This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          AfF9zqx+FMbSmyyW3eX9WsL7eZAYmOXyKtjxV/AQFe0=
Subject key identifier:   FB:0B:32:82:C2:CA:BB:88:89:D7:BB:0C:4D:D4:10:61:21:37:75:B9
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       33847A81D8539DD7A979C10AA62260C6E9ED66E2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          CF
Signing time:             Sat 06 Dec 2025 02:27:14 +0000
Manifest this update:     Sat 06 Dec 2025 02:22:14 +0000
Manifest next update:     Sun 07 Dec 2025 03:35:14 +0000
Files and hashes:         1: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: NumyMtpOUyTr475y7TdYakQRaJjO+Dndia+vQrD7S+w=)
                          2: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          3: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          4: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          5: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          6: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          7: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          8: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
                          9: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          10: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (hash: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY=)
                          11: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          12: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
                          13: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
                          14: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
                          15: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          16: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          17: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
                          18: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          19: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          20: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          21: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          22: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
                          23: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          24: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          25: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          26: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          27: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:84:7a:81:d8:53:9d:d7:a9:79:c1:0a:a6:22:60:c6:e9:ed:66:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Dec  6 02:22:14 2025 GMT
            Not After : Dec  7 03:35:14 2025 GMT
        Subject: CN=FB0B3282C2CABB8889D7BB0C4DD41061213775B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:8a:01:1b:62:3f:65:c9:1c:49:8a:86:9e:
                    07:6f:73:9e:7b:a1:93:09:a0:90:4d:ec:a3:26:50:
                    43:3d:6e:90:17:b1:12:81:f7:a2:81:79:25:ab:22:
                    79:e8:e8:49:ac:c1:14:d9:03:67:34:53:23:04:22:
                    b3:97:e3:60:34:e4:1f:b3:e9:41:ff:37:67:8d:e5:
                    77:ff:ed:45:e1:5a:42:06:c3:48:6a:0a:67:85:26:
                    b3:e9:9d:95:ff:61:36:80:75:a7:92:7b:57:4a:94:
                    32:6d:b9:6f:0a:5d:ff:ef:e4:9b:df:b3:e8:db:7a:
                    c3:bd:33:7f:da:27:db:fb:25:13:bc:2d:1d:cf:f6:
                    1e:b5:7c:de:5f:78:0b:84:67:10:85:f5:57:a9:19:
                    8d:bd:19:bf:ca:0b:0f:9b:8b:be:47:79:ca:d5:e2:
                    c8:b7:e2:96:61:06:78:2d:06:24:d5:2f:34:fd:dd:
                    27:80:23:d2:c9:f9:e7:65:54:ab:77:34:6b:b8:e2:
                    10:48:7a:26:56:08:20:1e:cc:4b:54:7b:3f:84:34:
                    54:3d:d3:b1:1f:64:10:13:ad:52:93:8a:c4:d2:5a:
                    0e:ab:13:a1:5e:7c:e9:38:f9:6d:b2:41:02:5d:97:
                    dd:fa:c7:d8:e5:12:86:f4:3a:e6:03:77:64:31:5d:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0B:32:82:C2:CA:BB:88:89:D7:BB:0C:4D:D4:10:61:21:37:75:B9
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:7f:5a:8d:ea:0b:7b:44:83:6c:a5:32:68:38:ca:71:9b:
         86:50:93:72:47:bb:62:ca:b5:7f:9b:1b:f6:70:ba:d7:7c:d3:
         27:ae:90:01:d5:84:cb:0a:45:01:dd:a8:62:e3:ce:0b:ef:22:
         44:f1:42:bf:eb:c1:51:48:15:b9:b2:9b:ce:23:c0:d7:06:0f:
         ec:d3:09:14:6c:8a:97:2f:9b:c7:79:96:45:39:40:ef:44:a5:
         17:89:42:15:68:7e:01:7b:6e:5b:b0:2e:98:0d:de:7a:a4:78:
         80:16:c1:aa:96:6a:63:b4:d8:f8:5a:06:f7:82:d0:37:81:d3:
         14:a6:23:d5:78:bb:5c:06:e1:3e:b4:96:e9:0e:89:15:0a:d2:
         e1:70:1c:f7:c6:0e:12:1e:cb:67:3b:f7:58:73:f0:1c:31:b7:
         b9:8c:44:ac:f1:57:42:fd:7c:2e:3b:fa:bb:81:82:3a:86:d2:
         f2:34:1b:e1:76:ae:4a:a5:5e:f9:68:9a:a6:13:65:26:d8:cf:
         da:e5:4c:f3:c3:36:51:ba:07:c0:d1:a8:1e:72:df:8c:0c:69:
         e9:1a:b7:fd:36:86:d0:11:e4:98:41:78:75:5e:74:ae:d5:b3:
         2e:f5:70:df:f5:75:50:ab:aa:4f:f3:b8:f3:85:55:65:95:1d:
         7a:cc:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----