This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier: cyYragR26XXrZiMaFoUKwHm5HrtCMBGQolSCivmUQQM=
Subject key identifier: A1:F7:E0:F9:2C:95:CF:E4:5E:75:63:B4:2C:B3:F1:A6:6F:9A:41:59
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 40B610EE8B365EE03309FCD52F8AD15F63F73D0E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number: D0
Signing time: Sat 06 Dec 2025 19:37:14 +0000
Manifest this update: Sat 06 Dec 2025 19:32:14 +0000
Manifest next update: Sun 07 Dec 2025 22:21:14 +0000
Files and hashes: 1: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
2: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
3: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
4: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
5: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (hash: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY=)
6: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
7: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: GTyI8XMSacKMo6o1EeKk8y835FUW1J7WZvBKdEJVCp8=)
8: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
9: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
10: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
11: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
12: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
13: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
14: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
15: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
16: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
17: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
18: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
19: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
20: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
21: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
22: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
23: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
24: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
25: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
26: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
27: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b6:10:ee:8b:36:5e:e0:33:09:fc:d5:2f:8a:d1:5f:63:f7:3d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Dec 6 19:32:14 2025 GMT
Not After : Dec 7 22:21:14 2025 GMT
Subject: CN=A1F7E0F92C95CFE45E7563B42CB3F1A66F9A4159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:18:a2:6c:bf:d1:09:ae:74:87:3c:bf:4e:
b2:1f:06:d6:c1:c9:2c:98:77:5b:c6:96:57:d9:e9:
6b:ba:82:8a:45:e4:3d:0b:d9:34:6e:62:b3:71:4a:
01:df:18:cb:ee:e8:74:4d:f3:a1:9f:e0:26:af:06:
c0:24:10:4a:b5:bb:ca:89:39:4d:89:f0:e0:2d:1f:
ca:98:72:ca:bd:f3:7c:9a:d1:f7:37:4f:46:d8:0b:
c9:5f:b0:8a:32:80:6e:cb:26:5c:1b:05:a2:8e:3f:
74:51:36:00:00:19:04:82:d4:f7:03:73:3f:20:84:
4a:13:16:c6:0d:e1:b8:19:d8:4c:82:a0:97:ca:a8:
82:d6:c7:9a:2c:a9:fb:d0:1b:18:8f:25:5e:5e:ee:
5f:72:0d:56:f2:0e:e1:2e:d5:38:db:5f:74:fe:a6:
36:0f:47:18:0d:aa:40:e8:c7:7a:4e:ad:ec:6d:e6:
8f:5b:2b:e0:dc:38:ed:36:f0:ed:b6:6d:50:2c:3a:
6d:6e:4e:f8:e4:13:09:a4:76:00:bd:ab:fb:ec:ef:
c4:08:68:6a:9b:dd:c6:0d:9c:e7:03:96:9c:b9:48:
be:83:3b:81:9d:42:03:b7:fa:c7:bc:e4:fd:be:9a:
75:70:fa:d7:4c:30:6d:82:78:0c:17:6a:87:a5:ba:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:E0:F9:2C:95:CF:E4:5E:75:63:B4:2C:B3:F1:A6:6F:9A:41:59
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:fd:2f:7e:53:45:51:47:dc:4a:0d:04:90:22:8a:97:2c:
13:32:3e:c9:81:f1:92:82:10:ee:03:b7:d7:f9:58:20:3b:52:
cb:63:f8:de:48:98:61:91:62:69:a4:9e:83:e2:ab:51:cd:e0:
3d:9b:dd:f0:c4:ca:4e:aa:f6:b9:ec:5a:12:4d:47:30:f1:7a:
7c:50:94:17:db:6a:24:59:95:c8:cb:90:d6:ec:62:f3:92:dd:
4c:e4:59:63:4f:38:b8:38:58:a7:41:2d:4a:86:6e:a5:9b:84:
62:62:8a:04:95:89:df:8f:9a:78:ed:a5:91:c4:59:25:74:72:
74:ab:96:55:4e:06:65:9b:f1:a7:a0:f7:a2:49:ab:60:c9:37:
06:0b:0c:a5:ca:b2:d0:5c:ce:be:db:ee:3a:80:dd:78:6b:74:
35:2a:83:bd:a4:29:0f:f6:99:48:0d:e0:57:7e:ff:07:42:a4:
fa:43:c8:dd:db:6d:ba:fd:0a:20:28:40:de:21:b8:a8:16:b9:
f6:0e:e2:db:f8:87:ed:0a:79:58:c8:d1:db:e6:cd:05:a9:18:
ca:a0:8b:98:0e:fe:3f:4e:3b:f5:90:fe:eb:b0:f2:cb:16:f9:
e7:b0:86:1d:31:03:5b:70:1f:d3:dd:99:1d:b4:98:52:36:28:
61:3c:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:55:34 2025 by rpki-client