This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: +PCS6ykvs+NMk7MoSERy3ZCPpKxzk4gCuOggeOwqqQU= Subject key identifier: 12:A1:E0:00:26:50:FB:B6:D9:C3:4C:87:F0:E4:22:5A:BB:7E:39:1D Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 57AA625B14AEDBD6CEA75B9DAD2496C5EA94C235 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: E4 Signing time: Sat 20 Dec 2025 15:22:51 +0000 Manifest this update: Sat 20 Dec 2025 15:17:51 +0000 Manifest next update: Sun 21 Dec 2025 16:16:51 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) 2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: glZb4CRp90Pt4nPItjwwpSXkde9vcOkA19K63E9yF6Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:aa:62:5b:14:ae:db:d6:ce:a7:5b:9d:ad:24:96:c5:ea:94:c2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Dec 20 15:17:51 2025 GMT Not After : Dec 21 16:16:51 2025 GMT Subject: CN=12A1E0002650FBB6D9C34C87F0E4225ABB7E391D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:01:2d:51:ea:47:cf:75:b5:b4:09:f4:29: e2:c8:e3:0c:a9:af:b0:95:04:d4:99:e9:2f:17:77: 87:a0:43:3f:ec:e9:98:d5:15:67:08:c4:71:99:1c: 9b:d0:86:4e:15:3f:38:0e:ee:e0:ec:3d:8a:0a:19: 11:2b:11:93:9c:b1:8d:b4:d8:85:3a:3d:11:1c:65: 65:89:ed:8f:e0:5a:93:bc:32:2f:71:dd:54:f0:21: 87:4d:39:f9:f1:55:9e:3a:35:60:63:fe:26:36:21: 19:dd:6e:39:aa:11:db:7c:11:a0:02:82:bc:70:12: 98:d2:3d:e4:e6:74:cb:c2:e8:b7:07:50:9b:48:e3: 21:44:f2:53:16:aa:de:04:35:47:0a:c8:5e:13:55: 76:a3:ff:b1:12:4d:d5:8e:72:6e:b5:4d:2f:73:09: 32:75:11:fb:3c:3a:0f:17:e6:99:dd:a8:5f:c4:d8: b9:29:b9:f7:77:6f:f7:38:64:8d:cc:7f:0b:2d:ea: ef:3f:98:30:b2:ed:b5:61:b8:7d:1d:8d:9c:e5:9c: 80:6c:ee:89:6f:97:01:5d:72:f8:85:22:85:17:62: 83:ca:27:bb:58:86:ad:5a:99:36:99:0c:4f:1c:ca: 91:b6:03:35:49:3d:13:c5:f6:1d:8f:ab:9b:a5:f2: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:E0:00:26:50:FB:B6:D9:C3:4C:87:F0:E4:22:5A:BB:7E:39:1D X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c8:5b:1b:d8:2e:2a:58:69:4e:8e:c8:66:b6:58:5a:4b:4e: 2f:7b:94:a1:bd:c0:47:2a:ac:13:06:80:35:5e:60:ae:f5:66: 30:ac:cc:f3:1e:e6:f6:f0:db:64:99:c9:94:fd:88:c4:0a:d2: c3:99:15:22:81:a4:91:75:cf:c9:49:48:f2:43:b7:40:04:ff: 06:3e:f5:d1:64:ba:10:af:8e:19:ee:96:a1:0a:2b:a3:98:e2: f5:c9:76:23:92:c1:bb:91:38:fc:0b:1d:a6:c7:5f:02:8a:16: ac:1f:98:bd:f7:fa:d8:3d:1e:6c:7b:12:e8:69:de:81:65:0a: ac:0b:62:85:4d:40:68:fa:33:47:0e:f9:a7:72:1b:73:9c:90: 16:6b:83:6b:a1:45:66:3a:ff:7e:33:55:d1:61:a3:7c:34:19: a7:84:74:28:4a:af:7a:61:52:77:c0:65:d8:16:f2:2c:97:07: 46:c7:f9:71:54:e9:8a:88:78:59:77:0b:70:3f:71:fb:e6:6c: a8:c6:fa:db:76:51:26:6f:50:e5:4b:45:da:fc:b5:e6:69:ec: 66:99:c8:c0:69:81:de:13:22:e5:14:ae:e2:3c:ba:a6:d4:ef: 81:7e:07:07:c5:61:c7:7a:90:67:aa:dd:c9:10:8d:02:67:9c: 10:98:c7:40 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUV6piWxSu29bOp1udrSSWxeqUwjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTEyMjAxNTE3NTFaFw0yNTEyMjExNjE2NTFaMDMxMTAvBgNV BAMTKDEyQTFFMDAwMjY1MEZCQjZEOUMzNEM4N0YwRTQyMjVBQkI3RTM5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdQEtUepHz3W1tAn0KeLI4wyp r7CVBNSZ6S8Xd4egQz/s6ZjVFWcIxHGZHJvQhk4VPzgO7uDsPYoKGRErEZOcsY20 2IU6PREcZWWJ7Y/gWpO8Mi9x3VTwIYdNOfnxVZ46NWBj/iY2IRndbjmqEdt8EaAC grxwEpjSPeTmdMvC6LcHUJtI4yFE8lMWqt4ENUcKyF4TVXaj/7ESTdWOcm61TS9z CTJ1Efs8Og8X5pndqF/E2Lkpufd3b/c4ZI3Mfwst6u8/mDCy7bVhuH0djZzlnIBs 7olvlwFdcviFIoUXYoPKJ7tYhq1amTaZDE8cypG2AzVJPRPF9h2Pq5ul8oNrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUEqHgACZQ+7bZw0yH8OQiWrt+OR0wHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADTIWxvYLipYaU6OyGa2WFpLTi97lKG9wEcqrBMGgDVeYK71ZjCszPMe 5vbw22SZyZT9iMQK0sOZFSKBpJF1z8lJSPJDt0AE/wY+9dFkuhCvjhnulqEKK6OY 4vXJdiOSwbuROPwLHabHXwKKFqwfmL33+tg9Hmx7Euhp3oFlCqwLYoVNQGj6M0cO +adyG3OckBZrg2uhRWY6/34zVdFho3w0GaeEdChKr3phUnfAZdgW8iyXB0bH+XFU 6YqIeFl3C3A/cfvmbKjG+tt2USZvUOVLRdr8teZp7GaZyMBpgd4TIuUUruI8uqbU 74F+BwfFYcd6kGeq3ckQjQJnnBCYx0A= -----END CERTIFICATE-----Generated at Sat Dec 20 22:53:49 2025 by rpki-client