This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
File:                     6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json)
Hash identifier:          pc/CKHtvW93szatVCQS3OvBE81xKChTBuvWaq+Ii2ZI=
Subject key identifier:   57:D9:BD:E9:66:E7:37:57:E0:A6:F4:1B:FC:3B:D2:21:0F:51:FF:D3
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Certificate issuer:       /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial:       4F0B449EAD7D843FDDDCF763AD57B569788239F4
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
Manifest number:          C5
Signing time:             Mon 26 Jan 2026 07:22:06 +0000
Manifest this update:     Mon 26 Jan 2026 07:17:06 +0000
Manifest next update:     Tue 27 Jan 2026 09:59:06 +0000
Files and hashes:         1: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=)
                          2: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: KMqkXGuvjKBKd0Y5Z/cFcALRE7NjhMnvDs7bdAhDbl4=)
                          3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0b:44:9e:ad:7d:84:3f:dd:dc:f7:63:ad:57:b5:69:78:82:39:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
        Validity
            Not Before: Jan 26 07:17:06 2026 GMT
            Not After : Jan 27 09:59:06 2026 GMT
        Subject: CN=57D9BDE966E73757E0A6F41BFC3BD2210F51FFD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:4f:65:7c:c3:23:8f:3c:7d:43:81:2e:67:
                    d9:86:87:b1:2d:8a:00:bf:87:5d:97:7c:4e:3a:3a:
                    a0:3c:36:1a:66:39:f8:40:c7:c8:d9:9c:34:92:f6:
                    02:62:4c:84:3f:9e:d9:15:2c:89:38:15:41:74:79:
                    20:9d:bc:73:d9:11:4d:34:97:a8:70:cb:ea:66:c0:
                    7f:e6:02:e2:21:b2:71:e9:f3:5a:de:c9:13:34:d7:
                    17:42:39:a4:dc:e4:04:8b:a3:75:8c:07:57:5a:b6:
                    f4:03:85:a9:3b:cb:42:3e:d3:62:1a:01:40:5b:4e:
                    a5:d9:18:16:18:f5:41:1c:2f:f9:85:75:db:94:13:
                    c3:6f:4d:9b:a8:d3:24:b7:f3:d2:2e:2b:92:96:1f:
                    c9:65:97:22:26:31:0f:f3:8f:1b:82:ff:97:bb:e4:
                    e8:88:3e:e3:c2:64:32:6b:e1:d2:8b:68:f4:bc:87:
                    d7:e2:f6:32:fe:c6:f0:5c:50:8b:04:9e:c1:f8:fc:
                    39:b2:f5:96:1a:d1:38:ba:18:73:63:96:f2:d4:c3:
                    f2:3b:f6:b3:d3:ce:7e:4b:59:b6:c2:8a:48:df:d3:
                    59:c3:5a:14:c5:7c:4a:35:62:1c:13:d8:8f:7e:20:
                    11:c9:2a:fd:b3:5a:82:59:83:c8:ce:b9:32:65:77:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:BD:E9:66:E7:37:57:E0:A6:F4:1B:FC:3B:D2:21:0F:51:FF:D3
            X509v3 Authority Key Identifier:
                keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:31:97:88:d7:4e:ce:f0:69:57:a8:25:29:a8:91:93:0b:
         29:94:83:f3:f6:57:eb:87:a0:9e:1f:19:4a:dd:43:46:94:eb:
         39:84:ee:06:a2:dc:ec:7b:56:ef:81:9b:cd:d6:fe:d8:b1:2a:
         52:84:12:6e:d5:61:9a:55:c3:fd:d1:33:4a:c7:10:9c:2e:59:
         19:d9:d0:bf:93:74:a7:b5:12:0e:4b:f4:0e:1b:9f:ba:e8:9a:
         51:92:43:e2:b3:64:34:5f:98:cc:97:39:46:a8:70:50:00:b2:
         41:80:53:d3:fa:87:1d:c6:5b:8b:dc:b0:df:a1:03:7b:a3:d1:
         ec:cc:c2:e0:a7:a5:57:d2:6a:67:72:3c:18:9c:ae:e6:07:5f:
         de:52:50:80:e1:bd:56:c1:93:c7:0f:7e:67:1f:1f:c7:80:26:
         da:54:76:33:a4:b5:bc:0f:33:23:0e:10:ab:00:a7:6d:2e:7c:
         84:e1:e9:0e:ff:61:61:23:0d:c0:73:40:9c:b8:38:e0:60:ff:
         6f:8a:92:04:d7:12:04:ae:67:a6:0a:e3:7a:0e:65:81:a3:ee:
         c7:81:c3:0b:1c:61:29:f9:5c:2c:dc:b1:18:f1:e6:48:a0:40:
         53:7e:40:f1:f6:63:43:05:b0:ed:1b:54:59:2e:3d:f2:5f:44:
         fd:8d:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:27:17 2026 by rpki-client