This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
File:                     4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json)
Hash identifier:          jMlPtuY6Pla5bkBu2h0RDA9R5+TQk2hUifMy4WpQrOc=
Subject key identifier:   FF:33:80:6A:6A:76:12:90:A6:1C:03:DA:21:39:34:17:53:8F:3F:DF
Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
Certificate issuer:       /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Certificate serial:       50BD91ADC6E8BFCABD7122D4E1D14E2F2F81CEEB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
Manifest number:          FB
Signing time:             Sat 10 Jan 2026 19:40:17 +0000
Manifest this update:     Sat 10 Jan 2026 19:35:17 +0000
Manifest next update:     Sun 11 Jan 2026 23:11:17 +0000
Files and hashes:         1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: s9uuK3rs4lc+DbO0JFmr7MdzMEk6Tf9nTYUjYR2+qkA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bd:91:ad:c6:e8:bf:ca:bd:71:22:d4:e1:d1:4e:2f:2f:81:ce:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
        Validity
            Not Before: Jan 10 19:35:17 2026 GMT
            Not After : Jan 11 23:11:17 2026 GMT
        Subject: CN=FF33806A6A761290A61C03DA21393417538F3FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:b0:d4:a4:74:86:2e:6d:57:5b:fd:8b:72:
                    80:a0:ea:ed:0d:aa:eb:59:77:c3:4c:fb:9d:7c:41:
                    6e:6a:a6:ea:41:4c:a7:e7:03:eb:7e:58:4d:30:05:
                    7a:b6:60:ba:f8:c1:48:a8:01:49:42:37:a4:c4:68:
                    21:68:a1:72:2c:9d:eb:7a:5d:6f:a4:2a:28:ce:9d:
                    e7:30:b4:4d:35:4d:2d:02:55:41:f6:5b:00:31:fc:
                    78:7c:5a:e6:28:9d:72:26:af:62:53:68:a1:65:ae:
                    82:05:7f:5f:3e:bf:6b:93:76:29:70:42:39:2f:17:
                    db:46:6d:1f:e8:87:14:42:a4:08:3d:67:a3:41:18:
                    bb:d5:65:88:c0:2a:14:ee:f6:6c:59:16:47:b3:15:
                    03:a1:75:fa:97:cb:44:ac:a6:07:dd:d6:c2:0e:9f:
                    18:ab:61:bd:fb:ff:07:68:7e:62:d4:bc:ea:03:c0:
                    8f:84:36:db:b0:61:f6:3d:29:ae:f1:bd:08:47:50:
                    44:36:02:d7:54:6c:7b:59:b2:2f:ca:d1:d0:45:88:
                    5c:65:4c:f6:b9:f8:a6:7a:58:65:a7:3f:e1:84:e5:
                    0b:73:97:c6:e3:5d:25:90:4d:41:60:2c:c4:b4:f4:
                    72:f0:54:75:3b:7f:34:92:cd:ee:85:79:3b:b3:b5:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:33:80:6A:6A:76:12:90:A6:1C:03:DA:21:39:34:17:53:8F:3F:DF
            X509v3 Authority Key Identifier:
                keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:a7:77:54:a9:5e:03:ab:34:3e:f5:1c:d8:13:53:d5:46:
         92:90:d5:24:a8:db:50:2e:69:b0:6b:61:f6:9e:76:9d:40:ad:
         8f:f8:38:06:90:e2:63:25:19:db:24:cf:85:cb:64:a5:93:ed:
         b5:dc:6f:22:ac:8a:17:b1:34:aa:78:9b:32:ff:d7:14:e0:c1:
         47:26:98:61:c8:5b:77:ac:68:4d:4a:21:8a:81:fd:5e:6c:5e:
         b8:be:10:34:6a:e5:96:c6:48:4f:b4:b8:cb:07:94:df:07:b4:
         84:04:48:e4:ae:01:75:55:4e:ca:a4:f2:74:17:c7:46:49:15:
         6d:2e:0e:91:97:e3:ca:58:03:6b:ff:8b:8d:d4:7b:5c:92:2f:
         cd:bf:d1:a9:93:d5:50:e5:d8:18:d6:53:7b:22:45:a6:c8:c3:
         ec:32:b4:5b:ee:2d:30:a1:42:f0:27:66:61:c7:50:99:e6:ad:
         5d:1b:d7:6d:b5:9c:c3:be:1c:9f:42:ab:05:4b:a4:17:47:df:
         35:0e:6b:ac:87:17:cd:a9:8c:04:b9:49:21:79:6d:aa:58:d0:
         a6:68:f4:ae:f0:ef:f9:9b:96:07:e6:e7:ab:be:77:35:f2:cd:
         ab:66:00:a2:22:5f:26:73:86:5b:19:18:c6:6e:4a:cd:98:e0:
         7d:b4:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:39:08 2026 by rpki-client