This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: N+bniRRka0lm05adsEE6zLKxVeOhqjyNDmNdai9zuzk= Subject key identifier: F0:4F:29:7C:EB:E5:50:0A:F1:15:E7:F8:9D:BF:E0:CE:34:D4:D4:72 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 299A2F390622D52B8DB587927C145F63386FBC0F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: D2 Signing time: Fri 05 Dec 2025 22:12:36 +0000 Manifest this update: Fri 05 Dec 2025 22:07:36 +0000 Manifest next update: Sun 07 Dec 2025 01:59:36 +0000 Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: lbWPqEdpKXiRArA3QJXBN8UXOh7B9yNP6j7m+dHMMWM=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9a:2f:39:06:22:d5:2b:8d:b5:87:92:7c:14:5f:63:38:6f:bc:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Dec 5 22:07:36 2025 GMT Not After : Dec 7 01:59:36 2025 GMT Subject: CN=F04F297CEBE5500AF115E7F89DBFE0CE34D4D472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:27:f5:bb:ca:7a:38:f5:fb:43:44:24:d7: 1e:84:c0:87:17:ee:7b:1e:52:e0:01:4a:f0:a3:36: 29:ee:15:34:2f:7a:be:22:93:3c:e5:d0:7a:6f:d4: 7b:93:cc:a7:09:46:dd:92:d1:32:9d:07:8d:e7:c5: a5:95:a7:3b:c2:a2:8f:67:e1:b5:40:92:6e:81:0e: e7:58:ac:14:5e:5c:45:4c:32:07:b4:a4:78:53:62: cd:0b:95:14:64:f6:fb:74:01:9f:a6:a5:a7:28:4f: 36:b6:76:17:96:75:ff:2e:86:51:c5:7d:da:2e:91: c0:c9:65:b3:83:cf:ab:8b:33:60:b7:41:33:30:f0: 1b:e0:4d:f4:3b:35:9c:fc:f6:02:9f:88:bc:e5:18: 5c:1c:16:cd:10:24:9e:1e:69:7a:1f:53:26:e5:b2: 04:0a:79:74:14:0c:ef:24:6e:e9:a4:8d:bf:0a:52: 0b:68:95:f2:35:64:d0:87:66:7e:c5:ac:02:69:06: 93:9c:cb:e3:53:35:e8:41:1a:c9:a7:26:57:a5:34: 2e:a4:b8:58:a5:2f:d4:ea:cd:f0:e3:94:60:3d:e2: af:62:2f:c7:4b:5d:5c:e5:98:69:e8:f3:89:93:d0: 45:05:3e:6f:8a:14:be:fc:00:d7:f5:a2:9b:c7:2d: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4F:29:7C:EB:E5:50:0A:F1:15:E7:F8:9D:BF:E0:CE:34:D4:D4:72 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:12:e4:e2:b8:09:4c:7f:b3:b8:57:79:ed:93:9f:cb:bd:f8: 1a:f6:a2:73:63:5c:dd:4a:2d:50:47:41:ad:e2:2b:10:4f:33: c5:95:07:ca:3f:9f:7b:c8:0e:28:26:47:ff:f2:ba:5e:00:41: 82:09:75:73:ed:18:f5:5e:cb:77:46:ea:5b:a2:11:bb:ea:ef: 19:56:5f:4f:f9:a8:b0:e3:38:bc:80:a5:9a:23:0b:ec:70:d8: bd:5e:dc:f8:cd:67:c0:98:c8:1b:3a:97:b1:33:66:23:14:0e: c4:11:b4:43:8e:08:f0:49:6b:a6:96:42:aa:15:d7:4d:59:23: 5c:29:a4:21:0f:4e:e1:41:a0:b7:19:45:c0:7b:cd:d4:12:3f: 48:8c:0b:34:e5:3d:49:cc:4f:d9:31:71:1d:6c:f3:be:07:35: fa:2f:fe:d7:56:03:cf:94:a5:cf:70:00:03:df:37:28:94:9e: 4d:58:98:f6:d4:0e:ab:6b:87:f9:d1:51:26:66:8a:e4:9e:73: d6:2e:b9:6c:0d:51:5b:c9:47:62:47:1a:5e:7a:d0:b0:88:93: 0e:a2:b4:5c:cc:17:58:d7:76:61:34:65:db:92:f4:f8:aa:cd: 4b:1d:7c:05:0a:ca:b1:81:8f:95:8f:d6:8a:7e:46:5b:76:ff: 5d:f6:09:e0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKZovOQYi1SuNtYeSfBRfYzhvvA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTEyMDUyMjA3MzZaFw0yNTEyMDcwMTU5MzZaMDMxMTAvBgNV BAMTKEYwNEYyOTdDRUJFNTUwMEFGMTE1RTdGODlEQkZFMENFMzRENEQ0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BSf1u8p6OPX7Q0Qk1x6EwIcX 7nseUuABSvCjNinuFTQver4ikzzl0Hpv1HuTzKcJRt2S0TKdB43nxaWVpzvCoo9n 4bVAkm6BDudYrBReXEVMMge0pHhTYs0LlRRk9vt0AZ+mpacoTza2dheWdf8uhlHF fdoukcDJZbODz6uLM2C3QTMw8BvgTfQ7NZz89gKfiLzlGFwcFs0QJJ4eaXofUybl sgQKeXQUDO8kbumkjb8KUgtolfI1ZNCHZn7FrAJpBpOcy+NTNehBGsmnJlelNC6k uFilL9TqzfDjlGA94q9iL8dLXVzlmGno84mT0EUFPm+KFL78ANf1opvHLaJxAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU8E8pfOvlUArxFef4nb/gzjTU1HIwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgS5OK4CUx/s7hXee2Tn8u9+Br2onNjXN1KLVBHQa3iKxBPM8WVB8o/ n3vIDigmR//yul4AQYIJdXPtGPVey3dG6luiEbvq7xlWX0/5qLDjOLyApZojC+xw 2L1e3PjNZ8CYyBs6l7EzZiMUDsQRtEOOCPBJa6aWQqoV101ZI1wppCEPTuFBoLcZ RcB7zdQSP0iMCzTlPUnMT9kxcR1s874HNfov/tdWA8+Upc9wAAPfNyiUnk1YmPbU Dqtrh/nRUSZmiuSec9YuuWwNUVvJR2JHGl560LCIkw6itFzMF1jXdmE0ZduS9Piq zUsdfAUKyrGBj5WP1op+Rlt2/132CeA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:29 2025 by rpki-client