This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: 4y2hWI8zLbfTyogney+y0hEWGpGykmm7W6PlkDaXdWQ= Subject key identifier: FF:00:19:C0:56:2A:C0:44:6F:7A:5B:58:83:D5:88:AB:2B:DF:C6:24 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 493C0BBAB8C86578DE9681AD2D19DB3D5A8E580F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: CD Signing time: Fri 05 Dec 2025 23:33:51 +0000 Manifest this update: Fri 05 Dec 2025 23:28:51 +0000 Manifest next update: Sun 07 Dec 2025 02:03:51 +0000 Files and hashes: 1: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 2: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: VFsArRQOANXfcozpM9n5studgiAKn9yMu7Xm76VLRYs=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3c:0b:ba:b8:c8:65:78:de:96:81:ad:2d:19:db:3d:5a:8e:58:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Dec 5 23:28:51 2025 GMT Not After : Dec 7 02:03:51 2025 GMT Subject: CN=FF0019C0562AC0446F7A5B5883D588AB2BDFC624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:6c:a3:7f:9f:45:45:75:20:63:d2:cf:7b: e5:f6:b6:6b:a7:c4:24:ce:e3:6d:81:38:30:2d:eb: 0d:97:cf:b6:49:f5:8f:a8:89:fe:a0:e7:be:25:a5: e0:b7:9e:ec:03:ab:b6:7b:c7:30:3d:d0:f4:6d:ea: 6e:9a:92:69:7b:57:12:11:52:22:32:d7:7b:c7:09: 3d:7c:86:04:4c:84:4d:4b:92:4e:46:63:dd:62:07: 6e:94:b5:2f:83:4d:93:84:7a:db:d0:88:29:69:70: a5:a4:bb:b7:67:5e:40:bc:95:ed:13:ef:c9:64:98: f3:3a:0b:d2:e2:f0:d9:ae:a2:ca:48:0e:5f:61:3c: af:aa:78:0a:60:b3:1f:30:75:b6:c2:3e:5a:0b:58: 34:8b:a2:0d:cb:f7:08:30:7f:2c:fc:a0:c0:ab:63: 35:6d:2d:f0:0e:94:f9:42:8b:b9:26:da:58:9d:ac: 13:b6:47:bc:6c:4f:5e:f6:fd:a2:22:05:21:fa:1e: 9c:38:49:ed:b7:ba:7f:fe:04:dd:b9:b1:c5:13:b6: 43:66:ca:a5:05:e1:9b:25:49:5c:95:3a:fa:1c:e3: fb:66:50:af:c2:1c:be:a4:a2:16:9a:22:c5:12:fd: db:72:7b:bc:e7:58:4e:27:1b:d7:9c:8a:ae:42:f3: ac:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:19:C0:56:2A:C0:44:6F:7A:5B:58:83:D5:88:AB:2B:DF:C6:24 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:73:d3:7a:48:51:54:50:de:6c:62:40:8a:6e:5f:a8:62:8b: 34:8d:de:3d:50:bd:4f:42:d1:9b:72:65:76:91:ac:54:ae:ad: ae:90:0e:5c:e7:5b:ce:16:60:02:86:c0:f4:e4:e1:f4:1c:8b: 21:ac:24:35:e8:0a:0f:c7:1c:87:be:c8:2e:79:e3:52:af:4a: f5:65:ef:38:13:81:e7:e6:8b:7b:76:59:6a:41:e0:c5:40:2c: 44:c8:d2:0b:9a:19:48:b7:48:33:3e:98:74:a1:de:72:3f:8f: 7e:fb:77:49:01:ce:0f:7c:98:0f:59:d1:4f:5a:5d:05:75:b7: 56:9c:a4:d5:42:92:0a:b1:15:75:e7:e8:5f:b5:6b:eb:02:2c: dc:6a:34:cc:90:9c:7a:8f:ac:7c:21:28:37:0f:f4:2e:6a:d9: f7:ba:fc:49:6e:e9:55:45:6a:05:f0:ae:e2:7d:35:45:3e:09: e3:9d:a9:a0:9e:39:42:67:a9:76:3d:6f:5d:b8:29:48:27:24: 04:4d:2d:30:b3:c4:68:1c:0e:b5:aa:6c:5b:be:2d:58:5b:11: 34:f4:9f:40:39:24:07:f5:99:ca:c3:99:21:d0:db:15:7d:26: e7:f2:31:85:5c:cb:b7:a8:db:fe:8d:c7:53:8e:6a:b7:11:fe: 07:02:a7:c0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUSTwLurjIZXjeloGtLRnbPVqOWA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTEyMDUyMzI4NTFaFw0yNTEyMDcwMjAzNTFaMDMxMTAvBgNV BAMTKEZGMDAxOUMwNTYyQUMwNDQ2RjdBNUI1ODgzRDU4OEFCMkJERkM2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcGyjf59FRXUgY9LPe+X2tmun xCTO422BODAt6w2Xz7ZJ9Y+oif6g574lpeC3nuwDq7Z7xzA90PRt6m6akml7VxIR UiIy13vHCT18hgRMhE1Lkk5GY91iB26UtS+DTZOEetvQiClpcKWku7dnXkC8le0T 78lkmPM6C9Li8NmuospIDl9hPK+qeApgsx8wdbbCPloLWDSLog3L9wgwfyz8oMCr YzVtLfAOlPlCi7km2lidrBO2R7xsT172/aIiBSH6Hpw4Se23un/+BN25scUTtkNm yqUF4ZslSVyVOvoc4/tmUK/CHL6kohaaIsUS/dtye7znWE4nG9eciq5C86wFAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU/wAZwFYqwERveltYg9WIqyvfxiQwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJz03pIUVRQ3mxiQIpuX6hiizSN3j1QvU9C0ZtyZXaRrFSura6QDlzn W84WYAKGwPTk4fQciyGsJDXoCg/HHIe+yC5541KvSvVl7zgTgefmi3t2WWpB4MVA LETI0guaGUi3SDM+mHSh3nI/j377d0kBzg98mA9Z0U9aXQV1t1acpNVCkgqxFXXn 6F+1a+sCLNxqNMyQnHqPrHwhKDcP9C5q2fe6/Elu6VVFagXwruJ9NUU+CeOdqaCe OUJnqXY9b124KUgnJARNLTCzxGgcDrWqbFu+LVhbETT0n0A5JAf1mcrDmSHQ2xV9 JufyMYVcy7eo2/6Nx1OOarcR/gcCp8A= -----END CERTIFICATE-----Generated at Sat Dec 6 06:02:12 2025 by rpki-client