This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json) Hash identifier: 8JVZH3MxKHLDvDq/vDw+cF07SEroDaVEriVfVoeNmpo= Subject key identifier: 69:2A:50:91:7A:26:61:17:CE:1F:21:48:3E:3B:6A:A4:30:28:50:CF Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB Certificate serial: 34D2529BBFABDE6CFC3C43730F6EECBE833D7C7C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft Manifest number: DB Signing time: Mon 15 Dec 2025 16:06:02 +0000 Manifest this update: Mon 15 Dec 2025 16:01:02 +0000 Manifest next update: Tue 16 Dec 2025 19:18:02 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=) 2: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=) 3: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=) 4: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: 9PV/nvS2bBxCbstGpjPh9Q282AmHq19HGcp/Mt02Sr4=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:52:9b:bf:ab:de:6c:fc:3c:43:73:0f:6e:ec:be:83:3d:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB Validity Not Before: Dec 15 16:01:02 2025 GMT Not After : Dec 16 19:18:02 2025 GMT Subject: CN=692A50917A266117CE1F21483E3B6AA4302850CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:8c:23:c9:a6:8e:18:a9:99:86:9c:40:d0: 20:20:4f:d2:2a:02:76:e5:2a:86:31:ec:2e:7d:10: b0:14:9f:e2:4d:dc:b1:72:f1:f8:24:33:5c:b1:fd: 36:19:a7:48:4d:21:4e:6a:19:75:60:e6:07:95:1a: af:9a:bb:02:69:35:2c:54:11:5f:2d:4a:8e:33:d1: cb:4f:58:47:a8:8d:57:16:ec:6c:b2:04:fc:92:d3: d4:cc:fb:04:10:19:a0:4d:8c:ed:c6:1f:74:d2:c5: 68:c8:0a:e8:2d:76:91:45:ce:5a:55:5c:94:e4:18: ed:05:86:f5:dd:82:36:fe:b7:b4:c5:39:29:5a:42: 5d:f3:d3:a5:43:56:10:43:fc:f1:31:42:06:cc:fd: d3:3c:78:c9:49:fc:b3:7c:04:b4:25:5b:99:9c:48: 6c:70:df:4c:cb:af:52:89:61:83:cd:61:fc:74:a0: 11:3b:39:3e:91:5f:6a:ec:c9:9e:9e:ee:0a:76:84: 63:1f:ff:56:ba:af:58:05:fc:0c:47:ab:57:2c:07: 60:db:27:35:46:90:b0:6d:66:43:a6:aa:b2:11:ea: 8d:e9:ba:0e:f0:fd:41:72:3a:a5:37:85:c0:e6:da: 6f:c6:89:56:2e:48:4d:f3:af:24:82:ca:b9:65:53: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:50:91:7A:26:61:17:CE:1F:21:48:3E:3B:6A:A4:30:28:50:CF X509v3 Authority Key Identifier: keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f8:80:94:e9:88:2b:b1:5c:97:53:4a:a0:58:32:e7:f2:59: 2a:3d:67:3c:79:6e:5c:3b:47:d4:65:91:17:4d:99:3a:c8:4f: 0d:f5:4c:23:58:65:17:65:46:a9:6d:e0:01:61:00:74:6a:1e: 2d:bc:6c:dc:3c:62:db:ce:74:9b:00:eb:29:20:0b:3d:bd:38: a3:dd:7f:89:85:0e:91:fe:a2:76:3f:d0:3e:71:1b:b8:9d:e6: 87:ef:cf:48:31:58:7d:6a:be:31:03:cb:ce:e0:6b:9d:b7:7f: 6b:4f:c8:82:cd:b1:a2:e5:79:b5:4f:1a:71:e0:37:cf:21:bb: eb:91:db:ce:9b:90:a6:b5:62:aa:b7:3d:e7:aa:63:e4:2e:86: 59:9e:de:08:16:9b:89:ba:f3:49:69:9c:6d:57:ae:c4:b7:2b: 37:eb:78:9b:63:50:04:e7:7b:5f:ad:d5:a8:18:9f:ef:0c:6e: 09:e1:61:c4:6e:bc:85:ae:c0:75:af:80:24:cf:0b:bb:c2:f3: 99:6d:63:24:68:82:94:0b:29:f3:66:d0:fe:93:b0:a7:d8:d9: 10:80:9e:53:2e:a3:95:20:c5:e5:ef:0a:4e:9e:33:05:f4:43: 87:79:31:aa:15:4b:25:75:a6:47:6d:ec:4f:4e:13:9f:78:19: e8:bf:e4:49 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUNNJSm7+r3mz8PENzD27svoM9fHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz MzdGQUZDQjAeFw0yNTEyMTUxNjAxMDJaFw0yNTEyMTYxOTE4MDJaMDMxMTAvBgNV BAMTKDY5MkE1MDkxN0EyNjYxMTdDRTFGMjE0ODNFM0I2QUE0MzAyODUwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFYwjyaaOGKmZhpxA0CAgT9Iq AnblKoYx7C59ELAUn+JN3LFy8fgkM1yx/TYZp0hNIU5qGXVg5geVGq+auwJpNSxU EV8tSo4z0ctPWEeojVcW7GyyBPyS09TM+wQQGaBNjO3GH3TSxWjICugtdpFFzlpV XJTkGO0FhvXdgjb+t7TFOSlaQl3z06VDVhBD/PExQgbM/dM8eMlJ/LN8BLQlW5mc SGxw30zLr1KJYYPNYfx0oBE7OT6RX2rsyZ6e7gp2hGMf/1a6r1gF/AxHq1csB2Db JzVGkLBtZkOmqrIR6o3pug7w/UFyOqU3hcDm2m/GiVYuSE3zrySCyrllU6YFAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUaSpQkXomYRfOHyFIPjtqpDAoUM8wHwYDVR0j BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACz4gJTpiCuxXJdTSqBYMufyWSo9Zzx5blw7R9RlkRdNmTrITw31TCNY ZRdlRqlt4AFhAHRqHi28bNw8YtvOdJsA6ykgCz29OKPdf4mFDpH+onY/0D5xG7id 5ofvz0gxWH1qvjEDy87ga523f2tPyILNsaLlebVPGnHgN88hu+uR286bkKa1Yqq3 PeeqY+Quhlme3ggWm4m680lpnG1XrsS3KzfreJtjUATne1+t1agYn+8MbgnhYcRu vIWuwHWvgCTPC7vC85ltYyRogpQLKfNm0P6TsKfY2RCAnlMuo5UgxeXvCk6eMwX0 Q4d5MaoVSyV1pkdt7E9OE594Gei/5Ek= -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:12 2025 by rpki-client