This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File:                     475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier:          zwML2uwuzm0G2oEx/KPOJpGPMIyD9UBCOFRoWdKbYvo=
Subject key identifier:   1A:B0:C2:E1:79:74:C2:47:1E:90:14:51:F6:BA:F4:F2:D9:5A:44:12
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       5E5A40D930FA1A5947FD4A242AFD6DCF2199906E
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number:          0103
Signing time:             Sat 10 Jan 2026 22:48:39 +0000
Manifest this update:     Sat 10 Jan 2026 22:43:39 +0000
Manifest next update:     Sun 11 Jan 2026 23:14:39 +0000
Files and hashes:         1: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
                          2: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
                          3: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
                          4: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
                          5: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
                          6: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: TxUETUlnSFuSO6MC3bZwJr4Efr5BkLebbD61ovXE+go=)
                          7: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
                          8: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
                          9: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
                          10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
                          11: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
                          12: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
                          13: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
                          14: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
                          15: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:40:d9:30:fa:1a:59:47:fd:4a:24:2a:fd:6d:cf:21:99:90:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Jan 10 22:43:39 2026 GMT
            Not After : Jan 11 23:14:39 2026 GMT
        Subject: CN=1AB0C2E17974C2471E901451F6BAF4F2D95A4412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:ad:96:b8:1d:10:bc:bd:f2:46:9a:4f:0c:
                    9c:1f:46:7f:73:2c:22:06:77:ee:1d:0f:d4:5c:eb:
                    f6:d5:0e:93:ec:a1:cd:b2:75:ea:da:5c:81:32:85:
                    2f:cf:04:73:f9:a7:3e:c3:da:db:a4:a2:e7:e2:af:
                    92:7b:97:25:bd:ec:a3:40:3d:84:ff:8e:3e:68:ec:
                    f1:46:26:82:e9:8b:13:b4:20:49:8a:10:be:0d:48:
                    5e:0c:ce:32:a4:7a:1c:0c:82:30:13:41:a7:fd:4c:
                    61:e4:21:fa:27:28:37:c1:ea:75:29:c2:e0:7f:7e:
                    c4:ce:13:da:cb:2f:6a:c3:42:41:c9:15:11:81:5d:
                    31:3b:36:e5:44:61:6d:08:7e:87:76:23:b7:21:8c:
                    92:97:60:7e:f4:53:52:fa:10:cf:5f:f9:7d:1c:35:
                    16:58:4c:4d:78:72:11:ff:64:a5:1a:d4:47:e7:9f:
                    fc:4e:dc:77:01:fb:87:52:b7:33:51:fd:5b:8d:ad:
                    aa:68:02:15:56:89:24:ec:00:5b:0a:2f:ab:32:b8:
                    02:d1:c9:7a:dc:12:95:a5:fb:6a:67:ac:da:fe:04:
                    af:df:05:f1:dd:8a:58:18:5c:80:70:47:a7:e6:dc:
                    28:61:42:f2:b9:c4:91:47:18:ad:84:ac:7f:fa:77:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B0:C2:E1:79:74:C2:47:1E:90:14:51:F6:BA:F4:F2:D9:5A:44:12
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:16:aa:2e:9b:0b:8a:33:71:5a:dd:d7:00:a1:e4:56:09:21:
         f1:82:34:3d:4b:8a:03:d2:9c:fb:93:79:73:1b:e6:69:ba:aa:
         87:dd:a0:88:e9:e1:da:57:e8:4b:61:bf:69:39:28:df:a6:77:
         26:9f:11:0e:9c:45:93:e9:a4:30:4c:96:bc:ab:85:80:fc:2e:
         3a:62:e6:bf:87:ec:c9:7b:10:bc:a5:a6:f4:9d:14:82:46:2e:
         a8:e5:88:08:00:47:8a:25:47:e4:e6:dc:d7:7e:42:d7:83:90:
         f3:ef:1d:7d:27:d3:59:fc:8a:3a:26:5c:5c:32:be:25:48:9a:
         c1:77:39:71:96:5e:fb:9b:3f:9d:d5:87:0e:23:77:62:38:23:
         3e:cb:5d:dd:be:62:b2:0a:7b:7e:a3:7f:71:7b:f5:46:82:55:
         79:40:9d:98:8c:4e:fa:32:71:67:6c:14:6a:74:12:eb:6f:22:
         3f:eb:40:bc:8e:6e:4d:83:4e:09:21:3e:0f:63:e0:11:49:53:
         60:a0:97:08:6b:35:fe:ec:bf:1d:b5:5e:64:81:4c:68:f8:21:
         02:5b:1b:18:8e:b2:5d:3f:00:6c:32:a1:b2:82:34:a7:74:3e:
         c4:8f:b0:da:15:d9:0a:ec:2f:3f:81:3e:39:d9:fb:e9:24:f6:
         85:6c:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:39:07 2026 by rpki-client