This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File:                     r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier:          v49uQ9CkkXthnOk034XVMdETA6mRccts5O7xztS7v3M=
Subject key identifier:   2D:A1:2F:EE:33:6E:F7:DE:45:95:62:79:58:D0:A7:E3:03:7A:03:F6
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       019BF42BC1A19B60E7323E3F9DC83EB195E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number:          1479
Signing time:             Sun 25 Jan 2026 08:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:06 +0000
Files and hashes:         1: 76SUa31tX84MMYV-5pJtl_RzfBs.roa (hash: VLwC/xTHEJsdM4oEbJXYgc2X6KgnqYrx1To2cyFfsks=)
                          2: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (hash: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=)
                          3: IqvcRngzlVCtX_OA-70dAZLFdA8.roa (hash: aY3f5nvXyrfMF4R4lR/AbKv7PaJsmbQ5UoA1+i35Mzo=)
                          4: J6RUNAmoogv7zgMLcCOwk_cTSbw.roa (hash: g+8OdmE2eYFbsqzauS740Ewhw4IU7T/U1OEITUeBDc4=)
                          5: JYSE_79beIVH7AyGREwVYhRCyTY.roa (hash: l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=)
                          6: LlTZm9TRn88VWou6DKeJrZdQgvU.roa (hash: GTQExs7+EOPrcDE70ZQ1HXMC0yUw4J5W6WVSW6HNDyE=)
                          7: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (hash: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0=)
                          8: U2Yc5skQvePijZYsWlFophc_BK4.roa (hash: gMfZmKyaceaZgToU/WPMcQ0QQiGVzdWPQc5qXxtNrpw=)
                          9: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (hash: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths=)
                          10: YLu7TqT2RSl1_BNUUxUt12edQaA.roa (hash: paF/KBHEk0JOZSKhbJ4oeNoOGAfMADsXOpIZVHL7RNY=)
                          11: aQ88EoiiajhYjpR8X9YSC2Itufk.roa (hash: 6ocE7SCCa9OYWlhJzkmE5ODfDYPaMsMSbmqpzzbM+qk=)
                          12: bKeksz2w4uplaCPFhGd2ZRXJ3L4.roa (hash: V3eyRTLr62Od4hxpOj09Jq4Nekd36hyzHMFde1nQKHM=)
                          13: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (hash: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs=)
                          14: hOWBX1aqOOkBBDPmSf04HK0FDdQ.roa (hash: TNZ6xI5xHtE38+sW0p4MVYqN1AjK+nGsdspXM65hmqg=)
                          15: hpQK8Ct69QedB3MH-Zduh7fwfI0.roa (hash: tMKgnvO9EBwmVGsim8vR529voYsTaPvcU9t25lxh9c8=)
                          16: lE9bYROvMOgfAcJMOq1buSFu5Oc.roa (hash: uM/UbNoBafoN3u4NQaCJ1CV+W48Aj8GUgTcEvh/o4kw=)
                          17: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: BLZuCy9rzznrI3dlE3GACDVttmq5kkrWjrEckTQw/Ew=)
                          18: sp2MMK9YRqm89c-c8Nk0zqZ0hl0.roa (hash: 4AR1dpezwOfRG52yq/YaU//Ei5bTQmeOkpGOb7/yTjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:c1:a1:9b:60:e7:32:3e:3f:9d:c8:3e:b1:95:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Jan 25 08:01:06 2026 GMT
            Not After : Jan 26 08:01:06 2026 GMT
        Subject: CN=2da12fee336ef7de4595627958d0a7e3037a03f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:96:fe:7f:2d:d8:23:28:c3:97:93:01:c7:
                    16:85:e8:3b:88:79:94:5f:49:6d:0d:e9:62:48:27:
                    25:e0:6e:cd:03:43:d1:dc:9b:91:57:a6:91:63:af:
                    22:d0:f3:c4:23:c5:e7:57:89:c2:fa:a1:e9:fa:a3:
                    22:21:69:0b:51:8a:2f:ba:6d:e3:11:97:71:46:10:
                    86:c0:48:a5:0e:6e:78:80:4d:f2:13:3a:f3:72:39:
                    18:4e:96:16:3a:17:b0:a7:ff:92:e1:e1:8c:41:af:
                    06:e2:3c:3a:a9:33:41:43:f1:d5:22:85:13:3d:1c:
                    ea:2b:16:35:3b:37:7e:0d:e9:5f:c0:ae:20:71:4e:
                    43:63:18:e2:b9:7e:83:bc:40:52:7a:b0:02:52:8c:
                    ff:21:36:1c:7b:d8:5e:17:02:54:58:57:bb:6f:8b:
                    42:17:ba:81:e3:57:f2:b5:1a:7a:96:a6:9c:0a:b2:
                    97:4e:38:d3:31:2c:e1:b5:9e:ba:96:e4:c5:e3:81:
                    32:1d:bb:90:98:c1:ed:39:d6:b4:39:a8:e0:88:34:
                    26:e7:02:76:a3:7a:30:cc:b3:be:c0:bb:de:b1:d9:
                    fa:81:16:c7:fb:38:d2:fd:47:dd:3c:bf:96:4c:86:
                    15:a6:66:d9:c0:ae:5d:99:7c:d4:5f:f3:73:a0:eb:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:2F:EE:33:6E:F7:DE:45:95:62:79:58:D0:A7:E3:03:7A:03:F6
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:31:55:16:eb:b0:53:d2:c6:16:bf:98:34:f1:a9:fd:57:3e:
         72:1f:28:11:63:6a:20:1c:5e:ab:e6:bc:ef:09:0a:86:90:56:
         36:24:e2:e1:71:e4:62:75:bb:6e:df:c9:57:04:ac:7a:4f:d5:
         af:4a:4b:b1:88:65:19:cf:0f:d4:3c:4b:dd:a7:7b:6c:ca:cf:
         18:7e:15:2f:2c:3c:63:ed:34:18:01:ea:52:21:e0:a2:36:04:
         96:01:fb:f7:d7:cc:cc:99:77:97:8d:a1:50:0d:89:6f:27:40:
         2d:99:39:bf:8f:0e:94:f9:2a:a8:78:a6:37:37:94:aa:b5:3c:
         16:a2:1a:73:bf:32:a1:ae:46:3f:84:90:c8:0b:4c:af:e1:5a:
         da:ed:7f:03:ec:81:a4:f9:cf:2d:a6:fa:e4:e3:ae:d2:ab:2c:
         27:08:08:d6:cc:4b:8f:77:d9:fc:d9:cd:a2:57:13:b5:c2:8e:
         f0:da:06:36:64:4b:41:2c:f1:1b:a4:f5:61:8d:36:f9:56:92:
         a7:28:c5:1f:2d:86:8f:eb:de:ae:e5:e8:4d:66:b3:2f:f9:c1:
         83:68:95:4c:64:3c:16:62:0f:72:2d:af:26:80:40:8b:60:f6:
         06:bf:8e:75:e8:94:4e:fe:14:c2:6d:a9:35:fd:c8:81:e5:bb:
         75:c8:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:23:27 2026 by rpki-client