This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: z1kII0QsauxMsg97RCwYo4+bG6TU8FsLbVdCCI5imB8= Subject key identifier: 43:5F:28:F2:5B:B4:4B:3C:3E:5A:DB:69:36:91:CA:B3:D3:C7:0E:27 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 06AC18F90A7CCE216C01579F2F56B758FF8A814D Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: 0115 Signing time: Sat 24 Jan 2026 23:06:44 +0000 Manifest this update: Sat 24 Jan 2026 23:01:44 +0000 Manifest next update: Mon 26 Jan 2026 00:58:44 +0000 Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: m/bvIU8fcGYxa7UGvs4FCR8NySX1hbjynxZY2sGosW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ac:18:f9:0a:7c:ce:21:6c:01:57:9f:2f:56:b7:58:ff:8a:81:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Jan 24 23:01:44 2026 GMT Not After : Jan 26 00:58:44 2026 GMT Subject: CN=435F28F25BB44B3C3E5ADB693691CAB3D3C70E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:e2:81:95:ad:6a:7c:1e:05:01:be:29:e1: ae:65:aa:d8:1f:62:9a:f3:4e:10:1f:04:66:a6:73: 24:da:da:a1:ac:80:fc:f2:54:65:3d:7d:52:2b:aa: 57:b2:16:83:2e:9e:d0:02:a3:a7:99:f3:bc:30:c8: ff:ae:f6:63:7e:b2:41:79:27:59:84:bd:5d:27:2b: 58:f8:aa:79:6c:cc:5e:2c:21:e1:82:c9:69:f6:76: cc:40:25:4e:7d:94:93:0f:a0:de:6e:1f:ac:bb:e1: b8:10:8b:26:90:0b:be:cd:11:e4:ef:fd:04:1f:30: d9:52:99:c4:7f:23:86:39:50:56:b2:ce:30:06:ce: a6:52:d4:f3:0f:64:23:6d:40:ae:93:fb:cc:5f:08: b0:82:6a:7c:23:fe:c3:aa:59:e6:e5:da:42:6c:1f: b9:c0:69:d2:0c:b9:0f:0b:7d:fe:3d:1c:cd:e2:c4: ee:b6:ce:1e:8b:b3:29:49:ee:31:30:0b:7f:04:5c: 97:10:85:58:e2:67:50:84:38:5a:d6:fb:e3:db:57: c6:49:f5:aa:6f:bb:3a:ab:56:af:5c:ee:a9:3b:40: 56:1f:bd:8b:1b:16:05:8c:35:9d:6f:6b:59:2c:f5: 4e:db:b8:3b:57:98:ca:ba:a0:24:72:45:55:08:1a: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5F:28:F2:5B:B4:4B:3C:3E:5A:DB:69:36:91:CA:B3:D3:C7:0E:27 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:dc:e2:d1:8f:34:34:9c:00:dd:ad:49:e1:76:2d:73:b4:d9: 5b:3d:4b:8e:a6:2f:eb:39:90:e2:6c:0f:4e:fc:df:4d:6b:1c: 7e:91:5a:43:e9:71:75:dc:32:9b:c7:74:c2:1b:37:56:65:f0: b2:c3:46:22:88:e1:09:41:57:e0:fe:e8:cc:ed:2c:a4:3c:9c: c7:55:80:fc:49:85:d9:7b:13:d8:64:59:46:8e:ee:87:ef:38: 26:6e:bb:8b:fb:0d:ea:55:71:13:16:e6:34:e8:cb:81:b7:36: cd:42:c6:d7:c6:a9:b8:28:b8:55:61:6f:4e:6c:dc:4e:3c:c8: 76:ba:be:c7:ee:82:3e:7e:9b:8c:3f:88:0c:ee:7b:0b:a5:d4: 70:97:c8:00:3d:90:e5:b0:4c:ec:83:2d:0c:c4:0c:7e:37:49: 26:59:02:75:d9:56:d3:be:a0:1e:c5:e2:78:b8:a6:dd:da:32: 64:5b:46:da:80:e6:ae:29:e8:8f:ec:54:32:5b:3b:d3:1a:cd: 7a:fa:bd:ef:04:21:ec:de:46:32:59:bb:ca:51:49:4c:80:dd: d8:ff:b5:e1:22:0c:96:33:54:15:d7:2d:76:68:ee:8a:0c:5b: 2b:6c:4a:4e:e9:94:bd:72:da:9b:95:74:be:a7:72:17:c9:22: 58:bb:ac:ff -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBqwY+Qp8ziFsAVefL1a3WP+KgU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjAxMjQyMzAxNDRaFw0yNjAxMjYwMDU4NDRaMDMxMTAvBgNV BAMTKDQzNUYyOEYyNUJCNDRCM0MzRTVBREI2OTM2OTFDQUIzRDNDNzBFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmOKBla1qfB4FAb4p4a5lqtgf YprzThAfBGamcyTa2qGsgPzyVGU9fVIrqleyFoMuntACo6eZ87wwyP+u9mN+skF5 J1mEvV0nK1j4qnlszF4sIeGCyWn2dsxAJU59lJMPoN5uH6y74bgQiyaQC77NEeTv /QQfMNlSmcR/I4Y5UFayzjAGzqZS1PMPZCNtQK6T+8xfCLCCanwj/sOqWebl2kJs H7nAadIMuQ8Lff49HM3ixO62zh6LsylJ7jEwC38EXJcQhVjiZ1CEOFrW++PbV8ZJ 9apvuzqrVq9c7qk7QFYfvYsbFgWMNZ1va1ks9U7buDtXmMq6oCRyRVUIGpspAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUQ18o8lu0Szw+WttpNpHKs9PHDicwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXc4tGPNDScAN2tSeF2LXO02Vs9S46mL+s5kOJsD078301rHH6RWkPp cXXcMpvHdMIbN1Zl8LLDRiKI4QlBV+D+6MztLKQ8nMdVgPxJhdl7E9hkWUaO7ofv OCZuu4v7DepVcRMW5jToy4G3Ns1CxtfGqbgouFVhb05s3E48yHa6vsfugj5+m4w/ iAzuewul1HCXyAA9kOWwTOyDLQzEDH43SSZZAnXZVtO+oB7F4ni4pt3aMmRbRtqA 5q4p6I/sVDJbO9MazXr6ve8EIezeRjJZu8pRSUyA3dj/teEiDJYzVBXXLXZo7ooM WytsSk7plL1y2puVdL6nchfJIli7rP8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:04:30 2026 by rpki-client