This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File:                     RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier:          XhHD1plyLLaFyQdGMaerFj2Qu8zeatna/06ELkzyJyo=
Subject key identifier:   D8:59:49:F0:89:6D:80:4B:8E:15:1F:5E:0E:5D:57:08:97:E9:0B:9B
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer:       /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial:       019B59E420DB63B28E86AB70B31ADBB8C3B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number:          1795
Signing time:             Fri 26 Dec 2025 09:01:21 +0000
Manifest this update:     Fri 26 Dec 2025 09:01:21 +0000
Manifest next update:     Sat 27 Dec 2025 09:01:21 +0000
Files and hashes:         1: 5y2kmNeJMXCKaK5RQEOuPAHxync.roa (hash: +iOlHGykmwVB2psLQ2/CvkEGl5oc0dj/MknlrPXW7x4=)
                          2: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: QSlgF54xS+2+Ed2b1rbomf5/deP9Fqx03PLk1IfFiIg=)
                          3: Yq0huFswklaPitVVLqZv-O2tkbM.roa (hash: C0opR6K7G1AduUhRe7rn8bDCZJFjjfJanw4aLtFBkSU=)
                          4: cXFFQKzh5dcFU3XtaeNBQMpNoFA.roa (hash: Bc6gK83Xo5w6DNn5Y2mcDoH/NwYwNU2Zn8rgLenmliY=)
                          5: g1VGGGtKAS2XbhKrs3MA7nHo3aM.roa (hash: o8LadmIddOz8S+xi6pqRG7xJKtwUoDNfh4I9jUmSmsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:59:e4:20:db:63:b2:8e:86:ab:70:b3:1a:db:b8:c3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
        Validity
            Not Before: Dec 26 09:01:21 2025 GMT
            Not After : Dec 27 09:01:21 2025 GMT
        Subject: CN=d85949f0896d804b8e151f5e0e5d570897e90b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:69:1b:cf:6d:2b:cd:ed:50:8e:23:6f:44:98:
                    a4:57:73:e5:96:5d:5e:f9:17:8c:82:8c:83:f7:7b:
                    72:56:65:3f:ac:44:ab:8b:bf:53:5a:ab:b5:65:b7:
                    a1:1c:b3:99:a8:e5:34:21:7f:e7:c3:99:90:af:96:
                    72:7d:4a:d4:41:ba:be:f1:ae:6f:ed:eb:71:eb:93:
                    f5:18:dc:a7:1c:38:c6:90:c9:e5:3a:a6:95:2e:49:
                    68:48:c7:bb:8e:f9:91:da:87:7a:5f:c0:86:04:ec:
                    c6:b7:20:dd:a0:7f:62:6a:81:9e:4b:6a:7a:b6:b8:
                    23:94:b8:3c:89:77:00:8c:c1:e2:fe:72:52:f7:b7:
                    c1:26:1d:c9:ae:1a:45:f9:92:1c:61:7f:47:b1:37:
                    8b:13:5b:a1:18:15:eb:a8:83:f7:cd:aa:f7:ea:6d:
                    02:70:0a:8d:39:03:fa:95:4a:e7:44:08:b8:41:17:
                    e6:6f:3d:e9:af:87:7c:53:af:2a:17:ff:71:24:2c:
                    84:0a:d6:82:3c:dd:6c:2d:bf:12:13:4a:cd:aa:2d:
                    0f:49:b4:fb:d2:0d:9b:fa:a9:08:b3:ac:bc:8c:5d:
                    84:46:35:7e:3d:91:6f:fb:7c:5e:46:a9:ef:ca:68:
                    ed:52:a9:7f:e6:91:93:b0:53:da:82:ed:cf:be:0e:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:59:49:F0:89:6D:80:4B:8E:15:1F:5E:0E:5D:57:08:97:E9:0B:9B
            X509v3 Authority Key Identifier:
                keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:71:33:44:2a:f6:c4:15:67:b3:0e:72:a2:9f:ed:47:b2:
         4a:44:6e:f0:c0:b4:1a:c9:73:f0:9f:b5:7b:57:b0:e9:3c:59:
         b5:32:26:62:87:c4:37:c3:81:f8:a4:d0:f5:96:59:73:1d:83:
         79:5e:79:24:b9:b9:b1:0f:93:9a:ca:92:8d:74:cb:44:ec:3b:
         6f:bb:ee:f4:2d:07:dd:82:2b:4b:a9:17:6f:e8:72:b9:6d:b4:
         b5:ce:34:89:e9:fd:61:3e:03:8b:cc:04:63:f2:9b:ea:3c:3a:
         d6:db:d2:af:4a:20:fd:aa:85:85:bd:4c:54:a7:7a:90:67:cc:
         73:27:55:46:78:e2:58:67:44:21:5a:e3:f6:be:c3:1b:49:10:
         7d:d8:7e:59:08:f0:5d:75:bc:ce:60:f0:30:ee:da:0f:6b:5c:
         45:b6:99:1c:bb:c9:18:a7:31:01:48:7f:eb:1f:51:35:b7:d6:
         7f:2a:3e:af:c9:46:87:4d:e2:e6:de:b1:85:eb:72:b2:5f:08:
         db:cf:2c:b7:61:1b:20:04:4e:b4:c3:6b:76:ef:d5:df:75:3c:
         87:4a:e0:e9:a7:ac:24:fa:17:57:88:c4:89:c1:ef:e0:97:6d:
         d4:09:56:07:a3:7d:64:9b:e9:4b:1a:08:c1:7b:a5:46:0b:b1:
         9b:81:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:04 2025 by rpki-client