This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json) Hash identifier: 5+5fxNflxb/heY686w5IWVXA/LOlN5SgV9uOFgDB8t8= Subject key identifier: 31:98:F2:BB:9B:63:B1:C1:8D:CD:9C:1B:54:25:D1:85:56:9A:CF:68 Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Certificate serial: 64BDD823ED3E232B756816847A44922B890B1D8E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft Manifest number: E0 Signing time: Sat 20 Dec 2025 15:09:55 +0000 Manifest this update: Sat 20 Dec 2025 15:04:55 +0000 Manifest next update: Sun 21 Dec 2025 15:27:55 +0000 Files and hashes: 1: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=) 2: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=) 3: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: hdRQELHpymrFH+EEf4S1ES7pDFIbauz+HSGq9FeHCoQ=) 4: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=) 5: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bd:d8:23:ed:3e:23:2b:75:68:16:84:7a:44:92:2b:89:0b:1d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51 Validity Not Before: Dec 20 15:04:55 2025 GMT Not After : Dec 21 15:27:55 2025 GMT Subject: CN=3198F2BB9B63B1C18DCD9C1B5425D185569ACF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:67:08:bc:f8:f2:a9:42:9b:63:4a:b9:ef:7e: 18:09:26:8d:f3:9a:32:ce:32:8f:1b:79:5f:ed:4e: 53:68:c6:17:4a:6a:4c:69:88:e2:43:c1:89:d4:fa: 2f:3d:da:7b:61:30:89:7b:9c:59:ca:d1:a7:84:f2: 1b:a1:55:35:db:cd:c7:f3:b5:be:72:ee:05:dd:76: 05:7c:ae:46:51:2e:b1:03:a6:cb:f3:eb:2c:ed:fd: 02:bd:28:1e:b9:43:d0:65:54:53:6d:c3:0f:71:3d: ce:ea:10:86:93:34:2d:11:f2:6f:d5:76:b4:b3:e5: 57:14:4d:75:d0:69:6f:2e:27:b4:ba:52:80:97:ec: 7e:c1:26:d0:96:c0:f2:a5:5c:a5:ed:99:01:09:bc: 99:3f:77:33:cf:1f:ca:7a:38:f6:6f:42:84:94:6a: 08:e3:e7:9b:eb:f6:d4:99:e3:b8:c2:c1:3b:6d:65: fc:3a:99:e2:98:31:03:d1:67:1c:21:f9:4a:92:b1: bf:f2:04:b4:e3:44:00:28:62:ce:7c:78:ea:22:a6: 3a:2a:c7:ce:18:39:4f:e4:37:da:3c:02:98:fb:5f: 2f:ca:79:4b:90:b0:da:c0:42:dd:fd:98:c3:23:f4: 3b:68:88:72:b0:78:da:2c:c7:97:8d:b4:a5:d5:23: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:F2:BB:9B:63:B1:C1:8D:CD:9C:1B:54:25:D1:85:56:9A:CF:68 X509v3 Authority Key Identifier: keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f9:e7:5c:84:e2:62:16:c2:c3:25:9a:f7:cb:a7:85:1a:1a: 22:9f:f9:76:42:dc:41:c1:1e:24:e6:c5:05:93:8b:65:62:23: ac:2f:41:ad:7d:6f:4a:ae:bf:9d:17:d1:88:90:61:79:67:c3: 09:12:6a:b2:d4:5d:be:de:ba:be:7f:5a:96:9e:4c:ff:6d:6d: c2:d2:3d:ee:e0:b9:51:87:2a:b7:4c:0e:68:16:d6:5c:b2:19: 90:be:c9:19:65:b4:39:8e:7c:c6:b5:3a:cc:8e:e3:88:27:53: 96:58:5a:e7:f9:04:90:3c:6f:27:4c:b0:16:82:e1:ce:82:8d: e8:b2:7a:e3:64:38:a5:eb:29:cf:e1:90:d8:a1:6c:97:de:09: fa:4c:89:61:49:e6:b1:f6:60:e6:45:c2:d2:57:58:cd:96:d0: 9a:36:bd:86:ad:75:5d:d8:43:69:8f:ad:b9:89:e6:73:4e:5c: 25:2b:ab:32:92:ed:a2:31:6a:f0:d2:0e:41:4f:c1:a1:81:cb: e0:2a:53:e3:29:8c:74:e3:b5:ac:29:57:2b:67:35:bd:45:e0: 22:74:73:dd:7b:e3:d1:89:75:73:43:9a:31:1b:a0:23:03:0f: a7:61:e6:c6:e4:53:4d:18:7a:f0:4b:23:6c:12:dd:7a:0f:24: b5:0a:ee:bf -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUZL3YI+0+Iyt1aBaEekSSK4kLHY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVGOERGOEI3NEM1RDhCQjY3MzdFQzQyQ0UwMzJBQjRC MDNFMEM1MTAeFw0yNTEyMjAxNTA0NTVaFw0yNTEyMjExNTI3NTVaMDMxMTAvBgNV BAMTKDMxOThGMkJCOUI2M0IxQzE4RENEOUMxQjU0MjVEMTg1NTY5QUNGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyZwi8+PKpQptjSrnvfhgJJo3z mjLOMo8beV/tTlNoxhdKakxpiOJDwYnU+i892nthMIl7nFnK0aeE8huhVTXbzcfz tb5y7gXddgV8rkZRLrEDpsvz6yzt/QK9KB65Q9BlVFNtww9xPc7qEIaTNC0R8m/V drSz5VcUTXXQaW8uJ7S6UoCX7H7BJtCWwPKlXKXtmQEJvJk/dzPPH8p6OPZvQoSU agjj55vr9tSZ47jCwTttZfw6meKYMQPRZxwh+UqSsb/yBLTjRAAoYs58eOoipjoq x84YOU/kN9o8Apj7Xy/KeUuQsNrAQt39mMMj9DtoiHKweNosx5eNtKXVI/YJAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUMZjyu5tjscGNzZwbVCXRhVaaz2gwHwYDVR0j BBgwFoAUbvjfi3TF2LtnN+xCzgMqtLA+DFEwDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQy YmU0ZS8xMC82RUY4REY4Qjc0QzVEOEJCNjczN0VDNDJDRTAzMkFCNEIwM0UwQzUx LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRp ZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzQvNkVGOERGOEI3NEM1 RDhCQjY3MzdFQzQyQ0UwMzJBQjRCMDNFMEM1MS5jZXIwgaAGCCsGAQUFBwELBIGT MIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzEwLzZFRjhERjhCNzRDNUQ4QkI2NzM3RUM0MkNFMDMyQUI0QjAzRTBDNTEu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCj+edchOJiFsLDJZr3y6eFGhoin/l2QtxBwR4k5sUFk4tlYiOs L0GtfW9Krr+dF9GIkGF5Z8MJEmqy1F2+3rq+f1qWnkz/bW3C0j3u4LlRhyq3TA5o FtZcshmQvskZZbQ5jnzGtTrMjuOIJ1OWWFrn+QSQPG8nTLAWguHOgo3osnrjZDil 6ynP4ZDYoWyX3gn6TIlhSeax9mDmRcLSV1jNltCaNr2GrXVd2ENpj625ieZzTlwl K6syku2iMWrw0g5BT8GhgcvgKlPjKYx047WsKVcrZzW9ReAidHPde+PRiXVzQ5ox G6AjAw+nYebG5FNNGHrwSyNsEt16DyS1Cu6/ -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:21 2025 by rpki-client