This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
File:                     553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json)
Hash identifier:          gqX93Ku8E6v3TjvhlA0wJzmnrCMZ4bdETshEQqNlw80=
Subject key identifier:   F4:48:FC:FC:2F:C0:50:87:2A:A4:F9:5A:31:27:E1:A1:10:C4:72:36
Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Certificate issuer:       /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Certificate serial:       07FBFA72A8CCCAFFAD10BB3CC2A027002362012B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
Manifest number:          0114
Signing time:             Sun 25 Jan 2026 11:18:14 +0000
Manifest this update:     Sun 25 Jan 2026 11:13:14 +0000
Manifest next update:     Mon 26 Jan 2026 13:57:14 +0000
Files and hashes:         1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: cvar6CifmBqiS6SKBQYYfRyTr3Zu1YBO22ornlAIUD4=)
                          2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fb:fa:72:a8:cc:ca:ff:ad:10:bb:3c:c2:a0:27:00:23:62:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
        Validity
            Not Before: Jan 25 11:13:14 2026 GMT
            Not After : Jan 26 13:57:14 2026 GMT
        Subject: CN=F448FCFC2FC050872AA4F95A3127E1A110C47236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:c0:08:80:27:d2:84:23:7c:c4:da:69:0a:
                    e9:94:ee:4d:20:4c:50:c7:aa:df:79:b3:9b:6a:33:
                    b0:73:e2:c4:4c:da:52:38:aa:ea:8e:3f:da:7a:4b:
                    8a:c8:b7:f6:23:f6:00:8f:41:50:4a:0e:38:64:dc:
                    1f:26:de:49:7a:1b:93:14:b1:f7:4a:17:d7:7f:ac:
                    8e:c3:3f:bb:8c:b3:6c:62:1f:b7:22:74:77:83:9e:
                    3e:4d:06:b5:ba:c1:7f:ce:a7:7b:ce:a1:8c:90:d0:
                    45:27:c3:7d:bf:b4:35:2c:b8:ed:ca:60:97:b6:85:
                    f6:df:e6:af:7d:81:53:d8:a2:44:9d:55:80:a8:f6:
                    71:8c:9f:cb:13:e4:91:3f:a7:de:a7:74:0a:e1:1a:
                    ef:59:0b:ad:f1:6f:55:ee:c3:c9:79:24:4c:62:b2:
                    71:6c:c3:1c:78:01:10:30:37:ef:0f:9c:49:4e:b5:
                    e2:a9:ef:2e:7c:78:5b:56:68:3a:d1:78:09:a6:f3:
                    11:ad:bc:4a:39:27:02:06:4b:ec:aa:c3:50:ad:61:
                    36:89:0c:e3:f8:7b:47:49:ca:e9:c6:50:1f:98:a4:
                    f0:b9:9d:fb:20:7c:91:6d:d8:46:3e:8d:5c:8d:e9:
                    be:79:45:0d:0a:fc:26:a2:65:f5:64:31:44:05:5b:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:48:FC:FC:2F:C0:50:87:2A:A4:F9:5A:31:27:E1:A1:10:C4:72:36
            X509v3 Authority Key Identifier:
                keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:68:2e:2e:7f:51:7f:2d:6d:49:c4:d0:1e:8a:3d:c9:d5:
         e0:6c:27:6b:88:02:16:3f:af:ca:8d:49:cb:8c:89:85:19:7f:
         1c:f9:e8:4d:c2:43:1d:a6:cb:d6:ec:fb:6d:ef:51:59:8a:b8:
         bc:89:27:10:72:95:b7:81:04:82:bb:35:3d:14:f8:d9:18:3c:
         c5:28:03:35:9c:db:8a:b9:9f:af:45:5c:9a:34:b2:b1:7a:75:
         a9:f0:ce:7a:a8:37:cc:0d:df:62:81:d7:62:79:fb:fd:c5:ee:
         8f:e8:89:3c:5f:ca:50:42:ab:ca:94:ab:61:fd:05:14:37:38:
         4e:e9:44:f3:45:d3:4d:5f:f8:4a:ba:08:d5:66:ee:b8:79:50:
         3d:d1:fe:50:68:57:45:e6:69:c2:3d:97:de:b9:7d:54:22:e9:
         4a:b2:4f:1d:6b:40:ee:0a:8a:c6:ae:9e:01:73:b5:6a:3b:86:
         18:ff:f7:82:1e:eb:31:7e:78:24:78:8f:5d:d4:6d:e7:4d:e4:
         7d:e3:21:2d:e7:b4:10:29:2e:8b:9e:b1:0d:96:91:cc:d6:f8:
         29:0e:e7:ed:87:d2:e6:95:5f:c5:d5:68:35:f7:fe:7a:43:7c:
         46:27:0b:18:71:41:5b:2f:1c:5d:34:b3:39:7f:0a:59:2a:3c:
         d2:dd:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:02 2026 by rpki-client