This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
File:                     6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json)
Hash identifier:          AHJ0KbqkNDiKks/feOWI1N+BX6pa5nPD7aZtMiERP3k=
Subject key identifier:   F3:98:40:6E:28:4F:75:14:92:D2:47:DC:29:35:E1:66:52:2A:A2:DB
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       3901817DA55AA1E6C5C3F8B36EDAA4D1824FD6C3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
Manifest number:          94
Signing time:             Sat 20 Dec 2025 18:18:47 +0000
Manifest this update:     Sat 20 Dec 2025 18:13:47 +0000
Manifest next update:     Sun 21 Dec 2025 21:57:47 +0000
Files and hashes:         1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=)
                          2: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=)
                          3: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: CZdPdkV7StSHyO5pkmEF8S2kWhQucB3vhpXnvxkLngA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:01:81:7d:a5:5a:a1:e6:c5:c3:f8:b3:6e:da:a4:d1:82:4f:d6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Dec 20 18:13:47 2025 GMT
            Not After : Dec 21 21:57:47 2025 GMT
        Subject: CN=F398406E284F751492D247DC2935E166522AA2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:4f:4c:37:20:c0:a3:ba:b6:2b:c8:f3:90:
                    56:1b:04:8a:c1:0d:15:cc:bd:42:76:c2:7f:94:62:
                    f5:54:00:c5:28:10:4f:25:63:3d:9e:0f:ae:81:41:
                    8b:7a:20:4d:6a:15:37:19:24:48:5b:67:29:14:73:
                    f4:e0:c9:77:a8:73:46:45:4a:d1:26:f4:9b:e6:ff:
                    f0:b2:ea:2f:56:c6:2d:4e:1a:68:14:9d:4c:2f:45:
                    2f:52:ae:8e:16:bc:8d:00:cb:7f:45:cb:d4:b6:0a:
                    e4:94:59:2e:f2:da:57:b3:d9:80:86:96:96:71:56:
                    22:66:11:13:a2:98:b3:75:b4:0f:12:06:7f:b4:9c:
                    ef:0c:d1:fe:60:f1:d7:41:f5:9b:7c:e3:2d:ab:f5:
                    18:81:ae:59:be:3f:b1:d2:57:5e:32:65:c3:91:89:
                    19:8c:86:58:f4:ec:fc:2e:2b:0a:70:22:62:92:33:
                    e2:5f:fe:83:7e:8f:38:88:2a:58:b1:a1:92:ca:b7:
                    41:0a:18:93:0a:5e:26:34:2a:e3:fe:5f:95:49:25:
                    52:c4:15:b9:b9:a8:47:49:af:a8:f1:53:46:c7:10:
                    6e:2d:47:ff:3f:6e:60:da:67:d8:7c:7a:b0:b3:dd:
                    7d:9b:f8:1c:03:40:40:b5:0e:b5:74:a0:ac:e9:d2:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:40:6E:28:4F:75:14:92:D2:47:DC:29:35:E1:66:52:2A:A2:DB
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:34:8c:40:41:61:71:a8:ca:dc:94:3f:44:c5:3e:63:17:68:
         86:87:4b:28:2f:28:15:77:1d:41:38:0f:71:45:05:24:5e:ee:
         4b:e6:d3:16:ff:6e:15:c3:4a:c7:a3:ca:04:ab:06:82:a1:5a:
         f9:b2:04:3c:d2:db:c9:cc:82:a2:b8:63:81:2d:22:7b:0e:0d:
         86:73:b3:d9:83:3b:72:12:b6:48:e4:34:c0:a7:2c:a3:9b:9a:
         d1:3f:59:57:21:eb:bd:43:73:6d:77:2a:23:41:68:27:7e:83:
         fb:2f:1e:aa:c3:12:a4:41:36:b8:8c:6c:56:50:03:9b:b3:6b:
         18:93:20:6f:86:86:f5:db:61:d3:04:aa:77:22:5e:55:ff:34:
         49:fb:0d:27:71:60:4f:a6:b1:fb:fa:dc:e9:56:0e:66:9e:cc:
         5c:36:5e:17:22:8b:67:4e:e0:f9:a5:c0:3b:6e:34:e8:56:ee:
         83:54:f0:b0:22:6a:38:a7:0a:28:8c:7d:86:f9:de:2f:fe:ab:
         e6:4c:74:13:75:8d:12:9d:33:29:98:c0:b6:47:a4:6f:e4:36:
         37:77:a7:23:3c:6a:a7:a6:ae:31:f3:0f:34:d3:26:9a:4c:79:
         97:f7:6e:e9:54:3d:00:c3:d9:bf:8e:fb:62:f2:86:f6:1c:25:
         d4:f0:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:07:17 2025 by rpki-client