This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: IUDOoPmSsTBA+VBFje6sQ0Edev9wGLSNmfjX2W3X0KA= Subject key identifier: 0B:34:28:40:D3:49:16:37:81:6E:28:60:ED:7C:08:92:6E:80:90:FE Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 3CBD6BAC3BBA28351BF961E063DFCEF80EC65CB8 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: E4 Signing time: Sat 20 Dec 2025 13:29:26 +0000 Manifest this update: Sat 20 Dec 2025 13:24:26 +0000 Manifest next update: Sun 21 Dec 2025 17:02:26 +0000 Files and hashes: 1: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 2: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 3: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 4: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 5: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) 6: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 7: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 8: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 9: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 10: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: VOFIkoW3gktGXnLmcWUmsAQqNOQdi6VDRZIV0rdA/t8=) 11: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 12: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 13: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bd:6b:ac:3b:ba:28:35:1b:f9:61:e0:63:df:ce:f8:0e:c6:5c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Dec 20 13:24:26 2025 GMT Not After : Dec 21 17:02:26 2025 GMT Subject: CN=0B342840D3491637816E2860ED7C08926E8090FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:ad:f0:76:9c:5e:22:40:25:0e:06:fb:90: ee:e9:76:be:8c:ab:13:b3:98:3a:e4:7b:fd:cb:79: ef:d5:40:61:a4:66:1b:29:ea:eb:04:40:19:29:4d: 2c:e7:3f:e8:4f:44:73:71:2e:bd:78:72:9a:f7:c6: df:fe:6b:47:10:a3:a0:b9:9f:0b:43:e0:63:19:cb: c0:6f:0f:d9:0b:d9:57:a4:1b:30:8c:f5:e5:79:ef: 2a:57:7c:8c:ee:ec:c2:50:b4:f4:7a:a5:b5:8b:b7: bc:38:d5:65:27:7b:74:a4:d7:dc:90:3f:6c:ce:65: 9e:40:46:b3:38:49:d3:84:7f:24:fa:d0:4f:9e:0e: 5a:a6:8c:07:0a:dd:7f:75:47:8d:ae:74:2c:f0:43: c8:e0:3b:2b:af:cb:1f:4c:7f:6e:76:26:61:14:96: 13:72:2f:90:85:82:4b:bc:b3:eb:a8:b5:b2:c0:2b: 6c:10:a6:9e:07:6e:71:e7:49:41:e6:fe:01:b0:16: cf:02:81:1f:70:65:87:74:e4:6c:06:ee:eb:dc:7e: 7b:49:11:66:d9:4d:76:3f:49:85:17:4c:cd:25:72: 98:5c:61:7f:b0:19:91:1d:9b:70:9e:89:f9:6d:11: e6:68:79:49:e2:9e:0c:25:1d:64:16:a5:a8:d6:18: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:34:28:40:D3:49:16:37:81:6E:28:60:ED:7C:08:92:6E:80:90:FE X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:c3:72:98:65:dd:c4:6f:d8:c4:92:7e:02:d2:1c:dd:49:8b: f7:85:cc:6e:73:c0:ae:ed:fa:0f:0d:e1:54:ba:6c:e6:59:87: 90:c9:e9:8c:6e:3d:b0:9b:2c:8a:6a:a1:8d:67:a4:d9:73:e7: 10:4e:5d:a0:80:60:f7:dc:0f:50:22:72:2f:26:e6:8e:08:d1: 8c:43:fd:8f:fd:39:e3:c6:dc:dc:af:4e:d0:8f:cc:a4:50:c5: aa:d3:93:90:bd:43:02:e1:59:c8:ab:e3:33:54:bc:79:25:b6: 14:3a:66:5b:b4:c9:40:c5:7a:a9:cb:b8:77:69:78:d8:ec:14: b3:a5:3c:b7:19:03:4c:76:6d:f5:75:31:1a:24:82:fc:0c:e6: c7:5f:23:4c:7e:63:fc:4d:1c:ba:1a:e9:a2:c6:9a:95:9b:e0: a7:94:f8:b5:de:57:bf:0a:96:c0:9c:01:1f:49:3d:49:b9:b8: 9d:32:aa:e8:34:5c:c4:e8:38:f8:9d:47:5f:d7:5d:00:1f:4d: ff:1e:12:bf:b7:4a:c2:57:0d:5b:4a:3e:5d:36:76:27:e3:7a: 36:79:9f:24:09:d4:18:c0:24:31:9d:76:0b:92:4a:7c:bf:e6: 09:5f:33:ce:65:af:8d:83:2e:d5:fe:d3:63:fd:52:c7:b9:3e: 45:23:59:e6 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUPL1rrDu6KDUb+WHgY9/O+A7GXLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTEyMjAxMzI0MjZaFw0yNTEyMjExNzAyMjZaMDMxMTAvBgNV BAMTKDBCMzQyODQwRDM0OTE2Mzc4MTZFMjg2MEVEN0MwODkyNkU4MDkwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPo63wdpxeIkAlDgb7kO7pdr6M qxOzmDrke/3Lee/VQGGkZhsp6usEQBkpTSznP+hPRHNxLr14cpr3xt/+a0cQo6C5 nwtD4GMZy8BvD9kL2VekGzCM9eV57ypXfIzu7MJQtPR6pbWLt7w41WUne3Sk19yQ P2zOZZ5ARrM4SdOEfyT60E+eDlqmjAcK3X91R42udCzwQ8jgOyuvyx9Mf252JmEU lhNyL5CFgku8s+uotbLAK2wQpp4HbnHnSUHm/gGwFs8CgR9wZYd05GwG7uvcfntJ EWbZTXY/SYUXTM0lcphcYX+wGZEdm3CeifltEeZoeUningwlHWQWpajWGIlLAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUCzQoQNNJFjeBbihg7XwIkm6AkP4wHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAMLDcphl3cRv2MSSfgLSHN1Ji/eFzG5zwK7t+g8N4VS6bOZZh5DJ6Yxu PbCbLIpqoY1npNlz5xBOXaCAYPfcD1Aici8m5o4I0YxD/Y/9OePG3NyvTtCPzKRQ xarTk5C9QwLhWcir4zNUvHklthQ6Zlu0yUDFeqnLuHdpeNjsFLOlPLcZA0x2bfV1 MRokgvwM5sdfI0x+Y/xNHLoa6aLGmpWb4KeU+LXeV78KlsCcAR9JPUm5uJ0yqug0 XMToOPidR1/XXQAfTf8eEr+3SsJXDVtKPl02difjejZ5nyQJ1BjAJDGddguSSny/ 5glfM85lr42DLtX+02P9Use5PkUjWeY= -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:52 2025 by rpki-client