This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: WIIM4FxRtXrvh6Gsyrte28+nopJOCuz1IFjsnodwVok= Subject key identifier: ED:19:9E:0B:57:9B:A1:59:14:2E:9A:55:29:53:FD:0C:93:9A:7C:C9 Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 21AE94B0D9924540D30418717075A4384B4A42B2 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: D0 Signing time: Sat 06 Dec 2025 03:55:00 +0000 Manifest this update: Sat 06 Dec 2025 03:50:00 +0000 Manifest next update: Sun 07 Dec 2025 03:57:00 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) 2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: CEK+a2Ukth8xYT2j/hG6lTcZNHOOeoJDaBzpSgl8dvA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ae:94:b0:d9:92:45:40:d3:04:18:71:70:75:a4:38:4b:4a:42:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Dec 6 03:50:00 2025 GMT Not After : Dec 7 03:57:00 2025 GMT Subject: CN=ED199E0B579BA159142E9A552953FD0C939A7CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:cc:9e:56:e7:60:b6:81:b7:3f:cd:d1:11: 7a:00:86:6f:68:6f:b3:ab:59:94:a4:d0:7f:92:70: 0f:ad:ee:eb:30:98:4c:fe:d7:41:5a:32:52:96:f0: 3f:4c:cb:83:e3:cd:fa:80:d9:20:de:98:22:ef:72: 1c:1e:04:a9:f6:6e:df:8b:d5:74:f5:ff:9e:ca:18: e1:72:aa:8a:c0:5c:f8:b4:18:b5:b3:76:e6:e6:da: 86:85:96:6a:1a:2f:a8:42:79:0e:ac:55:7e:18:4b: 86:ce:dc:8f:26:3b:46:9e:3b:16:5a:63:49:24:47: eb:94:9c:aa:14:7f:91:06:71:07:bf:38:f4:0c:87: 36:f0:6f:f7:1b:b5:5e:46:52:c5:1c:a0:0d:0b:0f: 8e:5f:66:c9:2d:5b:3d:a5:9b:7e:72:72:43:9f:15: 87:20:8e:5d:31:6c:9b:8a:66:26:7b:97:73:ec:64: 79:d8:3d:af:47:a5:b0:67:40:f2:5a:c0:0c:17:f5: b8:3e:11:02:14:22:9b:a9:43:72:34:c3:ee:9d:76: ff:4b:b2:af:8d:aa:2d:3e:53:4b:06:eb:f4:a8:3e: ea:a5:05:9f:74:fe:47:5f:9a:c3:b9:01:b5:7a:11: 67:c5:d7:44:a8:32:4a:0d:4f:b6:c3:0d:49:f6:2d: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:19:9E:0B:57:9B:A1:59:14:2E:9A:55:29:53:FD:0C:93:9A:7C:C9 X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:02:80:34:52:a0:44:c5:7c:ee:4f:ca:df:c9:b3:79:a7:59: 4b:7e:d4:95:4f:1a:1a:0c:c1:fd:14:a2:ef:ea:4f:ca:b6:78: c6:35:45:6f:9c:29:2d:5e:a6:c8:ac:81:2b:9f:1f:f6:bf:89: 2f:e0:7e:2d:fd:4b:63:76:0e:85:dd:76:a2:b4:cc:a4:b1:6c: 5d:2b:a2:3f:b9:e1:d2:92:a5:40:48:8a:65:52:4c:b2:1e:75: 0b:b5:cd:fc:f4:da:a0:4a:91:64:86:04:03:74:cd:71:e4:f8: 59:5c:eb:32:1b:44:4c:4b:da:42:3e:a2:32:77:b5:b4:62:10: 46:42:d4:c1:88:1e:54:6e:57:1d:18:99:7b:f6:8b:f7:76:39: 4f:00:0d:a2:04:27:62:80:67:08:78:40:b5:cd:d9:6b:f6:61: 9a:e6:fe:c2:71:4c:e8:e3:a3:01:c6:bd:86:47:d4:8d:50:68: 49:cf:96:72:ec:a5:3d:10:7f:9c:5f:a8:5b:26:b0:10:be:a1: f6:58:93:eb:ef:63:fe:22:bd:f9:27:25:f4:05:fc:f9:2c:8f: 67:dd:d2:d1:ad:86:27:50:f4:e8:28:b9:dc:5a:f8:ba:37:4e: e6:9c:9a:fc:a3:aa:d9:0d:69:b6:1a:fa:4a:ef:d0:8d:33:e1: bf:f2:d6:e5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIa6UsNmSRUDTBBhxcHWkOEtKQrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTEyMDYwMzUwMDBaFw0yNTEyMDcwMzU3MDBaMDMxMTAvBgNV BAMTKEVEMTk5RTBCNTc5QkExNTkxNDJFOUE1NTI5NTNGRDBDOTM5QTdDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PcyeVudgtoG3P83REXoAhm9o b7OrWZSk0H+ScA+t7uswmEz+10FaMlKW8D9My4PjzfqA2SDemCLvchweBKn2bt+L 1XT1/57KGOFyqorAXPi0GLWzdubm2oaFlmoaL6hCeQ6sVX4YS4bO3I8mO0aeOxZa Y0kkR+uUnKoUf5EGcQe/OPQMhzbwb/cbtV5GUsUcoA0LD45fZsktWz2lm35yckOf FYcgjl0xbJuKZiZ7l3PsZHnYPa9HpbBnQPJawAwX9bg+EQIUIpupQ3I0w+6ddv9L sq+Nqi0+U0sG6/SoPuqlBZ90/kdfmsO5AbV6EWfF10SoMkoNT7bDDUn2LZo5AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU7RmeC1eboVkULppVKVP9DJOafMkwHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAI4CgDRSoETFfO5Pyt/Js3mnWUt+1JVPGhoMwf0Uou/qT8q2eMY1RW+c KS1epsisgSufH/a/iS/gfi39S2N2DoXddqK0zKSxbF0roj+54dKSpUBIimVSTLIe dQu1zfz02qBKkWSGBAN0zXHk+Flc6zIbRExL2kI+ojJ3tbRiEEZC1MGIHlRuVx0Y mXv2i/d2OU8ADaIEJ2KAZwh4QLXN2Wv2YZrm/sJxTOjjowHGvYZH1I1QaEnPlnLs pT0Qf5xfqFsmsBC+ofZYk+vvY/4ivfknJfQF/Pksj2fd0tGthidQ9Ogoudxa+Lo3 TuacmvyjqtkNabYa+krv0I0z4b/y1uU= -----END CERTIFICATE-----Generated at Sat Dec 6 21:22:34 2025 by rpki-client