This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: 2Z2jcHR2eKx0EBxp1oTMre2LJMzfwFElDjzeSZbiwRM= Subject key identifier: E4:C6:8F:01:93:0E:D7:D0:F6:25:68:C2:A1:01:99:E7:39:9E:61:49 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 168C801B1CDBAEE5A367D8B8F4CC6925E2DEAC6E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: D3 Signing time: Fri 05 Dec 2025 19:58:33 +0000 Manifest this update: Fri 05 Dec 2025 19:53:33 +0000 Manifest next update: Sat 06 Dec 2025 20:16:33 +0000 Files and hashes: 1: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 2: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 3: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 4: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 5: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 6: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 7: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 8: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 9: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: TfWyFWOsW/UkMsnuGU2S43wMX9PQThlwq6BxzSeTtX0=) 10: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 11: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 12: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 13: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 14: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 15: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8c:80:1b:1c:db:ae:e5:a3:67:d8:b8:f4:cc:69:25:e2:de:ac:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Dec 5 19:53:33 2025 GMT Not After : Dec 6 20:16:33 2025 GMT Subject: CN=E4C68F01930ED7D0F62568C2A10199E7399E6149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:ff:9f:68:75:23:74:55:4f:8e:11:50:93: 68:8a:6a:51:e3:0f:fc:ce:b0:e1:49:9d:3b:ab:eb: 5a:6e:f7:bb:31:ac:b5:63:b0:41:63:cc:21:92:50: 86:56:c2:9f:55:39:15:bb:3e:2d:2c:bb:7e:90:34: 96:b6:c4:a0:78:52:02:73:29:5d:92:4e:70:37:2e: f6:fb:25:00:45:be:35:0c:95:89:b3:f4:1b:30:2e: 01:49:1d:4a:71:88:ec:00:71:17:a8:9f:5c:3d:7a: dc:f6:23:59:79:d3:59:1e:f1:e2:a0:75:4a:62:da: 26:e3:78:28:0d:dd:1a:05:ec:89:0c:3d:c0:19:b6: 06:db:5b:ac:4b:5c:dd:5b:53:71:1c:09:0a:f1:5e: db:2f:e0:d6:9f:6d:56:eb:24:28:e6:12:8e:81:92: 12:e2:4d:a0:4d:90:5c:0d:d0:7f:49:e2:28:ac:8e: 0e:3c:45:d9:a2:bb:e4:2a:f1:b4:b0:1b:84:df:44: 18:66:bc:1e:32:a0:98:15:d0:a0:47:a0:0c:f7:9e: 7f:93:d9:d4:27:ca:1b:21:e0:fe:97:76:d0:db:2f: 58:6b:b3:2b:be:27:2c:31:c3:72:95:9e:5b:c9:5c: 30:7f:b3:cb:fc:bc:f3:b9:17:d3:55:90:9d:10:cc: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:8F:01:93:0E:D7:D0:F6:25:68:C2:A1:01:99:E7:39:9E:61:49 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:0b:2a:88:2e:dc:75:ad:43:55:c6:3f:02:dd:ef:cb:68:2a: 33:87:03:74:79:5b:fd:80:85:bc:77:b6:2c:c9:22:7f:78:c7: 49:f3:df:6d:e5:e3:5e:50:5f:36:b4:cf:ab:89:4a:3a:05:f6: 1c:85:9f:c3:45:a0:41:15:ed:b0:48:ce:9d:e1:c1:a6:12:5b: 09:d5:26:9a:b6:58:e3:fa:23:0f:39:9e:f8:b7:75:1a:52:2f: 18:76:cf:9c:60:bc:16:da:60:6c:00:93:20:5c:e3:5d:7a:9e: 7f:fb:28:9d:6b:57:d9:a1:1f:6f:b7:25:eb:8b:d4:50:65:81: 9f:45:f1:aa:ef:fa:4d:d0:67:98:b7:d9:09:b2:f7:b3:a2:e4: 21:38:9a:94:2b:7d:6a:42:5c:df:0e:01:1b:d1:d2:26:9d:b2: 20:36:7c:d1:f5:f2:af:70:39:ac:f6:dd:be:2a:df:c2:05:a9: d9:7f:c0:03:b7:b5:45:2f:20:70:86:8a:b4:84:dc:c8:ab:15: f0:15:06:23:fc:cd:e6:3a:34:5a:5c:89:34:95:6b:d4:32:b6: 94:ae:1e:be:82:a8:3d:9e:65:8e:e1:8b:19:83:8b:56:b3:ab: 04:8d:a8:86:74:8b:86:32:13:af:9a:ec:ec:0e:d1:c7:4f:9a: 6c:1c:65:ee -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUFoyAGxzbruWjZ9i49MxpJeLerG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTEyMDUxOTUzMzNaFw0yNTEyMDYyMDE2MzNaMDMxMTAvBgNV BAMTKEU0QzY4RjAxOTMwRUQ3RDBGNjI1NjhDMkExMDE5OUU3Mzk5RTYxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TP+faHUjdFVPjhFQk2iKalHj D/zOsOFJnTur61pu97sxrLVjsEFjzCGSUIZWwp9VORW7Pi0su36QNJa2xKB4UgJz KV2STnA3Lvb7JQBFvjUMlYmz9BswLgFJHUpxiOwAcReon1w9etz2I1l501ke8eKg dUpi2ibjeCgN3RoF7IkMPcAZtgbbW6xLXN1bU3EcCQrxXtsv4NafbVbrJCjmEo6B khLiTaBNkFwN0H9J4iisjg48Rdmiu+Qq8bSwG4TfRBhmvB4yoJgV0KBHoAz3nn+T 2dQnyhsh4P6XdtDbL1hrsyu+Jywxw3KVnlvJXDB/s8v8vPO5F9NVkJ0QzOSvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU5MaPAZMO19D2JWjCoQGZ5zmeYUkwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBANgLKogu3HWtQ1XGPwLd78toKjOHA3R5W/2Ahbx3tizJIn94x0nz323l 415QXza0z6uJSjoF9hyFn8NFoEEV7bBIzp3hwaYSWwnVJpq2WOP6Iw85nvi3dRpS Lxh2z5xgvBbaYGwAkyBc4116nn/7KJ1rV9mhH2+3JeuL1FBlgZ9F8arv+k3QZ5i3 2Qmy97Oi5CE4mpQrfWpCXN8OARvR0iadsiA2fNH18q9wOaz23b4q38IFqdl/wAO3 tUUvIHCGirSE3MirFfAVBiP8zeY6NFpciTSVa9QytpSuHr6CqD2eZY7hixmDi1az qwSNqIZ0i4YyE6+a7OwO0cdPmmwcZe4= -----END CERTIFICATE-----Generated at Sat Dec 6 06:09:16 2025 by rpki-client