This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json) Hash identifier: 47kyipGDgxS7UDbsHVb+A994t3DuhRS02VbdCtbrfq4= Subject key identifier: 96:6F:D5:0E:C2:E2:38:D3:4E:90:55:B6:0A:FA:06:3E:0B:1A:EC:22 Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Certificate serial: 5288EE85F56DEA64E2CA282686BA4989B3B4C25E Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft Manifest number: BA Signing time: Sat 22 Nov 2025 05:35:16 +0000 Manifest this update: Sat 22 Nov 2025 05:30:16 +0000 Manifest next update: Sun 23 Nov 2025 09:11:16 +0000 Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: iKTWwfsnn/1rcpzGLd90DeyedfatqvYY8E9c1M8jdQ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 09:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:88:ee:85:f5:6d:ea:64:e2:ca:28:26:86:ba:49:89:b3:b4:c2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681 Validity Not Before: Nov 22 05:30:16 2025 GMT Not After : Nov 23 09:11:16 2025 GMT Subject: CN=966FD50EC2E238D34E9055B60AFA063E0B1AEC22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:bc:2e:d5:d0:b5:3f:78:1c:4a:4e:df:a7: da:5e:66:8d:80:2b:47:43:6d:e5:90:67:37:33:ca: d7:d1:cd:5e:24:99:12:c7:3d:62:5c:9d:f7:93:7f: c6:7e:da:a4:74:01:05:70:39:75:36:a2:2c:2c:e1: d4:b2:0a:a4:73:76:a9:65:07:bd:00:15:d4:a6:67: c6:0d:8d:8e:e7:88:dc:2a:19:16:52:d5:6f:f8:1a: 58:b6:4a:41:16:52:28:12:b0:2c:33:90:2f:61:df: c8:70:d8:f5:6c:5f:6f:ae:f1:34:c9:8d:59:97:af: 39:fb:35:25:8a:ee:a4:11:a4:d6:75:0f:89:aa:f1: 0e:1b:84:d1:08:3a:ae:56:a9:5f:e6:0d:19:9f:da: d1:a3:33:c7:e7:19:61:d1:ea:44:6e:65:9f:64:e6: b1:a2:ff:43:e0:ca:46:cc:0f:58:9f:80:9b:10:03: aa:e5:f0:a2:f2:64:dd:35:b9:8e:ba:fe:62:0b:46: 37:72:4a:d5:9f:09:58:52:60:06:d1:d6:b5:7d:4e: d8:c6:53:09:c9:0f:08:14:e6:ba:2d:fd:72:07:3d: c5:62:bf:ee:42:01:5e:3b:34:84:3a:d0:5f:86:d7: dc:ab:de:df:c5:99:4a:6f:27:a6:ad:4b:f5:b6:75: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6F:D5:0E:C2:E2:38:D3:4E:90:55:B6:0A:FA:06:3E:0B:1A:EC:22 X509v3 Authority Key Identifier: keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d4:47:ac:16:4d:d5:bd:4b:2f:cc:96:1f:8c:96:d5:b9:3a: 95:f6:c9:3d:7a:23:de:83:0e:79:9d:93:e3:6a:9c:7a:30:18: 8f:b1:9b:a4:41:a3:a5:85:78:8d:67:68:b8:85:78:92:03:bd: 5b:d8:bf:ba:9f:9c:7c:94:e2:e3:1e:58:b3:dd:d7:05:8c:da: 02:d6:ac:dc:cb:14:02:0d:0f:e4:a1:81:e3:68:b6:f5:3f:a7: 31:fe:55:3d:60:dd:92:41:36:db:c8:ea:68:dd:16:0e:16:b6: dd:cb:4e:57:dc:dd:e7:af:ac:61:03:c3:08:57:d7:bb:b7:43: f5:e4:31:23:ec:1d:29:05:53:ef:1b:68:6c:4b:e4:98:c1:61: fe:62:66:6f:c9:13:74:bd:89:fd:4c:e0:cc:b5:9a:5b:e1:89: 6c:99:45:b6:8d:b7:63:ba:6a:7c:0d:67:69:94:a4:63:4e:31: 0b:6e:f9:3e:5c:89:1c:5b:01:a3:10:e3:e1:5c:a5:c9:26:e2: 44:c9:8b:60:51:97:55:89:34:84:a6:2c:cd:55:06:f2:1b:0b: 4e:bd:3d:62:56:55:43:8b:ee:99:de:b6:a3:a6:f5:8e:1e:5e: 50:db:af:eb:a9:c6:c2:f4:10:da:9c:fd:35:89:1d:99:ce:98: 41:8a:e7:7a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUojuhfVt6mTiyigmhrpJibO0wl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0 OTAxQzY4MTAeFw0yNTExMjIwNTMwMTZaFw0yNTExMjMwOTExMTZaMDMxMTAvBgNV BAMTKDk2NkZENTBFQzJFMjM4RDM0RTkwNTVCNjBBRkEwNjNFMEIxQUVDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4g7wu1dC1P3gcSk7fp9peZo2A K0dDbeWQZzczytfRzV4kmRLHPWJcnfeTf8Z+2qR0AQVwOXU2oiws4dSyCqRzdqll B70AFdSmZ8YNjY7niNwqGRZS1W/4Gli2SkEWUigSsCwzkC9h38hw2PVsX2+u8TTJ jVmXrzn7NSWK7qQRpNZ1D4mq8Q4bhNEIOq5WqV/mDRmf2tGjM8fnGWHR6kRuZZ9k 5rGi/0PgykbMD1ifgJsQA6rl8KLyZN01uY66/mILRjdyStWfCVhSYAbR1rV9TtjG UwnJDwgU5rot/XIHPcViv+5CAV47NIQ60F+G19yr3t/FmUpvJ6atS/W2dbNLAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUlm/VDsLiONNOkFW2CvoGPgsa7CIwHwYDVR0j BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4 LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPUR6wWTdW9Sy/Mlh+MltW5OpX2yT16I96DDnmdk+NqnHowGI+xm6RB o6WFeI1naLiFeJIDvVvYv7qfnHyU4uMeWLPd1wWM2gLWrNzLFAIND+ShgeNotvU/ pzH+VT1g3ZJBNtvI6mjdFg4Wtt3LTlfc3eevrGEDwwhX17u3Q/XkMSPsHSkFU+8b aGxL5JjBYf5iZm/JE3S9if1M4My1mlvhiWyZRbaNt2O6anwNZ2mUpGNOMQtu+T5c iRxbAaMQ4+Fcpckm4kTJi2BRl1WJNISmLM1VBvIbC069PWJWVUOL7pnetqOm9Y4e XlDbr+upxsL0ENqc/TWJHZnOmEGK53o= -----END CERTIFICATE-----Generated at Sat Nov 22 21:54:41 2025 by rpki-client