This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File:                     6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier:          dbMB94nEnh4m4G7+MeQ3PkJnVADCBIzjKsU+FVQpsnk=
Subject key identifier:   7F:0A:B6:AF:AE:15:C9:50:DF:93:CD:91:8B:C0:2E:CE:B7:17:47:9F
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       0B9DD826899D89E84A4D0A7F766370096560B1C6
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number:          CC
Signing time:             Sat 06 Dec 2025 01:21:34 +0000
Manifest this update:     Sat 06 Dec 2025 01:16:34 +0000
Manifest next update:     Sun 07 Dec 2025 01:21:34 +0000
Files and hashes:         1: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: 5mk5uU9ewLK+/ArK2SJ4cZkR9Qu7uAlrZF2ALuTM9ro=)
                          2: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=)
                          3: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=)
                          4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=)
                          5: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9d:d8:26:89:9d:89:e8:4a:4d:0a:7f:76:63:70:09:65:60:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Dec  6 01:16:34 2025 GMT
            Not After : Dec  7 01:21:34 2025 GMT
        Subject: CN=7F0AB6AFAE15C950DF93CD918BC02ECEB717479F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:a0:48:2b:fc:6a:e0:11:de:20:6a:59:65:
                    94:10:7f:5c:89:a8:89:c1:f8:7c:e6:ea:c1:9a:64:
                    cc:88:d6:e9:26:bf:fc:f3:d4:7f:1f:0b:97:1c:14:
                    ba:50:11:ee:8e:68:ec:45:3b:aa:7e:ff:f7:3c:2d:
                    00:3a:70:8c:87:6b:df:f6:e8:6c:2c:99:94:4f:1d:
                    cd:dc:5f:cb:9c:87:f7:3b:d8:7e:c4:31:c6:4f:d2:
                    b0:94:5b:30:4c:bd:dc:f7:fd:5a:d5:f7:09:ec:54:
                    66:1b:21:79:7e:02:07:4b:df:89:dc:7b:e8:32:c2:
                    83:a4:04:6b:d2:10:e6:7d:e1:c9:20:b8:db:7c:23:
                    e6:3f:25:9b:5f:4c:cc:5f:1c:bc:75:b1:d0:f6:31:
                    d0:50:ee:98:89:5f:4e:52:b4:a7:7d:28:b1:3f:06:
                    9b:b5:45:c6:57:da:61:54:92:f1:91:8a:b9:25:14:
                    32:dc:00:c9:e1:a0:03:38:53:d3:63:83:92:e3:c5:
                    d0:b0:2c:46:85:c0:08:49:2b:e7:35:ef:d2:b9:76:
                    25:10:ff:b5:72:7c:f0:78:33:c8:84:92:63:74:b3:
                    87:06:4c:81:8d:e9:9e:3d:ff:d2:d4:f8:82:4d:f9:
                    40:4c:0d:95:56:db:1c:fb:12:d5:f7:a8:39:a3:e7:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:B6:AF:AE:15:C9:50:DF:93:CD:91:8B:C0:2E:CE:B7:17:47:9F
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:91:2d:8c:4f:2d:2d:82:23:06:7c:36:1b:30:ff:65:e3:
         3c:fa:ae:bb:29:9a:6b:03:1b:77:ad:38:5f:f2:93:61:60:95:
         ca:ed:b9:e3:99:85:55:9a:c6:de:bb:02:ac:b8:b4:74:72:8b:
         dc:b0:8d:e1:f4:2e:ea:3c:51:f9:c2:ed:17:c5:7a:95:e8:79:
         7f:3d:3a:02:d8:10:5a:63:ee:99:ca:93:73:51:d7:6b:c8:b9:
         55:2a:2f:fb:99:17:eb:2e:5b:d7:43:be:82:a6:c3:d6:c3:83:
         61:ca:45:d8:fd:13:cc:2d:cb:aa:e3:1c:fc:b2:60:2f:64:a5:
         95:5c:27:4c:8b:b9:e8:f6:61:b5:ca:24:08:2b:7e:ad:61:d1:
         7f:51:29:70:bb:d2:b4:f2:dd:db:48:bb:bc:c1:f5:7a:9c:9e:
         fc:cd:26:49:e4:c3:38:a2:98:48:32:f3:95:26:8c:b4:f4:1a:
         94:70:34:59:61:a6:c5:eb:47:40:af:59:95:b1:b0:1f:aa:d7:
         36:66:3b:de:9d:aa:57:8c:71:ca:ba:23:df:88:c5:26:65:f6:
         ae:c7:32:62:e0:b6:66:27:d0:e0:8a:26:8c:8e:3e:f0:d9:88:
         20:a0:d9:15:9e:e1:d7:1b:81:04:e7:20:c4:d2:44:c8:00:83:
         af:cb:bd:37
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIUC53YJomdiehKTQp/dmNwCWVgscYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC
MDNFMEM1MTAeFw0yNTEyMDYwMTE2MzRaFw0yNTEyMDcwMTIxMzRaMDMxMTAvBgNV
BAMTKDdGMEFCNkFGQUUxNUM5NTBERjkzQ0Q5MThCQzAyRUNFQjcxNzQ3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aKBIK/xq4BHeIGpZZZQQf1yJ
qInB+Hzm6sGaZMyI1ukmv/zz1H8fC5ccFLpQEe6OaOxFO6p+//c8LQA6cIyHa9/2
6GwsmZRPHc3cX8uch/c72H7EMcZP0rCUWzBMvdz3/VrV9wnsVGYbIXl+AgdL34nc
e+gywoOkBGvSEOZ94ckguNt8I+Y/JZtfTMxfHLx1sdD2MdBQ7piJX05StKd9KLE/
Bpu1RcZX2mFUkvGRirklFDLcAMnhoAM4U9Njg5LjxdCwLEaFwAhJK+c179K5diUQ
/7VyfPB4M8iEkmN0s4cGTIGN6Z49/9LU+IJN+UBMDZVW2xz7EtX3qDmj5zUvAgMB
AAGjggJhMIICXTAdBgNVHQ4EFgQUfwq2r64VyVDfk82Ri8AuzrcXR58wHwYDVR0j
BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy
YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx
LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp
ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1
RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT
MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBdGZEtjE8tLYIjBnw2GzD/ZeM8+q67KZprAxt3rThf8pNhYJXK
7bnjmYVVmsbeuwKsuLR0covcsI3h9C7qPFH5wu0XxXqV6Hl/PToC2BBaY+6ZypNz
UddryLlVKi/7mRfrLlvXQ76CpsPWw4NhykXY/RPMLcuq4xz8smAvZKWVXCdMi7no
9mG1yiQIK36tYdF/USlwu9K08t3bSLu8wfV6nJ78zSZJ5MM4ophIMvOVJoy09BqU
cDRZYabF60dAr1mVsbAfqtc2ZjvenapXjHHKuiPfiMUmZfauxzJi4LZmJ9DgiiaM
jj7w2YggoNkVnuHXG4EE5yDE0kTIAIOvy703
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:17 2025 by rpki-client