This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json)
Hash identifier: VmMpiFugP/YzpD0G+BAiFJZhJnYiAiw/ViLEdw1gq54=
Subject key identifier: F9:4B:02:C8:0D:C7:53:B5:54:B4:FE:14:CB:9E:CF:64:0C:C5:85:37
Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C
Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C
Certificate serial: D663965FBA3692F64F50AE282AE00DD23BBAC1
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
Manifest number: E6
Signing time: Sat 20 Dec 2025 17:07:59 +0000
Manifest this update: Sat 20 Dec 2025 17:02:59 +0000
Manifest next update: Sun 21 Dec 2025 17:42:59 +0000
Files and hashes: 1: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: KhVjHPmSFi+kZxIg3Kr1+8qSEbWSwa5naViTC8MeMDo=)
2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=)
3: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d6:63:96:5f:ba:36:92:f6:4f:50:ae:28:2a:e0:0d:d2:3b:ba:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C
Validity
Not Before: Dec 20 17:02:59 2025 GMT
Not After : Dec 21 17:42:59 2025 GMT
Subject: CN=F94B02C80DC753B554B4FE14CB9ECF640CC58537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:ba:05:ed:4c:f5:a9:d1:f4:50:c8:36:17:
1b:c2:a2:e2:64:0f:ed:3f:61:0b:e1:d0:5d:b4:96:
a8:12:cc:48:c5:88:c9:4a:7e:19:cd:6b:2a:c3:80:
95:df:96:b8:a6:4e:86:4c:15:ed:92:00:52:8b:78:
61:17:d6:2f:9c:93:6a:d2:2e:40:f7:0d:27:a5:bc:
ea:47:b4:1a:95:d7:0b:37:e3:04:5b:32:df:5e:b3:
c9:a8:05:cc:9b:de:1c:ee:a0:cc:f8:34:a0:89:36:
29:e6:73:d3:f5:a3:c8:b9:ae:a5:04:66:f2:3e:ca:
aa:13:1c:f9:ec:7c:26:80:e2:b8:10:51:2c:7b:86:
d1:44:9c:8e:df:d4:0f:86:3e:a6:0d:7f:67:44:8f:
df:69:36:9a:f9:cf:e0:87:ea:29:45:6f:71:c2:e8:
68:f3:95:41:f7:20:23:ac:35:25:60:5e:77:51:cb:
10:91:89:ce:b3:da:a4:e1:20:89:1a:bd:7e:ff:71:
ae:e8:4a:25:0f:e5:7e:cc:8d:ed:2d:b2:ac:cb:16:
9e:5f:00:c7:e2:64:e8:77:84:65:10:82:f3:6a:d0:
5a:00:3a:8c:4b:bc:a3:db:9c:40:76:ac:50:b9:4b:
69:9a:23:c6:8f:ef:a2:c4:68:ff:56:39:8a:0c:e9:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4B:02:C8:0D:C7:53:B5:54:B4:FE:14:CB:9E:CF:64:0C:C5:85:37
X509v3 Authority Key Identifier:
keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:08:88:d8:be:e0:4c:65:ff:fc:37:85:87:db:f9:38:a8:f2:
d1:0e:25:3f:0e:c0:ca:b8:8c:da:35:68:f2:4c:dc:fb:06:4e:
fb:e2:c0:3e:f8:b4:4b:c9:89:89:d9:f9:b5:86:b8:cd:b5:d9:
08:61:c8:c5:58:80:c6:f7:9e:03:4c:46:f0:2d:2d:e9:b2:b5:
c5:cb:dd:94:f6:72:f1:a3:d5:b4:4e:d6:c4:29:00:65:e5:6a:
13:be:1a:9a:b5:7d:c7:b5:1c:ae:36:63:1b:9e:a1:84:ff:fd:
6f:49:65:00:c1:c9:40:44:8f:0d:53:80:d4:9d:d9:0c:45:c7:
64:ff:7f:e3:d6:32:96:de:32:dd:d4:51:b9:a3:af:bb:a1:85:
1d:27:87:05:6d:00:ae:f4:7b:f5:af:0d:c8:84:71:0f:15:2d:
2e:e4:53:e1:a6:a5:30:6a:9a:87:00:ae:55:9d:5f:e3:2b:69:
a9:94:1b:da:e4:b1:99:88:40:1b:34:21:d0:25:1f:ec:b1:2e:
f8:23:98:bc:b6:9c:0b:6e:c0:f4:9b:70:21:94:71:25:46:8e:
dd:f1:8e:03:8f:88:a4:ed:fd:f3:c5:26:0c:83:6a:6a:6a:2e:
58:0c:77:07:43:51:65:26:50:61:56:fe:b9:e1:e6:ab:da:24:
91:42:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:53:49 2025 by rpki-client