This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File:                     547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier:          5JC0Ky/zi53Rk4El1iD4Dv2UhTZgcRvF4y2MIh3pTNQ=
Subject key identifier:   50:83:2B:EC:7A:61:71:16:2D:A6:DE:A9:C6:46:2C:12:4A:05:2C:35
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       41FE76EB7FA38E2BC8338BE3615554D9E9E8F2C5
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number:          0111
Signing time:             Sun 25 Jan 2026 03:41:42 +0000
Manifest this update:     Sun 25 Jan 2026 03:36:42 +0000
Manifest next update:     Mon 26 Jan 2026 05:37:42 +0000
Files and hashes:         1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=)
                          2: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=)
                          3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=)
                          4: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: Lp1A7C/Fi9SLrH3lX385IGf1RW6gooBrqwglHjQ6lZ4=)
                          5: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fe:76:eb:7f:a3:8e:2b:c8:33:8b:e3:61:55:54:d9:e9:e8:f2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Jan 25 03:36:42 2026 GMT
            Not After : Jan 26 05:37:42 2026 GMT
        Subject: CN=50832BEC7A6171162DA6DEA9C6462C124A052C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:2d:3f:9a:e1:3f:d7:1e:a6:59:c0:d5:eb:
                    22:b3:58:f3:0c:48:57:ab:93:ef:df:5e:f2:a0:70:
                    6e:ee:bf:66:9c:e0:6f:b7:23:06:4e:fd:bb:aa:73:
                    76:56:8a:c9:a8:4a:a0:e8:43:7d:6f:f4:52:a6:fc:
                    52:99:90:27:ae:d0:df:e1:5c:3b:0b:65:7c:3e:80:
                    a3:83:5c:b7:6a:41:be:3f:05:1b:c5:13:d6:9b:70:
                    2a:ab:86:6f:1e:50:7a:47:9d:e0:4b:b2:d0:4e:82:
                    46:f6:cb:87:ef:fd:b8:c8:72:93:ec:92:2e:e1:38:
                    a3:90:26:39:15:c2:4e:91:0b:2f:c6:c9:93:84:76:
                    a6:d0:ed:2b:eb:f1:0e:b0:53:fa:02:2f:d2:21:8c:
                    28:34:ad:65:4c:3f:b9:f0:53:9a:1d:5a:71:2b:75:
                    2a:f3:42:99:71:c8:74:76:86:85:3a:1a:ac:5e:25:
                    69:97:2d:5e:d2:04:ed:89:34:5f:e2:93:fd:ce:f2:
                    55:d0:12:83:fc:bd:66:97:7c:75:c7:5e:94:9c:39:
                    f4:82:d5:1a:64:ed:10:1c:2d:45:9e:9e:97:70:1a:
                    4f:d6:7a:b2:a6:78:86:cd:f7:eb:1d:25:b2:1f:7b:
                    c0:8d:f0:6b:bd:27:ef:95:82:ab:05:02:de:e1:4b:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:83:2B:EC:7A:61:71:16:2D:A6:DE:A9:C6:46:2C:12:4A:05:2C:35
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:5b:a8:37:ff:f6:e4:aa:15:53:40:a0:e8:ae:04:49:b2:
         15:85:51:fa:ed:e2:6a:27:bf:b7:e0:a4:10:d4:fc:73:25:87:
         3c:a6:26:b4:8c:93:25:e1:f3:3f:8c:9c:e2:b3:23:1e:e8:47:
         dd:74:d0:c4:80:f0:c6:cd:06:7a:7d:19:dc:13:97:4f:4b:62:
         b9:a9:b8:25:88:37:be:31:50:f6:26:ca:ed:72:96:b4:fc:21:
         e8:5a:d2:6f:48:37:97:4e:de:f9:3e:11:fe:38:38:a9:a1:07:
         c1:5a:6f:90:03:8e:34:97:a5:f8:f7:89:16:dd:cd:b1:1c:a1:
         00:b3:05:22:d4:8a:54:bd:70:98:cc:84:fd:9d:74:d5:39:34:
         cf:28:cc:b2:13:6c:c7:73:67:50:ec:9d:ee:e1:27:8b:24:4b:
         de:b7:8c:ad:2a:39:fd:5c:71:c7:b8:0b:ad:5d:ae:43:1b:65:
         a1:c0:fe:5b:6f:36:4a:bf:69:ab:d5:35:28:72:03:76:4b:59:
         28:bf:78:f8:43:8f:38:a3:23:2b:21:b2:97:5f:05:d5:c8:02:
         71:86:8a:ae:41:17:3f:81:a4:2c:bc:7d:09:09:9f:41:55:aa:
         2c:e8:f1:92:63:d6:f4:a0:c2:2b:4e:41:73:46:15:fd:69:34:
         47:ba:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:07:28 2026 by rpki-client