This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier: d+16QryZABz2kxQ/eYUbB1LBTgRPGCMzGqUF2VazSYc=
Subject key identifier: 7F:97:FB:C3:09:80:5C:B2:60:23:84:68:7D:67:9E:71:DD:76:1C:19
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 7CFE1BDB3EEE1148CDAAC5A3D10B2ABDFB89264D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number: FF
Signing time: Fri 09 Jan 2026 16:15:50 +0000
Manifest this update: Fri 09 Jan 2026 16:10:50 +0000
Manifest next update: Sat 10 Jan 2026 19:34:50 +0000
Files and hashes: 1: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=)
2: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=)
3: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=)
4: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=)
5: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=)
6: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=)
7: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=)
8: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=)
9: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=)
10: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=)
11: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=)
12: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=)
13: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: agmW44NciFRN+RtD3Jp1zvsmBIq9rboBaxjw2Ki2JIw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 19:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fe:1b:db:3e:ee:11:48:cd:aa:c5:a3:d1:0b:2a:bd:fb:89:26:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Jan 9 16:10:50 2026 GMT
Not After : Jan 10 19:34:50 2026 GMT
Subject: CN=7F97FBC309805CB2602384687D679E71DD761C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:02:29:4f:f6:f9:6d:c2:66:dd:0c:e2:bc:
46:e7:53:a1:b0:ae:a9:cc:25:9d:44:fa:f4:fb:3c:
7c:36:9f:a3:5a:5c:03:96:20:47:66:2d:a3:08:e2:
16:43:3f:74:77:08:18:4d:c9:d1:ff:99:b6:7c:c2:
50:a9:ba:ea:14:74:fc:18:7a:bd:b3:6b:ff:88:70:
ac:97:e1:5a:33:e8:8f:6d:92:3a:40:8c:4f:9f:5a:
37:ea:bf:08:b5:61:28:95:f4:03:15:46:b0:22:ce:
ce:4d:bb:cb:85:e8:ce:08:09:e3:b9:86:ee:d9:34:
eb:89:7b:a3:7c:5c:16:1f:25:fe:94:90:97:4c:a4:
14:a0:c3:bd:59:fb:cc:f6:14:2a:a7:a4:18:44:26:
30:ad:77:4d:b5:61:3a:0f:06:8f:5e:ed:85:2a:87:
28:6f:8c:ef:24:de:1a:16:c4:cd:fa:20:16:95:c3:
f3:e0:46:74:bb:aa:96:66:e8:a3:77:f4:a4:b4:94:
5f:ea:2d:d3:c9:8f:6d:e0:48:37:4f:7c:b8:e7:c4:
f2:e5:6f:c9:1e:03:02:49:38:d7:8f:26:96:7f:85:
6e:fc:fa:89:3a:ad:e5:40:f3:4f:74:50:63:6f:39:
ae:01:e9:04:94:79:0c:ab:90:1b:65:87:90:b3:97:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:97:FB:C3:09:80:5C:B2:60:23:84:68:7D:67:9E:71:DD:76:1C:19
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:18:83:37:af:19:ae:9c:74:32:c2:81:7f:9d:2f:9f:90:
24:ea:30:ac:64:55:bc:6f:fa:fb:dd:54:41:f4:45:4a:6f:b5:
47:02:c7:cf:ee:43:bb:ef:c8:b1:a8:d6:c7:83:1f:da:dd:68:
b4:32:28:63:b2:86:3c:f9:11:b3:03:b3:4b:3f:f9:ca:5b:94:
0e:40:67:87:77:be:72:54:6d:8e:4c:b5:be:cd:d7:ea:c5:27:
87:d2:36:aa:ac:67:8d:72:8f:dd:ee:2b:52:ac:76:b3:4b:6c:
ff:42:0e:07:56:02:7f:f2:10:af:45:42:83:89:18:d6:3e:b9:
1d:8c:fa:c8:fb:37:64:11:fc:d1:52:56:df:fd:42:82:ab:53:
55:54:f4:9b:9b:d4:96:92:cd:6a:7f:5d:02:f2:2d:25:f5:47:
19:ed:6d:4e:0e:f7:3e:a6:ef:bd:c5:a0:32:87:93:d6:b2:47:
9f:3e:8d:49:ad:22:00:7c:24:8d:3c:19:23:8c:8b:3a:a7:cb:
98:88:16:66:41:a9:b7:42:5f:98:43:9e:73:9f:01:31:ed:43:
a8:fe:24:d6:f4:ef:d0:58:19:96:78:04:a6:6d:fd:cc:13:86:
36:7b:dc:ce:c4:57:67:72:0f:49:e5:23:b5:ac:02:ef:bd:4f:
86:10:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:02:41 2026 by rpki-client