This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier: talUrW9cCzIRwU1TLSmFwKIntYvbpgjMVdK0yT7MRuA=
Subject key identifier: D8:C9:30:A5:86:C6:44:09:25:57:D3:29:DD:58:DA:19:3F:B4:40:05
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 19D24904B7BA63D71AE59B62AF2731746B81C9E2
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number: 0116
Signing time: Sun 25 Jan 2026 02:38:49 +0000
Manifest this update: Sun 25 Jan 2026 02:33:49 +0000
Manifest next update: Mon 26 Jan 2026 04:50:49 +0000
Files and hashes: 1: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
2: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
3: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
4: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
5: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
6: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
7: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
8: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
9: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
11: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
12: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
13: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: H1vTtS7SuQacHPVFBQ0IAx4ktXZikCgAXsJSRK9hJBY=)
14: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
15: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d2:49:04:b7:ba:63:d7:1a:e5:9b:62:af:27:31:74:6b:81:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: Jan 25 02:33:49 2026 GMT
Not After : Jan 26 04:50:49 2026 GMT
Subject: CN=D8C930A586C644092557D329DD58DA193FB44005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2b:b5:99:b8:2c:12:71:29:08:12:81:94:3e:
0c:15:e1:ae:6b:50:2f:dd:d3:f0:77:a6:15:90:54:
89:b8:69:97:df:bd:53:3f:37:5a:d8:23:c0:4e:f5:
68:c5:c3:25:b9:12:98:a0:15:de:bc:7b:67:f7:e7:
bc:fc:cc:91:62:8c:f4:60:66:0b:5e:be:c6:ba:42:
9d:f3:cf:ac:9d:1d:80:89:a0:58:25:fb:cb:73:37:
2b:0f:2f:7a:1f:5d:77:e8:4e:61:75:5f:e3:7a:62:
64:22:05:d3:1c:fc:c7:09:ec:31:f9:e6:d5:51:bc:
cd:f0:0e:92:22:ed:8f:36:28:28:31:82:fc:fe:ae:
8e:2d:c4:99:50:e5:2c:da:54:30:a3:e2:1d:4a:47:
ed:20:31:92:fa:af:d0:d6:db:bc:77:4c:52:41:8b:
79:3a:91:7d:f4:6d:c3:12:a1:8b:57:14:db:47:51:
53:94:12:92:29:3f:e2:9c:81:9c:ad:bf:82:8e:0f:
15:39:3a:15:f9:3f:48:dc:96:f8:a8:21:84:a9:1f:
1e:3f:67:82:1a:71:1b:56:22:8d:97:a9:45:c0:8d:
39:94:75:74:3f:84:74:2f:dd:13:e2:84:6b:f1:50:
ca:6d:8d:b3:60:c6:e2:50:16:24:b7:b3:b5:7c:5e:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:30:A5:86:C6:44:09:25:57:D3:29:DD:58:DA:19:3F:B4:40:05
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7b:9f:a0:89:1b:28:07:92:ce:70:0b:12:09:d3:2b:36:8a:
6d:ad:7a:39:73:17:c3:27:93:bc:d1:7d:6d:0b:fa:2b:c8:68:
6c:f0:2c:a1:fd:23:14:16:97:5a:15:7e:c4:70:20:82:86:7c:
62:e6:3f:cc:d0:eb:7c:dc:54:22:cc:0a:ed:60:9e:aa:d1:4d:
0f:8c:4f:d8:1c:ba:1d:d1:f6:2f:2b:f9:45:43:8f:75:6f:17:
32:3e:a1:8d:4b:17:dd:c9:34:91:10:06:9b:37:0b:e7:48:63:
a0:26:57:83:80:d1:2f:a6:fc:01:b7:06:2f:45:39:a9:76:72:
10:34:c9:b8:68:32:4f:4e:fe:c9:0e:ef:14:59:8f:d6:58:6d:
59:46:0c:1f:6f:55:2e:41:05:6c:68:65:fb:e8:ea:da:35:e8:
7a:d9:64:33:21:69:96:52:65:d9:5c:4b:69:5f:cf:bd:d0:2d:
8e:44:4e:31:9f:d3:8d:62:c4:d4:2e:19:1a:07:9c:30:3b:d2:
e3:b6:f7:bd:fc:f5:de:19:6a:d2:b4:66:00:b2:d5:1b:c5:fa:
fa:19:45:6f:c1:96:59:14:08:7e:3e:9d:8e:8a:1b:2f:e8:58:
5b:d5:2c:cb:56:e4:79:d8:67:0e:d7:9e:0c:a3:34:e6:72:43:
44:3f:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:23 2026 by rpki-client