This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: iw0SogAvzVB50VCz/m0tSBlE5ym1uDdCFTPG5l63F30= Subject key identifier: 9E:C4:7A:9F:B7:BE:94:24:CA:0D:F0:85:86:39:A9:15:02:ED:A2:5B Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 7A60A23D04417316FEE5E96FFBF0869E23BA4172 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: D1 Signing time: Sat 06 Dec 2025 09:38:48 +0000 Manifest this update: Sat 06 Dec 2025 09:33:48 +0000 Manifest next update: Sun 07 Dec 2025 13:37:48 +0000 Files and hashes: 1: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 2: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) 3: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 4: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 5: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 6: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 7: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 8: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 9: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: 48MKR+HfD5F7QgbZDzKgQG92OsARZ94exgJKHdoz/GE=) 10: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) 11: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 12: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 13: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:60:a2:3d:04:41:73:16:fe:e5:e9:6f:fb:f0:86:9e:23:ba:41:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Dec 6 09:33:48 2025 GMT Not After : Dec 7 13:37:48 2025 GMT Subject: CN=9EC47A9FB7BE9424CA0DF0858639A91502EDA25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:9f:06:9a:1b:5d:89:37:9e:92:81:e5:5d: 5f:d5:ec:b3:5f:e0:30:af:27:ca:78:2c:04:02:90: a9:f3:30:61:05:fa:ac:cc:34:05:b0:c8:fa:3e:01: a8:91:b0:6f:9a:15:fe:fe:03:e0:8c:84:cb:5b:5d: 33:2c:7c:8c:38:6a:5b:7e:f4:00:34:6e:03:1c:84: 09:bc:96:98:06:87:f5:7c:e7:00:0d:04:62:d6:ff: f0:db:ae:cb:75:9c:f4:d1:f1:2f:0b:f8:ba:87:38: d1:e1:a5:39:10:63:8b:c2:41:40:2f:29:b2:ec:a0: ad:f9:1c:ed:48:25:77:29:42:ba:54:29:a9:fd:08: 80:75:f5:f4:f9:9c:16:86:61:6b:5e:a0:e5:e4:32: ad:bf:0e:5b:4d:fd:01:5b:b5:09:ff:a0:d4:51:e1: 6e:56:e6:98:a2:38:e2:b1:76:0b:96:92:38:f2:aa: c1:67:9b:de:1f:12:7a:cb:cd:1d:19:aa:6c:09:3a: 7d:7e:fb:da:65:4b:63:d2:45:04:e7:a3:d7:b4:3a: ab:03:60:ba:0c:13:11:c9:31:06:1f:5a:6f:f6:b8: 71:af:10:b8:ce:dd:d3:33:9b:b3:9f:d1:89:f5:27: ff:52:d8:be:5b:55:c8:42:d4:31:6a:7b:7e:59:5a: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C4:7A:9F:B7:BE:94:24:CA:0D:F0:85:86:39:A9:15:02:ED:A2:5B X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:22:eb:ff:1d:87:a1:80:44:2e:d7:e3:c6:3e:a8:cf:c7:ea: 14:6d:be:9a:43:1e:4b:3b:eb:c0:89:bb:57:70:d3:6d:95:55: 62:f6:8b:c6:04:da:5b:d1:b7:09:d5:66:28:53:85:80:0f:64: 40:6b:fb:8e:f6:61:ae:19:02:85:da:a7:4c:e1:49:9e:ee:1a: 4c:1f:10:f1:4e:aa:9e:8f:c4:fe:31:46:8c:e5:3e:9d:df:a0: c0:7d:4d:c1:5f:dd:a6:64:45:80:d3:fc:22:71:b4:67:e2:7d: 2b:8f:8e:0a:4e:df:19:4e:fd:a0:b9:ff:12:79:65:dd:1f:ea: 73:d3:4b:1e:36:75:ab:54:8b:e1:9b:36:4f:46:95:3d:fa:e6: 4b:4a:2e:2c:5e:c2:c4:a9:b8:98:14:48:de:8a:a9:86:af:17: b7:8f:3a:8c:84:07:5a:c0:d2:05:71:ac:6e:6f:de:0c:97:3a: 75:f6:ed:28:55:0a:f1:ab:da:5d:18:e1:5d:dd:e1:55:73:ae: eb:f2:bf:37:64:0b:9e:92:81:b3:2c:a2:17:9c:07:45:6b:bc: 3a:52:d4:ef:15:39:64:5f:c0:91:60:25:0d:45:3c:b2:60:a1: 14:43:2f:ed:cd:05:71:60:00:a6:91:44:6b:eb:f1:ec:ff:72: 6f:2f:3a:44 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUemCiPQRBcxb+5elv+/CGniO6QXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTEyMDYwOTMzNDhaFw0yNTEyMDcxMzM3NDhaMDMxMTAvBgNV BAMTKDlFQzQ3QTlGQjdCRTk0MjRDQTBERjA4NTg2MzlBOTE1MDJFREEyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00J8GmhtdiTeekoHlXV/V7LNf 4DCvJ8p4LAQCkKnzMGEF+qzMNAWwyPo+AaiRsG+aFf7+A+CMhMtbXTMsfIw4alt+ 9AA0bgMchAm8lpgGh/V85wANBGLW//Dbrst1nPTR8S8L+LqHONHhpTkQY4vCQUAv KbLsoK35HO1IJXcpQrpUKan9CIB19fT5nBaGYWteoOXkMq2/DltN/QFbtQn/oNRR 4W5W5piiOOKxdguWkjjyqsFnm94fEnrLzR0ZqmwJOn1++9plS2PSRQTno9e0OqsD YLoMExHJMQYfWm/2uHGvELjO3dMzm7Of0Yn1J/9S2L5bVchC1DFqe35ZWr5dAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUnsR6n7e+lCTKDfCFhjmpFQLtolswHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACMi6/8dh6GARC7X48Y+qM/H6hRtvppDHks768CJu1dw022VVWL2i8YE 2lvRtwnVZihThYAPZEBr+472Ya4ZAoXap0zhSZ7uGkwfEPFOqp6PxP4xRozlPp3f oMB9TcFf3aZkRYDT/CJxtGfifSuPjgpO3xlO/aC5/xJ5Zd0f6nPTSx42datUi+Gb Nk9GlT365ktKLixewsSpuJgUSN6KqYavF7ePOoyEB1rA0gVxrG5v3gyXOnX27ShV CvGr2l0Y4V3d4VVzruvyvzdkC56SgbMsohecB0VrvDpS1O8VOWRfwJFgJQ1FPLJg oRRDL+3NBXFgAKaRRGvr8ez/cm8vOkQ= -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:56 2025 by rpki-client