This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File:                     547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier:          IxnIt/3xeFILlDEsWQjkPzuMbLCq0dbscF5KVmjLzoc=
Subject key identifier:   B7:0B:57:6D:74:5D:06:87:17:DB:E1:FF:57:80:9A:7A:D8:09:86:DC
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       3CC5C342AAD80E9CA96B25F5F1FEBACD9E1556A2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number:          CF
Signing time:             Sat 06 Dec 2025 09:51:02 +0000
Manifest this update:     Sat 06 Dec 2025 09:46:02 +0000
Manifest next update:     Sun 07 Dec 2025 13:25:02 +0000
Files and hashes:         1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=)
                          2: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: Q5hYTVWCsUPCC3MPjhSIpR4TZIMFourCvKlLmu/8lr0=)
                          3: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=)
                          4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=)
                          5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c5:c3:42:aa:d8:0e:9c:a9:6b:25:f5:f1:fe:ba:cd:9e:15:56:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Dec  6 09:46:02 2025 GMT
            Not After : Dec  7 13:25:02 2025 GMT
        Subject: CN=B70B576D745D068717DBE1FF57809A7AD80986DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:d7:57:0d:ad:0e:f8:1a:0c:18:39:ae:b3:
                    9b:37:b3:06:41:78:8c:84:04:9c:b4:05:65:9f:72:
                    54:aa:d9:93:bd:75:22:11:98:54:42:1f:32:20:a6:
                    6c:c0:48:fb:7f:18:5f:97:fe:3a:6f:93:40:37:86:
                    bb:67:84:a6:02:33:b0:70:c7:58:35:87:92:dc:95:
                    07:41:27:30:85:77:cb:22:d7:06:f8:5d:e4:6e:ca:
                    34:b6:db:cb:56:8f:05:05:5b:e5:19:7a:41:b2:14:
                    31:ca:ad:9a:71:cb:6d:07:0a:f6:f0:89:a8:3f:83:
                    98:f3:b6:3e:93:fe:28:48:eb:bb:2e:9a:68:30:59:
                    2d:dc:b3:48:28:ce:ed:6d:70:64:d0:f0:f3:c1:3c:
                    6d:93:19:f3:81:1d:65:30:c2:c6:0a:7c:e2:e4:15:
                    53:12:44:6c:e5:b2:42:e1:16:db:41:1a:c4:ad:8f:
                    27:52:b6:8e:fa:ac:cb:fb:39:1d:e4:a0:b0:b6:23:
                    c3:d4:cc:10:7c:7b:2a:d7:79:51:f2:c6:87:7a:65:
                    15:70:34:91:81:4b:b6:7c:4b:25:d6:56:0e:1e:ba:
                    aa:f1:31:fd:3f:ae:41:80:20:3c:f8:00:81:5b:53:
                    13:4d:89:71:b5:42:5c:ee:5f:3c:cf:ff:28:ef:a2:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:57:6D:74:5D:06:87:17:DB:E1:FF:57:80:9A:7A:D8:09:86:DC
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4d:7c:c8:ba:b5:14:3b:24:28:95:43:26:a5:f1:a6:5b:6e:
         44:54:1d:e7:c6:b0:68:5e:07:78:1d:db:15:ac:8b:16:13:77:
         d4:ed:55:45:a8:c7:5b:bc:60:bf:8c:f2:c2:02:31:42:d6:57:
         31:5c:d9:a5:3c:1b:90:f0:c8:cb:a5:cb:62:55:48:84:b9:f2:
         3c:06:51:8f:5f:30:71:89:75:81:dd:88:d4:66:3a:02:aa:3c:
         7d:ba:7f:57:b5:4b:34:cb:31:e8:8b:0e:f0:8b:b4:61:0d:f6:
         be:21:05:8a:17:fb:35:7d:a9:dc:38:c8:a0:9c:f8:45:f1:8c:
         a4:8e:ef:74:1d:bc:00:a1:f5:84:b9:ea:e3:f2:b2:9f:84:57:
         94:03:32:bc:c8:78:47:2a:8c:a7:6c:64:4c:73:26:c4:db:b4:
         c0:3d:5b:a1:6b:fa:6e:b0:84:c3:67:75:25:02:46:4d:14:6f:
         cc:6f:b9:54:ed:12:eb:63:6b:78:ac:47:3c:fe:5c:a2:68:b9:
         f1:df:ca:8d:49:46:57:a6:7e:5b:d0:f9:de:9e:64:4f:c3:fc:
         39:f6:5a:12:0d:7d:af:7d:a9:8e:25:3f:c2:65:f1:91:c7:2f:
         43:53:16:65:38:2d:1f:11:6c:53:a7:e2:35:0a:73:22:a9:30:
         12:83:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:54:06 2025 by rpki-client