:eb:ad:9c:f0:0f:42:54:
a1:5e:c0:c6:dd:9b:a7:9d:f9:5d:a8:5b:50:c8:2c:65:00:0e:
56:14:30:b9:23:39:b6:93:b1:7e:42:0e:09:0c:c8:5f:1c:44:
c2:85:ca:b2:37:b9:a1:14:8e:d0:d5:b6:a7:b6:9b:1e:5d:b4:
72:e0:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:09:27 2025 by rpki-client