This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File:                     BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier:          XivUYd9jVLJXNxhal/R/DJ0Csoml8nkpJRd4ShX6L7k=
Subject key identifier:   EE:DC:38:FD:25:8F:3F:A2:4E:FA:19:26:1A:FA:30:25:C1:2C:86:76
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       535EE6DABF85B6E89729DED9AF6B8C11D8832C9F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number:          E1
Signing time:             Fri 19 Dec 2025 20:54:38 +0000
Manifest this update:     Fri 19 Dec 2025 20:49:38 +0000
Manifest next update:     Sat 20 Dec 2025 21:17:38 +0000
Files and hashes:         1: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
                          2: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
                          3: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
                          4: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
                          5: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
                          6: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
                          7: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
                          8: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
                          9: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
                          10: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
                          11: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
                          12: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
                          13: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
                          14: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (hash: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY=)
                          15: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
                          16: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
                          17: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
                          18: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
                          19: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
                          20: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
                          21: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
                          22: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
                          23: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
                          24: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
                          25: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
                          26: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: tnXLsPhT6KCsBKgYp+IbKUenodZIS6gnF7vaL3CxmcU=)
                          27: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 21:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5e:e6:da:bf:85:b6:e8:97:29:de:d9:af:6b:8c:11:d8:83:2c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Dec 19 20:49:38 2025 GMT
            Not After : Dec 20 21:17:38 2025 GMT
        Subject: CN=EEDC38FD258F3FA24EFA19261AFA3025C12C8676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:e4:ac:de:db:c3:cc:8f:4a:e2:f1:1f:9a:
                    ea:aa:9f:3e:7f:54:d7:06:db:a1:1f:de:24:15:d8:
                    0a:c7:6e:5c:dc:26:f1:e3:0d:20:ca:f4:51:46:d7:
                    50:c8:f5:13:4e:5f:9f:73:e8:a5:5b:4c:dc:99:c0:
                    e8:32:09:59:19:68:4e:e1:fb:c4:3c:4d:c6:44:4a:
                    aa:71:54:de:bb:12:52:b7:a8:ad:b2:5e:33:6c:79:
                    be:0c:06:67:1e:17:c9:70:1c:76:ed:f8:55:a3:d6:
                    5a:98:c3:c0:39:24:de:5b:5d:c7:0d:d6:1e:04:9a:
                    04:bf:30:b4:27:c7:ac:02:2f:0a:99:16:71:24:08:
                    d4:35:8b:7f:7c:6c:8f:78:4d:ea:aa:cc:7a:7f:c7:
                    dd:2e:2f:6a:35:8f:2b:53:76:a5:9c:92:73:8c:e8:
                    2b:0d:cf:98:d6:92:c1:3d:1b:6a:22:8f:10:b1:1f:
                    f2:7f:9b:36:d4:8e:da:80:9b:54:d5:58:85:ce:a8:
                    50:99:8b:af:da:af:aa:1d:44:40:1c:0a:79:4c:9a:
                    7c:1e:17:bc:a6:92:d5:1c:24:80:9b:a9:18:5b:bc:
                    aa:7a:32:4c:ef:6b:51:aa:1c:a6:97:4c:f0:4e:97:
                    6b:07:2e:fb:b2:ce:9b:e0:e5:c0:d3:3e:eb:41:83:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:38:FD:25:8F:3F:A2:4E:FA:19:26:1A:FA:30:25:C1:2C:86:76
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:aa:e8:37:5b:03:5e:45:22:a0:06:d3:a4:1e:1d:ac:07:
         f5:3a:52:3d:a6:e3:62:54:0b:17:f1:09:e6:42:79:ef:ae:4a:
         92:3d:a9:d1:a6:0e:69:89:85:5d:8b:e3:e8:61:aa:3a:dd:a7:
         2d:99:50:b5:20:7c:28:e3:7a:18:f8:09:c0:46:07:c6:d8:b7:
         f3:7a:0f:d8:05:a0:3e:fc:39:27:e0:e1:93:d1:60:64:14:4e:
         33:b0:a0:c8:a7:c1:fa:3d:31:cf:f4:45:a0:91:50:01:9e:da:
         8a:d0:53:35:bf:59:46:bd:fe:8e:46:bf:9a:87:fd:45:cf:9c:
         e2:42:6b:d2:f1:33:fd:10:65:91:2d:59:9b:07:52:7f:74:61:
         87:38:2a:27:bc:0a:23:32:e1:6a:ed:20:9b:aa:3b:b6:94:4f:
         df:78:8e:c6:32:f3:96:c0:7b:7c:ff:6b:7e:2a:a9:13:07:8b:
         b8:92:b9:fc:14:bc:e2:2c:56:b4:5d:c4:ca:65:c3:41:8b:e6:
         c8:f1:23:ba:3a:2e:ab:56:e0:b9:77:f1:0d:f0:a9:2e:21:05:
         22:d2:e6:cc:a9:2c:aa:b4:5e:44:b8:19:1c:ae:25:26:95:fd:
         9a:e6:fe:fb:d9:89:9a:c8:0f:71:d8:3b:9d:da:cb:a8:57:3a:
         33:3c:19:9e
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUU17m2r+FtuiXKd7Zr2uMEdiDLJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD
OEZCQzlDMzAeFw0yNTEyMTkyMDQ5MzhaFw0yNTEyMjAyMTE3MzhaMDMxMTAvBgNV
BAMTKEVFREMzOEZEMjU4RjNGQTI0RUZBMTkyNjFBRkEzMDI1QzEyQzg2NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwOSs3tvDzI9K4vEfmuqqnz5/
VNcG26Ef3iQV2ArHblzcJvHjDSDK9FFG11DI9RNOX59z6KVbTNyZwOgyCVkZaE7h
+8Q8TcZESqpxVN67ElK3qK2yXjNseb4MBmceF8lwHHbt+FWj1lqYw8A5JN5bXccN
1h4EmgS/MLQnx6wCLwqZFnEkCNQ1i398bI94TeqqzHp/x90uL2o1jytTdqWcknOM
6CsNz5jWksE9G2oijxCxH/J/mzbUjtqAm1TVWIXOqFCZi6/ar6odREAcCnlMmnwe
F7ymktUcJICbqRhbvKp6Mkzva1GqHKaXTPBOl2sHLvuyzpvg5cDTPutBg3+pAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU7tw4/SWPP6JO+hkmGvowJcEshnYwHwYDVR0j
BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG
M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZlMTI5
LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABZ9qug3WwNeRSKgBtOkHh2sB/U6Uj2m42JUCxfxCeZCee+uSpI9qdGm
DmmJhV2L4+hhqjrdpy2ZULUgfCjjehj4CcBGB8bYt/N6D9gFoD78OSfg4ZPRYGQU
TjOwoMinwfo9Mc/0RaCRUAGe2orQUzW/WUa9/o5Gv5qH/UXPnOJCa9LxM/0QZZEt
WZsHUn90YYc4Kie8CiMy4WrtIJuqO7aUT994jsYy85bAe3z/a34qqRMHi7iSufwU
vOIsVrRdxMplw0GL5sjxI7o6LqtW4Ll38Q3wqS4hBSLS5sypLKq0XkS4GRyuJSaV
/Zrm/vvZiZrID3HYO53ay6hXOjM8GZ4=
-----END CERTIFICATE-----