This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
File:                     4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json)
Hash identifier:          x2jIiKl+f5apcl9Dc9U2ESgy+b4/fyj3WwmjxLNJ3oI=
Subject key identifier:   67:52:25:56:79:A9:60:C6:0B:4B:73:CE:CE:67:A9:9C:86:0D:09:70
Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
Certificate issuer:       /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Certificate serial:       757EA83C92C6BE8879EDD8C6A08EB81C60E76B8C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
Manifest number:          CC
Signing time:             Sat 06 Dec 2025 00:55:16 +0000
Manifest this update:     Sat 06 Dec 2025 00:50:16 +0000
Manifest next update:     Sun 07 Dec 2025 03:42:16 +0000
Files and hashes:         1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: Cc7u2ezWCL0CGbfzeXUekI6a+YiRNUV0AKu/NQAyuCY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7e:a8:3c:92:c6:be:88:79:ed:d8:c6:a0:8e:b8:1c:60:e7:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
        Validity
            Not Before: Dec  6 00:50:16 2025 GMT
            Not After : Dec  7 03:42:16 2025 GMT
        Subject: CN=6752255679A960C60B4B73CECE67A99C860D0970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:d5:6e:f5:ad:a6:7a:61:79:8e:47:ce:d7:
                    7d:67:49:c7:71:61:43:11:3f:9f:a0:f7:94:2e:d5:
                    d0:b7:34:bd:2c:bd:4e:67:44:f8:34:0a:28:ae:29:
                    32:77:ff:7b:84:0f:03:32:a7:1c:7b:3e:0a:cb:0c:
                    f9:0d:3c:df:d4:54:ae:69:96:bc:53:3c:ec:48:24:
                    94:2a:b0:6e:54:9c:c4:d3:8d:4f:e4:67:48:79:26:
                    87:c2:74:1c:3b:af:49:56:cc:57:6f:a6:dc:9c:32:
                    26:b2:f7:dc:98:be:6f:02:fc:67:24:69:62:c3:d4:
                    ec:92:71:19:56:db:bf:b1:18:bd:37:a9:91:63:ca:
                    47:93:9b:9c:f4:da:32:e8:88:d8:38:b2:a7:6d:7b:
                    82:40:2f:bb:f8:e1:0e:b7:e5:cd:24:64:d5:7b:34:
                    0e:f7:b3:67:44:c0:7b:f8:84:fb:e9:65:f7:76:2c:
                    14:cc:87:1b:fa:39:28:50:6a:a9:8d:e6:b4:cd:99:
                    18:1c:a2:73:a9:f6:06:37:84:e1:fe:1d:ec:86:ee:
                    7a:ba:de:d3:c3:be:c6:ec:f7:e9:7a:3a:54:63:1f:
                    82:58:c2:c3:11:b8:5e:89:d8:e2:70:ae:ff:a9:ac:
                    c8:b4:b4:56:40:67:56:2e:1d:20:a0:f2:d6:c5:b4:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:52:25:56:79:A9:60:C6:0B:4B:73:CE:CE:67:A9:9C:86:0D:09:70
            X509v3 Authority Key Identifier:
                keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7a:36:34:c8:c4:54:cc:4a:a2:2f:2a:03:cb:6d:70:3b:57:
         0f:9f:40:80:57:65:6d:83:ce:e4:62:57:eb:70:27:56:af:75:
         b7:5f:52:c3:ea:da:48:0e:37:e7:59:a3:e5:c8:2f:d4:37:27:
         ea:ff:b2:15:bf:b2:36:02:c5:63:8c:ca:20:c2:6c:39:b6:5c:
         4e:64:d7:46:7f:41:d8:b3:da:69:c3:01:59:68:a5:c8:7b:e0:
         0d:f1:38:77:ce:16:0a:5f:27:38:87:21:3e:ee:60:88:6d:56:
         48:6f:87:34:d4:ed:f8:62:0c:cb:c1:1b:ba:b5:e5:03:16:49:
         ce:1f:dd:26:a9:c0:5b:15:61:14:78:f0:ef:06:c1:ea:3d:a0:
         fe:de:28:27:1d:a8:ef:1c:dd:a9:80:b7:53:8b:ec:2e:e9:9a:
         43:9b:4d:39:dd:36:5a:1a:0c:bc:0e:0a:30:29:18:22:cc:8c:
         b3:b8:0a:3c:02:ae:f0:9c:01:75:84:03:53:40:49:69:0a:2d:
         55:91:4d:94:9a:f4:00:c6:86:5e:74:c5:cc:91:f2:1c:36:f9:
         f0:47:4d:48:90:ce:a8:b6:04:0a:55:bb:05:75:33:79:5a:b0:
         29:bf:6b:a8:23:dc:89:d8:6c:36:f6:91:6d:a6:1b:fa:78:b9:
         52:44:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:49:53 2025 by rpki-client