This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          cyYragR26XXrZiMaFoUKwHm5HrtCMBGQolSCivmUQQM=
Subject key identifier:   A1:F7:E0:F9:2C:95:CF:E4:5E:75:63:B4:2C:B3:F1:A6:6F:9A:41:59
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       40B610EE8B365EE03309FCD52F8AD15F63F73D0E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          D0
Signing time:             Sat 06 Dec 2025 19:37:14 +0000
Manifest this update:     Sat 06 Dec 2025 19:32:14 +0000
Manifest next update:     Sun 07 Dec 2025 22:21:14 +0000
Files and hashes:         1: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          2: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          3: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          4: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          5: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (hash: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY=)
                          6: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
                          7: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: GTyI8XMSacKMo6o1EeKk8y835FUW1J7WZvBKdEJVCp8=)
                          8: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          9: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
                          10: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
                          11: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          12: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
                          13: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          14: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          15: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
                          16: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          17: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          18: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          19: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          20: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          21: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
                          22: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          23: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          24: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          25: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          26: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          27: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b6:10:ee:8b:36:5e:e0:33:09:fc:d5:2f:8a:d1:5f:63:f7:3d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Dec  6 19:32:14 2025 GMT
            Not After : Dec  7 22:21:14 2025 GMT
        Subject: CN=A1F7E0F92C95CFE45E7563B42CB3F1A66F9A4159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:18:a2:6c:bf:d1:09:ae:74:87:3c:bf:4e:
                    b2:1f:06:d6:c1:c9:2c:98:77:5b:c6:96:57:d9:e9:
                    6b:ba:82:8a:45:e4:3d:0b:d9:34:6e:62:b3:71:4a:
                    01:df:18:cb:ee:e8:74:4d:f3:a1:9f:e0:26:af:06:
                    c0:24:10:4a:b5:bb:ca:89:39:4d:89:f0:e0:2d:1f:
                    ca:98:72:ca:bd:f3:7c:9a:d1:f7:37:4f:46:d8:0b:
                    c9:5f:b0:8a:32:80:6e:cb:26:5c:1b:05:a2:8e:3f:
                    74:51:36:00:00:19:04:82:d4:f7:03:73:3f:20:84:
                    4a:13:16:c6:0d:e1:b8:19:d8:4c:82:a0:97:ca:a8:
                    82:d6:c7:9a:2c:a9:fb:d0:1b:18:8f:25:5e:5e:ee:
                    5f:72:0d:56:f2:0e:e1:2e:d5:38:db:5f:74:fe:a6:
                    36:0f:47:18:0d:aa:40:e8:c7:7a:4e:ad:ec:6d:e6:
                    8f:5b:2b:e0:dc:38:ed:36:f0:ed:b6:6d:50:2c:3a:
                    6d:6e:4e:f8:e4:13:09:a4:76:00:bd:ab:fb:ec:ef:
                    c4:08:68:6a:9b:dd:c6:0d:9c:e7:03:96:9c:b9:48:
                    be:83:3b:81:9d:42:03:b7:fa:c7:bc:e4:fd:be:9a:
                    75:70:fa:d7:4c:30:6d:82:78:0c:17:6a:87:a5:ba:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F7:E0:F9:2C:95:CF:E4:5E:75:63:B4:2C:B3:F1:A6:6F:9A:41:59
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:fd:2f:7e:53:45:51:47:dc:4a:0d:04:90:22:8a:97:2c:
         13:32:3e:c9:81:f1:92:82:10:ee:03:b7:d7:f9:58:20:3b:52:
         cb:63:f8:de:48:98:61:91:62:69:a4:9e:83:e2:ab:51:cd:e0:
         3d:9b:dd:f0:c4:ca:4e:aa:f6:b9:ec:5a:12:4d:47:30:f1:7a:
         7c:50:94:17:db:6a:24:59:95:c8:cb:90:d6:ec:62:f3:92:dd:
         4c:e4:59:63:4f:38:b8:38:58:a7:41:2d:4a:86:6e:a5:9b:84:
         62:62:8a:04:95:89:df:8f:9a:78:ed:a5:91:c4:59:25:74:72:
         74:ab:96:55:4e:06:65:9b:f1:a7:a0:f7:a2:49:ab:60:c9:37:
         06:0b:0c:a5:ca:b2:d0:5c:ce:be:db:ee:3a:80:dd:78:6b:74:
         35:2a:83:bd:a4:29:0f:f6:99:48:0d:e0:57:7e:ff:07:42:a4:
         fa:43:c8:dd:db:6d:ba:fd:0a:20:28:40:de:21:b8:a8:16:b9:
         f6:0e:e2:db:f8:87:ed:0a:79:58:c8:d1:db:e6:cd:05:a9:18:
         ca:a0:8b:98:0e:fe:3f:4e:3b:f5:90:fe:eb:b0:f2:cb:16:f9:
         e7:b0:86:1d:31:03:5b:70:1f:d3:dd:99:1d:b4:98:52:36:28:
         61:3c:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:55:34 2025 by rpki-client