This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: ZJ07OT4AdKNhHf7bs9DHoJbi7Wk9FEleMbPSAcv7G1M= Subject key identifier: D8:B5:AA:7B:A7:75:14:2E:4A:A1:7A:51:34:CA:A0:5F:BE:D1:62:75 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: 7C403A9CF42D60586C06D583548EB68AE8F719D6 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 08 Signing time: Sat 27 Dec 2025 01:08:30 +0000 Manifest this update: Sat 27 Dec 2025 01:03:30 +0000 Manifest next update: Sun 28 Dec 2025 03:01:30 +0000 Files and hashes: 1: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 2: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) 3: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 4: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 5: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: A5KKdX7c/SaxCSRBdBS81QgJAt73VxcZXX+ybgrXiKg=) 6: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 7: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:40:3a:9c:f4:2d:60:58:6c:06:d5:83:54:8e:b6:8a:e8:f7:19:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Dec 27 01:03:30 2025 GMT Not After : Dec 28 03:01:30 2025 GMT Subject: CN=D8B5AA7BA775142E4AA17A5134CAA05FBED16275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:53:21:d4:b2:ef:f4:60:b9:e2:b5:14:17: 67:81:8f:ae:7c:cb:14:03:fd:54:d5:e9:be:2c:a4: bf:e6:43:f5:57:0b:05:59:52:d3:12:aa:ff:7b:29: ca:c0:3a:17:9e:aa:95:b2:58:40:20:5d:13:3d:cc: 75:02:21:5b:bc:a6:05:64:77:66:34:ca:67:5e:b6: 1c:f8:b8:cc:00:95:1a:30:78:a3:f7:04:1a:18:96: 75:6e:f8:ca:31:7e:74:c2:1a:70:67:07:e7:e5:e0: fb:fa:1a:a6:2c:95:b6:4c:4b:21:6e:dd:ae:b3:c2: 79:44:d5:a1:5f:58:51:25:ac:60:64:57:92:df:c8: 01:be:25:c8:f5:81:03:0c:b9:30:c6:f1:37:22:f2: ee:7a:cb:36:3c:10:81:7c:0c:a7:8f:5e:aa:0f:2c: 3a:a2:b3:3b:98:c5:35:3d:2e:2b:f5:e0:ba:99:4a: 8b:ac:4f:e4:12:b0:97:ec:a5:98:e3:5a:4d:c7:d5: 2e:4d:68:4a:8c:7f:50:09:b6:02:2b:9e:74:9e:3a: 7b:b6:8e:cc:81:fd:84:de:6e:e3:86:36:3a:cb:76: b9:69:76:e1:d8:c0:57:00:61:74:57:4d:24:ab:26: 5b:41:32:3b:d3:49:a6:6f:21:66:0f:8c:e7:b7:a6: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:AA:7B:A7:75:14:2E:4A:A1:7A:51:34:CA:A0:5F:BE:D1:62:75 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8c:81:df:cf:10:28:f0:a0:f1:7e:d8:25:0e:f2:9f:db:c3: c8:57:7e:45:02:5a:8b:ba:45:a1:44:52:3e:19:8d:8c:61:4a: 22:99:a6:d2:0c:64:49:b9:7a:ac:2f:38:58:86:bd:69:79:03: 46:28:34:30:c0:2d:c9:d3:70:3f:d8:49:08:80:14:f2:d8:48: e7:3c:90:d3:33:ed:ef:ac:16:e2:dc:30:e5:e9:45:06:ee:8f: e1:a4:1a:fd:1b:29:04:88:14:0a:21:b0:91:25:ad:a5:c4:2d: 10:d8:4d:e0:e7:ad:9e:f8:de:37:3e:ab:a3:17:f2:3a:d5:05: 19:cf:6e:0a:c2:07:08:3e:5d:e2:3b:86:88:34:40:e3:69:2e: cb:7e:f7:9f:25:f7:94:02:1a:05:1a:8e:16:70:4d:f5:e8:c3: 07:86:dd:58:f1:69:54:bc:e6:f6:b0:91:22:80:9f:9e:c4:0e: a0:d2:da:7f:d7:2c:d3:bb:3f:c3:2b:c5:56:26:97:11:e7:bd: 0a:44:7a:95:76:92:5f:e4:87:b2:95:27:e8:38:91:76:4d:55: 88:a9:00:3a:0e:ba:cf:32:9c:74:3f:71:16:89:6a:53:1d:41: 34:15:93:aa:47:41:f7:ef:1c:2d:38:8e:8f:75:b7:dc:71:dd: 72:31:b1:4b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUfEA6nPQtYFhsBtWDVI62iuj3GdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNTEyMjcwMTAzMzBaFw0yNTEyMjgwMzAxMzBaMDMxMTAvBgNV BAMTKEQ4QjVBQTdCQTc3NTE0MkU0QUExN0E1MTM0Q0FBMDVGQkVEMTYyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigVMh1LLv9GC54rUUF2eBj658 yxQD/VTV6b4spL/mQ/VXCwVZUtMSqv97KcrAOheeqpWyWEAgXRM9zHUCIVu8pgVk d2Y0ymdethz4uMwAlRoweKP3BBoYlnVu+MoxfnTCGnBnB+fl4Pv6GqYslbZMSyFu 3a6zwnlE1aFfWFElrGBkV5LfyAG+Jcj1gQMMuTDG8Tci8u56yzY8EIF8DKePXqoP LDqiszuYxTU9Liv14LqZSousT+QSsJfspZjjWk3H1S5NaEqMf1AJtgIrnnSeOnu2 jsyB/YTebuOGNjrLdrlpduHYwFcAYXRXTSSrJltBMjvTSaZvIWYPjOe3pts3AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU2LWqe6d1FC5KoXpRNMqgX77RYnUwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKeMgd/PECjwoPF+2CUO8p/bw8hXfkUCWou6RaFEUj4ZjYxhSiKZptIM ZEm5eqwvOFiGvWl5A0YoNDDALcnTcD/YSQiAFPLYSOc8kNMz7e+sFuLcMOXpRQbu j+GkGv0bKQSIFAohsJElraXELRDYTeDnrZ743jc+q6MX8jrVBRnPbgrCBwg+XeI7 hog0QONpLst+958l95QCGgUajhZwTfXowweG3VjxaVS85vawkSKAn57EDqDS2n/X LNO7P8MrxVYmlxHnvQpEepV2kl/kh7KVJ+g4kXZNVYipADoOus8ynHQ/cRaJalMd QTQVk6pHQffvHC04jo91t9xx3XIxsUs= -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:10 2025 by rpki-client