This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: VRRUW/P0Otugorx9nIWYQAPW+lLfYtjJD+eaEpgMPMs= Subject key identifier: F3:FF:C2:F8:A6:F7:77:A6:A5:42:A3:B5:8E:AF:43:25:FD:16:B9:8C Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 6FCD223840F8BD3084E9797A02CAF5EAD56F91D0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: E0 Signing time: Sat 20 Dec 2025 11:53:51 +0000 Manifest this update: Sat 20 Dec 2025 11:48:51 +0000 Manifest next update: Sun 21 Dec 2025 15:12:51 +0000 Files and hashes: 1: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 2: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: U6wi2Vfhq89aaW/OAeKz6uumZe1uJhZ2EGaz2CnRK3w=) 3: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cd:22:38:40:f8:bd:30:84:e9:79:7a:02:ca:f5:ea:d5:6f:91:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Dec 20 11:48:51 2025 GMT Not After : Dec 21 15:12:51 2025 GMT Subject: CN=F3FFC2F8A6F777A6A542A3B58EAF4325FD16B98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:d8:e3:63:a8:80:4f:d8:ed:56:75:93:3a: bc:55:80:da:18:73:aa:69:ce:a5:fa:f9:f5:be:2b: 61:b7:3c:f7:88:be:df:e5:a6:0a:ba:35:46:6c:66: 1b:f8:a7:c0:c7:97:ec:33:89:c5:33:f7:2b:0b:46: 5e:d9:f5:52:2b:93:ea:12:c6:ce:ed:63:e2:8a:e1: 56:04:bb:19:d3:0f:a3:88:07:33:10:28:81:b8:e0: e6:1b:9f:db:11:72:e3:fb:e8:25:e9:55:09:e0:4a: c5:f9:84:ab:ea:33:a9:b9:46:40:30:2d:f1:eb:45: 35:13:7e:1d:9a:7a:86:14:9b:68:a8:95:82:b8:a1: d9:04:48:b7:87:47:f4:aa:cd:1c:5c:24:bd:a6:f9: a7:9d:7c:97:2f:8c:1a:6d:cc:be:54:b9:79:12:99: 5f:59:e1:86:a4:e1:6e:21:0a:a5:51:3d:d5:71:a2: 98:22:65:91:fb:d3:ba:90:20:1b:75:4d:85:e9:e5: 61:85:6b:15:07:d5:34:21:a2:d6:d6:ed:63:df:c8: b6:85:f1:e0:04:49:d6:8e:4a:f1:ba:be:f2:43:53: f3:f1:9e:63:f0:cc:9f:68:41:08:4c:e0:18:b1:7a: e3:b6:f2:a5:73:84:09:ab:17:98:88:d7:ea:d2:06: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:C2:F8:A6:F7:77:A6:A5:42:A3:B5:8E:AF:43:25:FD:16:B9:8C X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:23:94:ca:de:75:9f:a6:20:6e:89:c5:46:73:99:e5:e0:bb: c1:92:28:5b:45:da:a6:da:19:4e:da:85:ad:3a:d6:98:a5:69: 05:1e:00:45:b7:bd:b1:07:46:4b:32:4a:33:37:18:76:76:66: 42:23:5f:eb:01:9d:1c:b1:ff:2a:1c:68:47:63:b8:61:61:dc: 5e:51:01:a9:9b:e1:0e:70:63:1e:a6:0a:fe:f2:8f:66:87:6a: 90:34:aa:00:c2:7d:44:51:3e:24:d1:b9:c0:09:fe:c3:56:ef: 94:fc:30:13:67:0b:d6:1e:5d:a6:7f:5f:82:30:f7:53:21:9b: 83:8f:62:c0:c4:c6:2c:70:d0:d6:fd:9c:16:ab:b5:13:84:1c: fa:74:92:04:68:4f:3f:66:c3:df:f7:6e:18:4d:28:f3:17:28: 1f:a6:48:31:4d:87:12:f0:d9:ba:8d:7a:cb:56:30:cb:09:fc: 33:e6:9c:58:73:63:4c:cb:24:6e:55:73:d4:f3:2f:1e:ed:6f: ca:14:bc:d8:af:85:5f:bb:7a:8d:a8:1a:68:65:2e:b3:cc:23: 81:f4:e7:d8:b4:37:47:af:f0:1b:de:fc:e7:0b:cc:d7:f7:eb: 99:56:d3:13:30:36:d3:70:1e:78:c8:f7:06:da:ba:2e:27:8f: 3c:f3:e8:f0 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUb80iOED4vTCE6Xl6Asr16tVvkdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTEyMjAxMTQ4NTFaFw0yNTEyMjExNTEyNTFaMDMxMTAvBgNV BAMTKEYzRkZDMkY4QTZGNzc3QTZBNTQyQTNCNThFQUY0MzI1RkQxNkI5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB39jjY6iAT9jtVnWTOrxVgNoY c6ppzqX6+fW+K2G3PPeIvt/lpgq6NUZsZhv4p8DHl+wzicUz9ysLRl7Z9VIrk+oS xs7tY+KK4VYEuxnTD6OIBzMQKIG44OYbn9sRcuP76CXpVQngSsX5hKvqM6m5RkAw LfHrRTUTfh2aeoYUm2iolYK4odkESLeHR/SqzRxcJL2m+aedfJcvjBptzL5UuXkS mV9Z4Yak4W4hCqVRPdVxopgiZZH707qQIBt1TYXp5WGFaxUH1TQhotbW7WPfyLaF 8eAESdaOSvG6vvJDU/PxnmPwzJ9oQQhM4BixeuO28qVzhAmrF5iI1+rSBnnxAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU8//C+Kb3d6alQqO1jq9DJf0WuYwwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADMjlMredZ+mIG6JxUZzmeXgu8GSKFtF2qbaGU7aha061pilaQUeAEW3 vbEHRksySjM3GHZ2ZkIjX+sBnRyx/yocaEdjuGFh3F5RAamb4Q5wYx6mCv7yj2aH apA0qgDCfURRPiTRucAJ/sNW75T8MBNnC9YeXaZ/X4Iw91Mhm4OPYsDExixw0Nb9 nBartROEHPp0kgRoTz9mw9/3bhhNKPMXKB+mSDFNhxLw2bqNestWMMsJ/DPmnFhz Y0zLJG5Vc9TzLx7tb8oUvNivhV+7eo2oGmhlLrPMI4H059i0N0ev8Bve/OcLzNf3 65lW0xMwNtNwHnjI9wbaui4njzzz6PA= -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:01 2025 by rpki-client