This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier: er/071Zy3XAtX1og3NjM4Yizj5Fds7splUnzLf4CRfY=
Subject key identifier: C5:DF:76:4C:0B:A3:8E:14:07:FC:2A:0F:21:04:CF:C1:05:1B:81:3D
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 14EDC265B2F1EF2DD74309DD1346C252DC3CC254
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number: E8
Signing time: Sun 21 Dec 2025 15:38:37 +0000
Manifest this update: Sun 21 Dec 2025 15:33:37 +0000
Manifest next update: Mon 22 Dec 2025 17:01:37 +0000
Files and hashes: 1: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
2: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
3: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
4: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
5: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
6: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: ofyEeJFKau3ZyI68iLvbXyRm3t15QakhcCYUf6SW+BQ=)
7: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
8: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
10: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
11: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
13: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
14: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
15: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ed:c2:65:b2:f1:ef:2d:d7:43:09:dd:13:46:c2:52:dc:3c:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: Dec 21 15:33:37 2025 GMT
Not After : Dec 22 17:01:37 2025 GMT
Subject: CN=C5DF764C0BA38E1407FC2A0F2104CFC1051B813D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:d7:fc:43:68:f5:39:58:03:00:b1:68:27:
47:bb:32:cd:b8:5f:c2:bb:ce:0e:7b:67:ed:8e:c7:
32:85:9c:25:13:34:37:01:64:6a:41:26:ea:1e:c2:
55:3f:a7:35:7f:6e:0c:85:67:ff:33:91:6c:f8:67:
53:f2:9d:f9:bb:61:b2:9f:3e:ef:c1:3c:39:b2:51:
f2:de:e9:b7:dc:bb:fc:91:7c:c6:8a:44:27:ce:36:
3f:83:5d:35:6e:e3:13:47:fb:ef:76:13:ee:52:b7:
62:a1:7f:e5:34:77:e4:1e:af:35:1f:80:3c:13:46:
33:0f:ac:3e:2c:c7:20:75:6f:b0:07:b5:4c:fe:e7:
bb:25:12:ab:83:e2:ee:e5:1a:dd:9d:86:74:33:fe:
b5:fa:21:e7:3e:b7:bb:89:27:07:a3:b4:48:ff:1b:
6f:b2:43:a7:25:f1:ff:15:46:25:af:38:4a:b3:ba:
66:54:1d:f5:50:2f:3d:54:54:29:2e:1e:8d:9b:92:
1c:2d:ce:2a:fc:b3:d9:d0:98:4a:80:b3:f7:0e:b4:
d9:30:96:6d:62:5c:57:76:c5:98:95:51:1d:fe:79:
b6:23:35:65:a6:f6:0d:62:5e:d9:bc:86:fb:84:f1:
1b:3b:4b:ed:bc:84:0b:86:2b:39:8d:97:be:53:ab:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:76:4C:0B:A3:8E:14:07:FC:2A:0F:21:04:CF:C1:05:1B:81:3D
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3c:0e:67:89:dd:83:df:14:66:9e:f8:e7:26:4a:7b:52:fd:
76:81:d4:60:be:45:ef:b4:b1:24:48:e2:cc:dc:b8:f4:43:4e:
10:63:ce:48:45:bf:93:19:3d:72:88:3c:db:f4:f4:56:cd:0d:
72:4d:1d:ae:fa:38:64:c8:2c:73:6e:7b:6e:8d:1a:6a:6b:19:
2b:4d:c3:e9:aa:68:a7:b0:f2:e9:53:2b:6a:0e:23:63:30:8d:
a0:d9:a0:79:a7:f3:10:08:ec:6e:3b:f4:ce:77:28:75:1c:bf:
a4:53:9e:2f:fd:79:1c:78:21:73:7c:0f:97:4c:a6:c7:c9:cf:
c5:72:53:9f:b2:80:c8:bc:cb:e2:88:63:f0:4e:db:82:58:98:
30:4a:26:61:9a:ec:76:6f:6b:03:2d:c6:16:f7:47:c9:ef:26:
f0:5c:59:5d:83:7b:ab:41:ce:f2:fa:81:f3:e9:ca:5b:5e:65:
eb:cb:d8:33:36:5a:b1:bc:be:82:ad:22:6b:54:4d:db:de:98:
5c:e7:7d:0c:87:d0:9c:f7:a4:89:b7:c7:a0:e3:b7:48:1c:8b:
eb:37:96:4a:9a:50:17:c8:1c:f9:22:a4:74:7b:21:15:c3:58:
35:7d:85:2e:87:80:73:3a:66:2d:af:5f:09:56:fb:c5:de:4f:
4c:b2:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:05:16 2025 by rpki-client