This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          er/071Zy3XAtX1og3NjM4Yizj5Fds7splUnzLf4CRfY=
Subject key identifier:   C5:DF:76:4C:0B:A3:8E:14:07:FC:2A:0F:21:04:CF:C1:05:1B:81:3D
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       14EDC265B2F1EF2DD74309DD1346C252DC3CC254
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          E8
Signing time:             Sun 21 Dec 2025 15:38:37 +0000
Manifest this update:     Sun 21 Dec 2025 15:33:37 +0000
Manifest next update:     Mon 22 Dec 2025 17:01:37 +0000
Files and hashes:         1: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
                          2: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
                          3: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
                          4: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
                          5: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
                          6: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: ofyEeJFKau3ZyI68iLvbXyRm3t15QakhcCYUf6SW+BQ=)
                          7: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
                          8: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
                          9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
                          10: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
                          11: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
                          12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
                          13: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
                          14: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
                          15: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 17:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ed:c2:65:b2:f1:ef:2d:d7:43:09:dd:13:46:c2:52:dc:3c:c2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Dec 21 15:33:37 2025 GMT
            Not After : Dec 22 17:01:37 2025 GMT
        Subject: CN=C5DF764C0BA38E1407FC2A0F2104CFC1051B813D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:d7:fc:43:68:f5:39:58:03:00:b1:68:27:
                    47:bb:32:cd:b8:5f:c2:bb:ce:0e:7b:67:ed:8e:c7:
                    32:85:9c:25:13:34:37:01:64:6a:41:26:ea:1e:c2:
                    55:3f:a7:35:7f:6e:0c:85:67:ff:33:91:6c:f8:67:
                    53:f2:9d:f9:bb:61:b2:9f:3e:ef:c1:3c:39:b2:51:
                    f2:de:e9:b7:dc:bb:fc:91:7c:c6:8a:44:27:ce:36:
                    3f:83:5d:35:6e:e3:13:47:fb:ef:76:13:ee:52:b7:
                    62:a1:7f:e5:34:77:e4:1e:af:35:1f:80:3c:13:46:
                    33:0f:ac:3e:2c:c7:20:75:6f:b0:07:b5:4c:fe:e7:
                    bb:25:12:ab:83:e2:ee:e5:1a:dd:9d:86:74:33:fe:
                    b5:fa:21:e7:3e:b7:bb:89:27:07:a3:b4:48:ff:1b:
                    6f:b2:43:a7:25:f1:ff:15:46:25:af:38:4a:b3:ba:
                    66:54:1d:f5:50:2f:3d:54:54:29:2e:1e:8d:9b:92:
                    1c:2d:ce:2a:fc:b3:d9:d0:98:4a:80:b3:f7:0e:b4:
                    d9:30:96:6d:62:5c:57:76:c5:98:95:51:1d:fe:79:
                    b6:23:35:65:a6:f6:0d:62:5e:d9:bc:86:fb:84:f1:
                    1b:3b:4b:ed:bc:84:0b:86:2b:39:8d:97:be:53:ab:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DF:76:4C:0B:A3:8E:14:07:FC:2A:0F:21:04:CF:C1:05:1B:81:3D
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3c:0e:67:89:dd:83:df:14:66:9e:f8:e7:26:4a:7b:52:fd:
         76:81:d4:60:be:45:ef:b4:b1:24:48:e2:cc:dc:b8:f4:43:4e:
         10:63:ce:48:45:bf:93:19:3d:72:88:3c:db:f4:f4:56:cd:0d:
         72:4d:1d:ae:fa:38:64:c8:2c:73:6e:7b:6e:8d:1a:6a:6b:19:
         2b:4d:c3:e9:aa:68:a7:b0:f2:e9:53:2b:6a:0e:23:63:30:8d:
         a0:d9:a0:79:a7:f3:10:08:ec:6e:3b:f4:ce:77:28:75:1c:bf:
         a4:53:9e:2f:fd:79:1c:78:21:73:7c:0f:97:4c:a6:c7:c9:cf:
         c5:72:53:9f:b2:80:c8:bc:cb:e2:88:63:f0:4e:db:82:58:98:
         30:4a:26:61:9a:ec:76:6f:6b:03:2d:c6:16:f7:47:c9:ef:26:
         f0:5c:59:5d:83:7b:ab:41:ce:f2:fa:81:f3:e9:ca:5b:5e:65:
         eb:cb:d8:33:36:5a:b1:bc:be:82:ad:22:6b:54:4d:db:de:98:
         5c:e7:7d:0c:87:d0:9c:f7:a4:89:b7:c7:a0:e3:b7:48:1c:8b:
         eb:37:96:4a:9a:50:17:c8:1c:f9:22:a4:74:7b:21:15:c3:58:
         35:7d:85:2e:87:80:73:3a:66:2d:af:5f:09:56:fb:c5:de:4f:
         4c:b2:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:05:16 2025 by rpki-client