This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json) Hash identifier: M/g0zqaDj6uDWpuH+cjZurAWG/zPFEk/wsIJ5DfL5/w= Subject key identifier: E4:72:DC:E5:D0:32:02:E1:00:85:F7:B2:28:5E:83:CA:F1:A5:B0:94 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 2CFC8876C93952699A7846CDC696A00D104C82B7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft Manifest number: C1 Signing time: Sat 22 Nov 2025 05:33:31 +0000 Manifest this update: Sat 22 Nov 2025 05:28:31 +0000 Manifest next update: Sun 23 Nov 2025 08:40:31 +0000 Files and hashes: 1: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=) 2: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=) 3: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=) 4: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=) 5: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=) 6: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=) 7: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=) 8: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=) 9: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=) 10: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=) 11: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=) 12: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=) 13: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=) 14: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=) 15: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: PT1IzZfdubRA3k1RdbOGx3rvs2wA14EIIlzJzh0p3iU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 08:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fc:88:76:c9:39:52:69:9a:78:46:cd:c6:96:a0:0d:10:4c:82:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Nov 22 05:28:31 2025 GMT Not After : Nov 23 08:40:31 2025 GMT Subject: CN=E472DCE5D03202E10085F7B2285E83CAF1A5B094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:8c:72:57:07:6a:cf:1b:24:44:17:57:27: 0d:c0:63:30:cf:07:cc:a6:11:27:9a:02:35:81:d1: f0:88:29:9d:92:c7:c2:3b:ee:7e:f4:51:09:0c:60: 01:09:b3:3c:71:28:6b:5e:7a:2f:2b:c9:c6:c7:06: dc:44:58:15:44:cb:1c:e3:2b:e8:d8:f2:d7:ef:99: df:d8:1e:42:37:da:b4:31:47:dc:2f:6c:79:85:87: b3:64:3d:b9:07:77:fa:aa:68:2c:0e:94:be:6c:b1: eb:72:63:87:df:58:a6:06:50:f1:b8:be:5d:1c:b4: 09:b7:bd:47:33:49:54:86:67:5f:db:85:98:54:92: 65:2f:34:a6:ee:6f:fa:0a:5f:c3:f2:df:56:8e:07: 10:ce:bc:da:fd:6a:11:f9:22:67:af:f8:01:80:5c: 5e:bd:12:99:8c:ba:3c:09:54:8e:e0:a1:c3:77:c6: bb:e1:39:1d:60:eb:e1:a9:5f:cf:01:d2:8f:53:1d: bf:50:89:59:7d:d0:71:0c:41:53:32:8f:af:10:9a: 25:d0:d4:9c:90:be:e1:90:5f:5d:8c:28:d5:93:2d: 0a:a4:8b:5d:da:4a:cf:11:86:73:25:e4:c4:c0:da: 67:fd:27:34:1e:48:db:ff:e8:ca:51:4d:f9:dd:3a: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:72:DC:E5:D0:32:02:E1:00:85:F7:B2:28:5E:83:CA:F1:A5:B0:94 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ca:cd:ed:a0:b1:95:a8:33:99:7d:98:5a:03:bd:ba:0a:0f: df:a7:02:98:f2:53:b3:40:28:97:8c:50:52:e7:eb:90:20:99: 24:32:1e:ba:cd:6c:f7:9d:e1:27:35:ed:41:f5:11:89:c3:61: 8e:fa:79:e6:9d:d8:76:92:e9:14:52:35:c4:5b:19:47:5b:45: 71:e5:00:63:8a:5c:9f:4e:cc:3d:29:46:7e:5f:20:f9:a9:42: 77:7b:ac:d7:6a:8c:41:4f:3b:66:bd:61:d2:cc:b4:c7:de:d1: 07:ff:ca:90:17:8a:8c:2d:7e:ce:b4:73:5d:91:ab:a4:02:e4: 63:23:bc:d9:bb:3f:b2:0a:29:f4:4e:4d:d3:51:e5:33:8f:fd: 6a:59:47:3a:b2:08:4b:05:26:d1:6e:73:e0:6d:6e:ea:97:8c: 92:15:cf:a2:35:f4:09:b5:f0:53:7b:7c:7f:ad:92:fc:62:43: 31:af:00:9d:1f:a5:b0:1b:8f:5e:92:5b:6f:13:14:98:f2:41: 36:c5:3a:7c:e7:09:79:23:93:97:6b:2a:c7:ea:90:24:99:64: 5c:fa:b3:d9:42:c0:25:c6:7c:71:45:57:41:f9:ab:83:b6:ce: 91:71:f3:ea:0b:c6:ca:20:4f:89:65:12:18:f7:d3:7d:79:c4: 06:3a:f2:f9 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIULPyIdsk5UmmaeEbNxpagDRBMgrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTExMjIwNTI4MzFaFw0yNTExMjMwODQwMzFaMDMxMTAvBgNV BAMTKEU0NzJEQ0U1RDAzMjAyRTEwMDg1RjdCMjI4NUU4M0NBRjFBNUIwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKoxyVwdqzxskRBdXJw3AYzDP B8ymESeaAjWB0fCIKZ2Sx8I77n70UQkMYAEJszxxKGteei8rycbHBtxEWBVEyxzj K+jY8tfvmd/YHkI32rQxR9wvbHmFh7NkPbkHd/qqaCwOlL5ssetyY4ffWKYGUPG4 vl0ctAm3vUczSVSGZ1/bhZhUkmUvNKbub/oKX8Py31aOBxDOvNr9ahH5Imev+AGA XF69EpmMujwJVI7gocN3xrvhOR1g6+GpX88B0o9THb9QiVl90HEMQVMyj68QmiXQ 1JyQvuGQX12MKNWTLQqki13aSs8RhnMl5MTA2mf9JzQeSNv/6MpRTfndOnlvAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU5HLc5dAyAuEAhfeyKF6DyvGlsJQwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5MjQz LzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbKze2gsZWoM5l9mFoDvboKD9+nApjyU7NAKJeMUFLn65AgmSQyHrrN bPed4Sc17UH1EYnDYY76eead2HaS6RRSNcRbGUdbRXHlAGOKXJ9OzD0pRn5fIPmp Qnd7rNdqjEFPO2a9YdLMtMfe0Qf/ypAXiowtfs60c12Rq6QC5GMjvNm7P7IKKfRO TdNR5TOP/WpZRzqyCEsFJtFuc+BtbuqXjJIVz6I19Am18FN7fH+tkvxiQzGvAJ0f pbAbj16SW28TFJjyQTbFOnznCXkjk5drKsfqkCSZZFz6s9lCwCXGfHFFV0H5q4O2 zpFx8+oLxsogT4llEhj30315xAY68vk= -----END CERTIFICATE-----Generated at Sat Nov 22 21:41:30 2025 by rpki-client