This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File:                     547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier:          z5MZfMmdbpkGT0ns5FVtpo6LOC3mdqRxoSkA8ZEB1Fo=
Subject key identifier:   33:F4:89:10:2F:D5:0F:9B:7D:DA:5A:75:C9:E0:A6:52:C3:4E:67:00
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer:       /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial:       2D32B183A2EADB058E125908AE0182204BB469F1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number:          E1
Signing time:             Sat 20 Dec 2025 03:47:14 +0000
Manifest this update:     Sat 20 Dec 2025 03:42:14 +0000
Manifest next update:     Sun 21 Dec 2025 06:43:14 +0000
Files and hashes:         1: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=)
                          2: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: 2dOWW8X42FVhlnc+4zOVKEjO33Vg/1rpsbJZ1FtJTyg=)
                          3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=)
                          4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=)
                          5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:32:b1:83:a2:ea:db:05:8e:12:59:08:ae:01:82:20:4b:b4:69:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
        Validity
            Not Before: Dec 20 03:42:14 2025 GMT
            Not After : Dec 21 06:43:14 2025 GMT
        Subject: CN=33F489102FD50F9B7DDA5A75C9E0A652C34E6700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:55:9d:41:ac:11:1c:b3:f9:04:0e:59:7a:
                    65:d4:92:8b:78:52:56:2d:c9:42:01:e8:27:2e:78:
                    d9:0e:99:ca:19:ee:7f:b2:46:63:84:69:6d:3b:0e:
                    d3:50:c6:a0:09:b3:a3:65:88:07:96:0f:c5:1f:72:
                    4a:b1:a3:63:97:d8:4e:13:b4:7c:f9:41:50:dd:3e:
                    04:97:5b:00:b9:df:f9:fa:87:11:23:61:7b:54:8d:
                    09:12:c2:db:89:73:fa:84:15:7b:ab:54:43:cb:01:
                    10:4e:ca:bb:33:1d:bd:07:1e:f8:09:ee:20:d3:a8:
                    0b:b8:24:d8:ee:c1:0f:cd:33:a3:d5:bc:7a:00:7a:
                    e2:45:b6:9f:73:9f:b8:25:4e:5b:53:f6:5a:71:a9:
                    a7:ec:e7:d9:da:5d:26:d2:13:dd:8b:22:cb:90:60:
                    6a:96:e7:bc:56:dc:96:85:49:23:21:28:de:67:52:
                    e6:16:b8:46:89:96:c3:0e:6b:3b:a8:e9:e2:f1:44:
                    8e:a5:06:ee:a6:82:e3:2a:0c:cf:58:9b:65:39:0b:
                    58:61:fc:a4:2b:ae:32:1c:b9:ca:9f:16:3a:20:fe:
                    9d:aa:ab:42:d8:98:ff:75:8c:89:e3:9f:3b:29:98:
                    53:01:e9:70:69:21:99:24:3a:12:b6:3c:bd:68:d5:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:89:10:2F:D5:0F:9B:7D:DA:5A:75:C9:E0:A6:52:C3:4E:67:00
            X509v3 Authority Key Identifier:
                keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:5b:43:f1:d6:a9:bf:0a:bc:c0:32:8e:66:99:a8:e6:b5:
         6a:3e:17:e3:19:dc:ca:52:f9:eb:56:df:5e:46:04:b1:d0:49:
         47:82:41:be:ca:f4:01:87:01:06:c2:26:86:9d:05:a5:eb:a5:
         f2:56:18:1d:30:dc:9c:7f:8d:9f:92:a8:0f:f4:2c:17:e7:04:
         e9:5e:a6:9b:1c:b1:9a:1c:4c:87:58:22:e9:59:8f:c6:27:9d:
         52:f5:a7:44:60:a1:ad:97:1e:ce:8a:b0:16:5e:35:7c:0e:ac:
         53:88:fe:b3:0a:a1:72:07:12:2e:7e:66:58:9b:81:c4:7e:75:
         36:5c:93:94:1e:60:42:86:78:12:58:d7:f7:f0:e7:75:ef:6c:
         8e:c6:4d:f3:13:c3:3f:69:73:15:75:dc:b0:45:8a:68:b5:d0:
         05:49:4e:d4:49:f5:48:a7:59:e7:a4:d4:90:14:f7:f5:75:91:
         fd:be:5b:3a:b5:38:76:c0:00:e4:41:86:30:8e:cd:63:e2:f1:
         f1:ee:8b:d7:ea:2c:e7:2d:a2:a2:a4:52:50:17:bf:7e:15:7d:
         b4:af:0f:e2:bc:75:8f:6a:1f:60:2e:6e:fd:c6:e9:19:4c:2b:
         a3:65:3c:94:72:3a:d9:17:b2:e8:c7:78:4e:85:31:3e:6c:96:
         c8:fa:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:07:15 2025 by rpki-client