This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File:                     6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier:          1wUic75C0XUqKyerMZMgYf+afFF5sO08c8gKPYSAkow=
Subject key identifier:   12:49:4E:AB:9D:84:1D:E6:8F:DC:25:A5:83:C9:D1:3B:2F:C7:34:30
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       6F728794F815A165195345EABDF8052EF62B754E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number:          D8
Signing time:             Sun 14 Dec 2025 18:08:38 +0000
Manifest this update:     Sun 14 Dec 2025 18:03:38 +0000
Manifest next update:     Mon 15 Dec 2025 18:25:38 +0000
Files and hashes:         1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=)
                          2: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: udIM1nTy7xTADeLYYybp82mG5pHNB64uIxEKfMeBd7c=)
                          3: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=)
                          4: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=)
                          5: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 09:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:72:87:94:f8:15:a1:65:19:53:45:ea:bd:f8:05:2e:f6:2b:75:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Dec 14 18:03:38 2025 GMT
            Not After : Dec 15 18:25:38 2025 GMT
        Subject: CN=12494EAB9D841DE68FDC25A583C9D13B2FC73430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:0c:6f:a3:b1:4c:78:3d:33:1b:d9:83:5b:
                    1a:89:1b:4c:db:91:a4:50:a2:79:6d:fe:46:32:86:
                    e2:91:bf:6a:f3:eb:33:b1:4f:d8:66:97:88:a9:07:
                    59:b3:d6:e1:73:3d:ef:7b:3a:b2:e8:c7:22:a0:c2:
                    41:2d:c3:78:cb:d4:c0:72:15:d4:ab:32:89:0a:db:
                    6c:b3:9f:78:0b:08:a4:e1:70:a1:09:9f:01:ff:13:
                    65:78:ca:da:42:87:18:7d:32:50:b1:71:22:41:bb:
                    91:b0:40:83:8f:33:79:7b:7f:3d:76:84:be:7f:d3:
                    55:7c:a4:48:6a:af:f0:72:5e:1e:13:2c:a2:96:44:
                    17:9c:f0:b6:a9:26:ae:77:55:31:6f:36:22:f5:b7:
                    68:d5:53:e6:de:8f:bb:af:61:a0:88:0f:b8:7c:f3:
                    ce:d2:ae:f7:6a:67:95:be:df:f5:60:42:b4:fa:ea:
                    76:0e:a5:68:0b:c2:fb:fa:7f:21:b2:ca:e0:bb:4d:
                    eb:db:93:f5:9f:3f:80:74:50:fd:21:ff:9e:2a:65:
                    85:16:f6:94:b8:13:6f:c8:c9:b8:8a:51:f0:dc:c2:
                    40:d7:f9:75:05:78:ac:91:3a:05:03:55:1b:7f:7e:
                    29:2a:0a:96:52:60:ff:02:3a:34:7f:d4:dc:29:e3:
                    89:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:4E:AB:9D:84:1D:E6:8F:DC:25:A5:83:C9:D1:3B:2F:C7:34:30
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:4f:90:46:34:c3:53:db:37:7e:7d:cf:09:e0:08:86:b3:ec:
         c3:27:61:aa:42:a5:b1:d8:82:a1:7a:35:60:82:8b:85:c3:6f:
         34:57:70:9b:03:8b:ab:b0:c3:18:bc:8f:dc:e3:aa:43:0a:b7:
         cf:15:12:bb:dd:01:09:9d:90:f8:cb:62:a2:d0:64:63:c5:ac:
         68:cd:07:51:f1:01:f5:c2:51:0a:6f:83:bf:d3:6f:f0:4d:65:
         42:b7:cc:03:bb:9e:4a:1e:d4:f6:79:8f:da:e5:3c:cf:0b:bf:
         05:aa:61:62:d8:08:ef:54:7e:8b:db:81:e6:91:24:ff:0d:93:
         0c:19:68:c2:40:b0:7a:4f:87:d4:71:d3:3b:ce:c6:48:0e:ed:
         be:75:89:61:ae:20:08:00:55:51:1f:53:0a:04:4b:0f:16:ff:
         9f:6f:de:c3:40:a9:93:62:60:7a:71:01:9c:4d:c0:23:a2:6e:
         7c:12:e5:ab:df:2b:ae:17:1e:78:88:01:e1:44:5a:2d:f1:06:
         23:48:73:df:19:80:91:d4:d8:65:08:86:c2:d4:9a:3b:5b:42:
         87:e2:7e:a5:65:ba:23:72:ae:fd:d8:25:97:fd:38:8c:59:3c:
         37:7b:79:1d:46:ce:dc:cb:21:75:ef:de:63:bc:76:00:23:b1:
         f2:51:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:55:41 2025 by rpki-client