This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json)
Hash identifier: eiZRt/z9gFvQOERl00ExrpSNlmmdAtqC3RQvkQ5/So4=
Subject key identifier: 37:EE:D5:4A:A4:35:49:CF:92:00:4A:7C:AD:F8:C0:24:A1:39:45:61
Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C
Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C
Certificate serial: 314F5E5F5A4731A153C7859D9C35FCF7C9C76F23
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
Manifest number: 0115
Signing time: Sun 25 Jan 2026 03:01:45 +0000
Manifest this update: Sun 25 Jan 2026 02:56:45 +0000
Manifest next update: Mon 26 Jan 2026 04:25:45 +0000
Files and hashes: 1: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=)
2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: 5lY0nVj7pTaY7WttLffqNs9Y7BxrghBiXmfw4g56NAQ=)
3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4f:5e:5f:5a:47:31:a1:53:c7:85:9d:9c:35:fc:f7:c9:c7:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C
Validity
Not Before: Jan 25 02:56:45 2026 GMT
Not After : Jan 26 04:25:45 2026 GMT
Subject: CN=37EED54AA43549CF92004A7CADF8C024A1394561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:73:0c:6c:40:1a:f0:3d:53:dc:a0:64:41:
ee:cd:f6:39:1c:a5:d1:b5:19:56:22:8d:e8:92:8f:
f0:0f:1f:fd:f4:ed:cf:ef:7b:5c:55:9a:29:46:a0:
9a:ec:ac:6d:9b:a1:e6:5e:c4:e2:38:e6:b2:d5:61:
f9:ff:93:2e:d8:3d:a4:0d:b7:81:66:c9:f9:5c:7b:
50:6d:1e:d5:15:b4:c5:14:b5:25:53:34:b9:60:50:
9a:df:06:6c:fd:59:d4:37:1f:05:81:b4:3b:64:2f:
34:1b:cb:a0:4e:69:b6:40:bb:57:0e:49:7e:8f:47:
35:8a:f1:5f:4c:02:dd:50:a3:ab:f9:73:c8:93:ae:
e5:1d:5d:8b:41:f7:99:91:34:9d:48:a8:36:f5:a7:
64:39:cc:2f:9a:ea:d1:66:27:0a:25:25:27:ae:2e:
0a:d2:d1:93:4a:90:96:d4:20:b6:8e:8a:35:9b:45:
b8:2d:cf:f5:d6:00:20:ce:ad:8f:8c:ae:4b:b0:c6:
26:9a:17:fd:51:2d:44:58:30:3d:69:9e:95:b7:e1:
a9:eb:95:05:c0:2a:4d:45:5c:c2:80:e5:a7:d9:37:
1b:e0:ac:a1:e6:d2:71:54:23:85:99:56:99:be:25:
19:5b:ec:30:a9:a6:e4:e0:ad:0a:19:7a:94:6a:9d:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EE:D5:4A:A4:35:49:CF:92:00:4A:7C:AD:F8:C0:24:A1:39:45:61
X509v3 Authority Key Identifier:
keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1b:f3:e1:f9:09:72:db:84:e8:6f:9f:e8:85:95:a0:b0:65:
e1:55:4e:25:08:45:e5:c3:f2:de:65:d8:0e:d4:fb:3e:76:ed:
97:2d:f9:e9:92:bb:e0:20:df:18:ad:89:d9:9c:6e:d4:88:c1:
e5:6a:c4:de:e6:ae:28:c9:fd:67:a1:7b:58:54:36:02:bb:37:
a3:d1:9f:ad:6d:ff:c8:4c:b5:25:51:5b:66:20:31:dc:14:f9:
81:6a:94:ff:92:9a:be:0a:61:6f:95:3f:4f:67:ee:26:53:cc:
14:41:04:ea:d8:58:53:53:cf:df:21:b1:b3:99:31:41:27:d3:
16:4e:ee:9f:96:f3:06:5f:74:16:9e:78:3e:6d:13:a0:42:a7:
eb:de:29:49:f0:40:9b:c4:19:9b:85:9a:e8:97:e4:31:88:07:
90:ed:7f:46:bf:1b:2c:96:d9:3d:dd:5d:75:72:31:cc:ae:7d:
af:8b:9b:c2:19:1c:5d:6c:0e:c8:2d:30:8d:e6:0f:fa:31:67:
cd:ed:3d:9e:15:37:a3:9b:e7:f5:ce:17:29:e7:95:58:75:8c:
1e:a1:7c:cf:5e:be:9e:6e:3d:62:c4:41:3e:f1:e3:63:3e:43:
e3:ff:c1:c0:cb:4e:8f:c4:45:2a:1d:e0:48:36:bc:e7:45:86:
0e:d3:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:04 2026 by rpki-client