This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
File:                     6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json)
Hash identifier:          ShCDq55n0W9Ggt2ZleH72G/j4u4irraox06OSLMSieA=
Subject key identifier:   C8:A4:B1:9B:9B:AB:50:FF:75:88:AD:79:E4:21:6E:BA:FC:36:1E:92
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       4A51D6D566680263A7141D507BF2C076AD7F9D25
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
Manifest number:          83
Signing time:             Sun 07 Dec 2025 23:00:02 +0000
Manifest this update:     Sun 07 Dec 2025 22:55:02 +0000
Manifest next update:     Mon 08 Dec 2025 23:05:02 +0000
Files and hashes:         1: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: 8Ydl+r8l3vUHH2ZWkwT4Rkgwlfg8fTctlt8gbeb9X/0=)
                          2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=)
                          3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:d6:d5:66:68:02:63:a7:14:1d:50:7b:f2:c0:76:ad:7f:9d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Dec  7 22:55:02 2025 GMT
            Not After : Dec  8 23:05:02 2025 GMT
        Subject: CN=C8A4B19B9BAB50FF7588AD79E4216EBAFC361E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:62:fb:16:bf:8b:7f:f5:5a:f2:00:ca:5c:
                    17:d5:2c:c2:10:a3:e8:a8:bc:bd:fe:5e:d6:4c:94:
                    a2:bb:87:4c:e6:d0:64:20:f4:4e:fc:8b:47:0f:4b:
                    42:56:5f:ab:15:c1:c7:d9:a1:de:da:f1:24:12:9e:
                    28:52:3e:a1:76:65:5d:72:ed:7c:ff:f7:75:d4:c8:
                    b2:92:c8:35:62:5f:7d:4e:5b:b8:33:ef:60:50:17:
                    58:17:a5:67:ec:31:41:17:b5:f9:c6:f3:82:f3:23:
                    13:fd:da:54:85:d3:98:4d:3b:94:2a:7b:b9:5c:42:
                    d1:9c:24:49:dd:02:32:27:c3:60:cd:36:6e:d0:68:
                    c1:6e:e4:4e:1c:b1:42:46:6d:6c:a4:b1:97:70:62:
                    e5:74:df:77:90:5b:72:17:82:84:2f:45:23:91:64:
                    76:0b:62:66:6b:a8:2f:87:3a:ce:9c:15:6b:10:29:
                    20:c1:e3:c5:3f:6e:f4:47:56:73:c4:32:28:c2:db:
                    64:4a:5c:34:20:52:78:af:07:88:ae:82:18:b9:3c:
                    47:9f:ea:7f:c4:b1:66:75:a2:23:17:76:34:01:37:
                    f2:55:2e:f9:13:37:d9:64:b7:b3:ba:23:9c:1d:45:
                    25:55:55:a3:fc:a6:85:24:ed:98:3d:5d:8d:e3:19:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A4:B1:9B:9B:AB:50:FF:75:88:AD:79:E4:21:6E:BA:FC:36:1E:92
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:3e:87:e1:36:b1:f7:d6:76:a3:e8:e5:dc:ff:71:25:1f:2d:
         9c:4b:d5:38:48:9c:de:7c:05:8a:9b:0a:e6:90:48:ad:29:23:
         00:af:e8:ec:8f:46:ad:46:8d:59:34:a4:50:d8:8d:df:e7:46:
         8d:a0:c1:01:47:cf:a0:24:3f:cb:3b:2e:90:d7:23:c7:23:e0:
         26:20:a7:4f:84:3a:d4:0b:03:bd:45:82:25:37:cf:17:03:5e:
         c9:0d:8e:27:08:8b:96:a8:1b:be:d6:64:78:2a:c3:e7:75:70:
         b5:0a:9b:aa:c8:e0:2e:f2:7e:f8:b9:43:4e:52:07:28:a9:ee:
         44:2b:a7:77:00:70:b3:ce:44:09:b7:5d:56:bf:13:39:dd:e3:
         c2:fc:ac:cf:07:bb:5d:3f:01:b5:99:26:15:2a:a1:36:69:f1:
         fc:14:ba:17:84:53:b5:7b:f3:7a:30:2e:1b:15:c9:3e:9b:21:
         81:82:cb:5c:1c:4b:67:dc:a6:1f:03:c0:9a:2b:56:60:9f:47:
         7e:42:8e:bb:54:7f:30:2c:b3:51:1a:5e:6a:f8:34:7d:7e:bd:
         45:d8:cb:81:89:5b:29:55:fb:1f:c7:87:f0:f7:b6:1a:b4:23:
         e7:63:d8:8b:0f:1e:1a:20:2e:8c:a7:a3:f2:b4:b1:d6:6c:70:
         67:7c:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:11:19 2025 by rpki-client