This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json) Hash identifier: QeZJbNGWQFtEL/AFoJRlCnCCOaPex8hmgEu0obgITvg= Subject key identifier: F1:2F:20:0F:50:45:25:6D:54:C9:6A:9C:15:FE:79:D4:F1:91:F0:9A Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019B390F2A61386D1211D7260DBE4603AF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 00:00:53 +0000 Manifest this update: Sat 20 Dec 2025 00:00:53 +0000 Manifest next update: Sun 21 Dec 2025 00:00:53 +0000 Files and hashes: 1: 5y2kmNeJMXCKaK5RQEOuPAHxync.roa (hash: +iOlHGykmwVB2psLQ2/CvkEGl5oc0dj/MknlrPXW7x4=) 2: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: L5YIEAc3LtuXG0hxh9ok/of7bGsVvpf6MWDM5CbspCA=) 3: Yq0huFswklaPitVVLqZv-O2tkbM.roa (hash: C0opR6K7G1AduUhRe7rn8bDCZJFjjfJanw4aLtFBkSU=) 4: cXFFQKzh5dcFU3XtaeNBQMpNoFA.roa (hash: Bc6gK83Xo5w6DNn5Y2mcDoH/NwYwNU2Zn8rgLenmliY=) 5: g1VGGGtKAS2XbhKrs3MA7nHo3aM.roa (hash: o8LadmIddOz8S+xi6pqRG7xJKtwUoDNfh4I9jUmSmsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:2a:61:38:6d:12:11:d7:26:0d:be:46:03:af:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Dec 20 00:00:53 2025 GMT Not After : Dec 21 00:00:53 2025 GMT Subject: CN=f12f200f5045256d54c96a9c15fe79d4f191f09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:c2:f3:a7:c4:f3:56:ee:b9:ac:17:cd:2d: ed:ff:d1:bf:a8:e1:0f:9f:0a:a6:56:83:4a:54:5e: ee:22:a9:e4:a2:89:87:66:b1:f7:14:e3:26:31:95: d6:17:38:6f:15:92:ac:06:c5:86:93:18:b3:eb:be: ce:63:51:bd:30:f9:cf:18:cf:38:df:9d:48:55:8f: 4c:fb:bc:12:41:40:74:fc:1f:36:c4:9c:b6:6e:4a: 88:82:31:91:16:b4:93:e1:90:f8:4c:33:09:40:9a: 6f:c5:22:f8:de:3e:79:56:22:f7:42:73:1f:13:ce: 31:b4:6e:8f:33:ed:fc:f3:7a:51:b3:ec:d1:02:c3: a0:ba:fa:cf:27:bd:da:86:14:6e:80:11:c7:71:ea: 02:87:ec:c6:57:2b:aa:f0:10:5b:7d:b2:0b:c5:f4: 94:37:65:59:e4:18:e8:78:b8:b9:32:a6:44:0f:fa: f9:fe:7e:23:ef:6e:09:df:1c:4c:8f:0b:24:e2:44: a9:35:a9:d4:bd:3b:8e:8b:4a:1e:2d:fc:61:57:06: aa:54:9b:46:7a:2a:76:af:f4:ee:5b:cc:c5:d3:7a: 5e:11:58:00:51:0d:9f:31:13:72:66:f1:6b:14:a2: 67:77:f8:e2:44:8b:c4:85:c8:bb:ee:98:b2:b2:61: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2F:20:0F:50:45:25:6D:54:C9:6A:9C:15:FE:79:D4:F1:91:F0:9A X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cd:db:37:95:33:24:82:2f:63:b5:26:db:7c:91:8c:ff:41: 9a:a7:ee:d5:88:32:c8:1a:10:a9:19:45:30:bc:32:b1:bf:0f: 4f:5f:c4:f8:32:03:2a:84:39:71:92:d4:db:7a:60:61:6f:55: 51:88:1b:df:b3:d6:e0:a1:63:02:64:71:47:1b:27:6d:53:3a: cb:20:52:61:38:95:8d:66:16:ef:cd:da:2a:af:b6:d3:13:c5: 21:34:b8:bc:97:52:ec:ce:d3:0a:17:cf:b7:18:fa:30:81:b6: d7:06:04:42:96:26:5a:98:c4:0c:2d:9f:b0:00:2a:86:c4:90: b6:a9:f1:3a:ce:39:f1:7e:77:ca:e9:7b:75:48:ed:97:6f:fc: 14:0b:d1:24:25:ed:0b:e9:de:c0:52:da:83:56:fa:22:71:d3: 9b:6a:3c:e6:91:c7:30:76:44:49:50:14:56:60:b8:d0:fe:3c: b0:0e:8e:1a:a5:32:7d:8e:e1:ce:48:dd:2a:dc:ff:cb:d3:d2: ee:bd:25:ce:5e:f2:a3:00:ab:f5:ed:47:98:c1:64:3a:5d:5d: ef:4b:31:44:85:41:12:c1:99:67:56:7d:63:9c:db:aa:51:51: 6c:50:05:97:88:b8:b5:c3:5f:e3:19:85:6b:d7:83:5c:15:f7: cb:75:95:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DyphOG0SEdcmDb5GA6+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjUxMjIwMDAwMDUzWhcNMjUxMjIxMDAwMDUzWjAzMTEwLwYDVQQD EyhmMTJmMjAwZjUwNDUyNTZkNTRjOTZhOWMxNWZlNzlkNGYxOTFmMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NrC86fE81buuawXzS3t/9G/qOEP nwqmVoNKVF7uIqnkoomHZrH3FOMmMZXWFzhvFZKsBsWGkxiz677OY1G9MPnPGM84 351IVY9M+7wSQUB0/B82xJy2bkqIgjGRFrST4ZD4TDMJQJpvxSL43j55ViL3QnMf E84xtG6PM+3883pRs+zRAsOguvrPJ73ahhRugBHHceoCh+zGVyuq8BBbfbILxfSU N2VZ5BjoeLi5MqZED/r5/n4j724J3xxMjwsk4kSpNanUvTuOi0oeLfxhVwaqVJtG eip2r/TuW8zF03peEVgAUQ2fMRNyZvFrFKJnd/jiRIvEhci77piysmG0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEvIA9QRSVtVMlqnBX+edTxkfCaMB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM3bN5Uz JIIvY7Um23yRjP9Bmqfu1YgyyBoQqRlFMLwysb8PT1/E+DIDKoQ5cZLU23pgYW9V UYgb37PW4KFjAmRxRxsnbVM6yyBSYTiVjWYW783aKq+20xPFITS4vJdS7M7TChfP txj6MIG21wYEQpYmWpjEDC2fsAAqhsSQtqnxOs458X53yul7dUjtl2/8FAvRJCXt C+newFLag1b6InHTm2o85pHHMHZESVAUVmC40P48sA6OGqUyfY7hzkjdKtz/y9PS 7r0lzl7yowCr9e1HmMFkOl1d70sxRIVBEsGZZ1Z9Y5zbqlFRbFAFl4i4tcNf4xmF a9eDXBX3y3WVxw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:29:27 2025 by rpki-client