This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json) Hash identifier: qPULccd9Sa5/bIFPZTtO2fo1jFkEtplyKjjeoFjVkFM= Subject key identifier: 69:6A:B1:0F:1F:08:F0:26:46:48:7B:AB:26:20:BC:CF:33:84:C6:2F Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Certificate serial: 019AF509BAE0D45365361228BEA173807F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:00:46 +0000 Manifest this update: Sat 06 Dec 2025 19:00:46 +0000 Manifest next update: Sun 07 Dec 2025 19:00:46 +0000 Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: YTB7ibnX+0jyc+tHINPuVCYtMp+PkpJjLUVlyIcjf14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ba:e0:d4:53:65:36:12:28:be:a1:73:80:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8 Validity Not Before: Dec 6 19:00:46 2025 GMT Not After : Dec 7 19:00:46 2025 GMT Subject: CN=696ab10f1f08f02646487bab2620bccf3384c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:78:d5:37:24:d0:c6:8b:e0:63:75:a0:21: dc:a0:51:19:99:56:93:c6:77:b5:65:d3:62:b9:f3: 6a:62:59:ff:a9:42:76:f5:e3:df:15:6c:ec:db:0f: 29:27:c9:f1:74:4f:35:d8:cb:ed:ad:e1:94:fc:05: 95:76:d9:22:ee:1b:76:6a:18:e8:41:ed:61:c8:ed: 9c:44:f4:ec:7e:bb:19:4c:7c:53:78:74:43:33:5b: 5c:5f:c9:0b:6b:fd:3b:60:78:42:21:88:16:c2:57: db:5a:f1:74:5f:27:70:3f:cd:b9:7f:65:11:29:c9: 08:f5:2c:1e:a8:85:a8:cd:bf:9f:01:27:c0:2a:b6: bc:e1:ff:ff:00:5e:9e:07:39:ee:83:9a:6f:52:58: 1e:a2:e4:7d:7b:32:0e:ed:a8:c9:fc:01:89:a9:44: 0c:69:92:03:06:3a:45:eb:7b:3e:2f:2c:55:52:b9: e6:38:a6:99:d3:0c:bf:90:a3:55:4d:ee:10:11:67: a7:24:ec:b1:9a:70:ff:22:09:b6:2e:4c:da:be:90: ce:f0:8e:a1:0a:ba:fe:2b:66:56:8b:f7:89:40:57: 1f:29:d0:a2:18:11:60:15:d9:86:bf:f8:21:33:6e: 88:e7:16:c6:d2:3f:3a:19:cf:41:90:e7:1a:bd:d3: 38:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6A:B1:0F:1F:08:F0:26:46:48:7B:AB:26:20:BC:CF:33:84:C6:2F X509v3 Authority Key Identifier: keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a0:95:50:ef:f0:0a:25:d4:02:71:06:49:47:0d:d5:2c:40: 24:de:3b:a0:78:cf:da:27:10:e1:6a:ea:a7:08:f2:97:09:a4: 29:30:2d:92:00:fd:af:9b:89:e2:f4:5b:bf:18:4c:34:1a:86: ae:ab:c2:79:62:d7:37:33:67:e2:be:df:9c:bc:3b:e4:fd:d4: 7f:e4:65:7d:9f:8f:3b:10:bb:92:4a:d9:73:6c:72:d2:e1:2e: ed:e2:47:d9:e7:17:ac:e2:9d:44:6d:52:8c:a3:15:6a:4b:fa: e1:c1:43:2a:8c:69:08:03:be:c4:34:1d:b0:2b:a6:fb:9a:71: 3a:08:d4:fb:10:9e:59:9c:28:d2:1a:d1:cb:d1:11:29:5e:b9: ff:d1:8b:0c:17:15:4e:13:4f:29:f6:55:35:e4:25:7a:18:de: fa:27:08:f4:70:32:1f:50:58:7f:7f:28:2d:01:a3:fe:80:3b: 70:e5:92:0c:13:cd:54:2e:50:a1:60:11:40:7c:b1:4d:51:ee: 4f:4c:a0:97:bf:3d:e6:79:b6:61:e4:bb:60:2b:32:75:c5:d4: 7b:d9:ca:d5:ec:32:49:69:00:0a:6a:d4:ae:df:ac:d8:34:b4: 7b:c6:20:ba:26:1a:1f:2c:e2:56:68:47:88:5d:d1:9d:75:d5: 17:a2:01:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cbrg1FNlNhIovqFzgH9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw YjIzZDgwHhcNMjUxMjA2MTkwMDQ2WhcNMjUxMjA3MTkwMDQ2WjAzMTEwLwYDVQQD Eyg2OTZhYjEwZjFmMDhmMDI2NDY0ODdiYWIyNjIwYmNjZjMzODRjNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtal41Tck0MaL4GN1oCHcoFEZmVaT xne1ZdNiufNqYln/qUJ29ePfFWzs2w8pJ8nxdE812MvtreGU/AWVdtki7ht2ahjo Qe1hyO2cRPTsfrsZTHxTeHRDM1tcX8kLa/07YHhCIYgWwlfbWvF0XydwP825f2UR KckI9SweqIWozb+fASfAKra84f//AF6eBznug5pvUlgeouR9ezIO7ajJ/AGJqUQM aZIDBjpF63s+LyxVUrnmOKaZ0wy/kKNVTe4QEWenJOyxmnD/Igm2LkzavpDO8I6h Crr+K2ZWi/eJQFcfKdCiGBFgFdmGv/ghM26I5xbG0j86Gc9BkOcavdM45wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlqsQ8fCPAmRkh7qyYgvM8zhMYvMB8GA1UdIwQY MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt NWViNzVjMjMxOGFhLzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqCVUO/w CiXUAnEGSUcN1SxAJN47oHjP2icQ4WrqpwjylwmkKTAtkgD9r5uJ4vRbvxhMNBqG rqvCeWLXNzNn4r7fnLw75P3Uf+RlfZ+POxC7kkrZc2xy0uEu7eJH2ecXrOKdRG1S jKMVakv64cFDKoxpCAO+xDQdsCum+5pxOgjU+xCeWZwo0hrRy9ERKV65/9GLDBcV ThNPKfZVNeQlehje+icI9HAyH1BYf38oLQGj/oA7cOWSDBPNVC5QoWARQHyxTVHu T0ygl7895nm2YeS7YCsydcXUe9nK1ewySWkACmrUrt+s2DS0e8YguiYaHyziVmhH iF3RnXXVF6IBbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:21 2025 by rpki-client