This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: brEYVMeHdklBIJ3Zl/nolf1lwRqWq7d0Utx9XDGWGM8= Subject key identifier: 5A:23:3C:AC:B9:EE:02:49:A6:37:F3:F4:03:B0:E9:5E:1F:6A:70:7B Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 68543B2B13AF176BC760BACFF492CFE2910E2145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 03E3 Signing time: Tue 16 Dec 2025 15:49:30 +0000 Manifest this update: Tue 16 Dec 2025 15:44:30 +0000 Manifest next update: Wed 17 Dec 2025 17:43:30 +0000 Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: BgvPFXYIcA0fHjXvmwD7IbVVAAkI3s0YqTCmEPEb2B0=) 2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=) 3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 17:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:54:3b:2b:13:af:17:6b:c7:60:ba:cf:f4:92:cf:e2:91:0e:21:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Dec 16 15:44:30 2025 GMT Not After : Dec 17 17:43:30 2025 GMT Subject: CN=5A233CACB9EE0249A637F3F403B0E95E1F6A707B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:3b:86:28:90:03:de:a7:8d:ec:d0:dc:f3: 5c:53:ce:53:4e:1e:27:95:de:1e:af:da:c5:78:d1: d1:23:c9:e6:dd:44:27:cd:9c:24:e8:bd:80:75:9f: e0:3a:50:e8:54:2f:6e:39:91:61:16:b8:cd:e3:5c: 72:c6:8b:2b:d0:94:3d:b9:e5:cf:5e:2b:8c:50:58: cd:ff:71:85:12:6c:f1:03:40:e6:5a:ad:c8:32:98: 4a:cd:22:15:0a:16:4d:d5:86:64:23:60:d1:eb:92: dc:62:cf:0b:45:04:b9:d7:83:b0:71:7f:85:0a:cf: 0f:fe:8f:72:64:cb:de:84:13:c5:4e:97:97:74:65: 76:7d:c0:5e:bc:0f:bb:78:e9:29:06:ab:0c:7e:bf: 88:c5:e2:94:a8:19:7b:77:1a:f7:11:72:fb:d1:b6: af:0f:15:0e:f2:96:64:cd:ec:f5:e4:62:00:75:a7: b8:12:86:63:e4:e5:77:52:ca:65:be:69:85:b9:2d: c1:28:2c:18:04:e3:e4:36:a0:81:11:72:6b:2a:48: 65:e9:bd:a5:eb:22:d6:de:87:c5:40:3d:c7:20:81: e1:b4:8d:24:37:38:01:34:b8:4a:de:e7:da:c1:81: e3:8b:41:ac:85:1c:4c:a9:20:50:49:73:62:de:ff: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:3C:AC:B9:EE:02:49:A6:37:F3:F4:03:B0:E9:5E:1F:6A:70:7B X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d5:68:38:08:d8:8d:04:9a:bd:b7:9a:61:e3:77:cc:f3:25: 60:74:03:3b:34:fe:f3:42:6d:fe:37:9e:62:91:cc:01:5d:e7: 8f:d1:09:f2:7b:b5:c2:7f:9e:1a:26:cb:f8:96:10:5e:12:8d: 17:63:ec:60:e8:cc:90:b2:10:da:b3:3d:a1:3a:e8:99:94:ef: f4:d4:52:c3:de:57:f6:2f:4e:2b:35:c1:40:59:8d:e8:90:53: 4e:f0:e7:8e:5b:10:4b:44:ba:92:e0:4b:fb:3e:46:4e:da:72: 9e:be:48:a0:d5:74:8b:52:d7:3c:49:94:5d:ce:a4:10:b8:04: ac:f6:38:10:c2:f3:9c:fb:bd:f7:43:07:36:9a:8f:35:78:31: 77:28:32:b0:06:cd:ed:5c:9a:55:27:45:bb:20:1b:3f:fa:70: 68:97:46:10:39:01:42:04:c2:b9:9e:c2:b1:6e:db:30:08:49: 4b:55:79:dd:8c:44:f6:a4:db:90:a2:dc:41:e0:de:5b:4d:d8: d1:25:93:3b:c9:dc:b1:5b:bb:97:68:33:da:47:cb:09:df:15: 98:c0:f7:9d:29:48:a7:25:41:f6:35:74:6f:bd:9f:45:dc:10: bc:c0:a2:31:ee:d0:f8:89:4a:c6:76:36:68:da:f5:55:d5:81: 37:56:2f:02 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUaFQ7KxOvF2vHYLrP9JLP4pEOIUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNTEyMTYxNTQ0MzBaFw0yNTEyMTcxNzQzMzBaMDMxMTAvBgNV BAMTKDVBMjMzQ0FDQjlFRTAyNDlBNjM3RjNGNDAzQjBFOTVFMUY2QTcwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6DuGKJAD3qeN7NDc81xTzlNO HieV3h6v2sV40dEjyebdRCfNnCTovYB1n+A6UOhUL245kWEWuM3jXHLGiyvQlD25 5c9eK4xQWM3/cYUSbPEDQOZarcgymErNIhUKFk3VhmQjYNHrktxizwtFBLnXg7Bx f4UKzw/+j3Jky96EE8VOl5d0ZXZ9wF68D7t46SkGqwx+v4jF4pSoGXt3GvcRcvvR tq8PFQ7ylmTN7PXkYgB1p7gShmPk5XdSymW+aYW5LcEoLBgE4+Q2oIERcmsqSGXp vaXrItbeh8VAPccggeG0jSQ3OAE0uEre59rBgeOLQayFHEypIFBJc2Le/4nxAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUWiM8rLnuAkmmN/P0A7DpXh9qcHswHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCU1Wg4CNiNBJq9t5ph43fM8yVgdAM7NP7z Qm3+N55ikcwBXeeP0Qnye7XCf54aJsv4lhBeEo0XY+xg6MyQshDasz2hOuiZlO/0 1FLD3lf2L04rNcFAWY3okFNO8OeOWxBLRLqS4Ev7PkZO2nKevkig1XSLUtc8SZRd zqQQuASs9jgQwvOc+733Qwc2mo81eDF3KDKwBs3tXJpVJ0W7IBs/+nBol0YQOQFC BMK5nsKxbtswCElLVXndjET2pNuQotxB4N5bTdjRJZM7ydyxW7uXaDPaR8sJ3xWY wPedKUinJUH2NXRvvZ9F3BC8wKIx7tD4iUrGdjZo2vVV1YE3Vi8C -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:08 2025 by rpki-client