This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json) Hash identifier: Sukdgl96UZJfIyteUSNQZu4ZISDhsKe5+7BGWRIC9GY= Subject key identifier: 3E:40:E9:9C:14:6A:F5:14:8B:90:7F:62:26:96:26:62:A4:F1:50:D4 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 442230C35558A2A2C370F26BE19199A1AAEB7E6A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft Manifest number: BE Signing time: Sat 22 Nov 2025 07:33:06 +0000 Manifest this update: Sat 22 Nov 2025 07:28:06 +0000 Manifest next update: Sun 23 Nov 2025 09:43:06 +0000 Files and hashes: 1: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=) 2: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=) 3: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=) 4: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=) 5: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=) 6: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=) 7: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: dd/011lkLDz+Gs75V1OTkJbIOCGvDnqqHQU7QGYAiSU=) 8: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=) 9: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=) 10: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=) 11: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=) 12: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=) 13: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 09:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:30:c3:55:58:a2:a2:c3:70:f2:6b:e1:91:99:a1:aa:eb:7e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Nov 22 07:28:06 2025 GMT Not After : Nov 23 09:43:06 2025 GMT Subject: CN=3E40E99C146AF5148B907F6226962662A4F150D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:59:5e:92:ad:9a:ca:19:92:6f:a3:2e:7e: 14:aa:52:2b:63:77:65:9e:0d:50:3a:2e:6e:b2:0c: ee:72:4a:ea:4a:38:20:2f:1a:40:e8:8c:f8:6e:10: 1c:bb:8e:27:19:2a:56:58:9c:10:22:77:f7:86:74: f6:0c:ef:36:7e:2a:1c:ae:26:13:a9:45:cc:60:07: 8c:84:03:ec:6f:c3:ba:91:a6:ce:fb:23:1b:f0:d9: 49:bb:d5:aa:b6:68:a5:5c:53:19:55:02:48:d5:ba: 80:1c:28:c3:bc:6f:76:c6:26:24:b5:29:bb:a1:86: ab:00:2f:58:bf:ec:b6:f1:8e:97:ac:bb:17:b3:9c: 52:3f:e7:5d:71:51:bc:b4:a3:82:37:58:29:e8:bb: c8:83:9d:d5:92:fe:4e:e6:00:e4:ac:30:e1:66:40: 14:bb:5f:34:b6:b6:95:41:10:75:7a:a3:6a:0a:7a: 67:b9:6e:c8:b8:a8:eb:cd:18:18:02:a5:74:7a:b9: 35:09:6e:b4:a2:99:f1:e8:45:55:66:4d:ca:b8:bf: 27:3d:5a:ec:d5:49:e4:44:ed:e5:86:1f:50:b9:1c: 35:2f:89:c4:de:7a:0b:be:7e:71:99:4f:fb:74:2f: c3:a8:8e:8a:10:82:26:76:0b:dc:29:4f:15:5c:6f: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:40:E9:9C:14:6A:F5:14:8B:90:7F:62:26:96:26:62:A4:F1:50:D4 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:21:c7:5d:3a:a1:14:00:7d:9a:ab:85:95:6b:ed:90:15:ba: 4e:87:b4:f8:d0:4e:64:52:cc:1f:0a:61:dd:34:6a:3a:13:95: e7:e7:fa:f9:54:72:1a:e1:05:73:43:a7:49:4f:da:5b:ca:19: c2:a1:50:ee:a0:31:14:26:0e:e1:15:63:93:23:d6:f9:da:b9: 76:35:e1:d8:58:30:d7:d6:34:34:4e:63:24:34:73:ea:3c:9c: d3:4d:8d:28:c8:41:45:00:10:bf:ff:58:97:74:9b:87:42:2c: 67:46:eb:e3:52:2d:9d:a7:58:3d:86:f2:c5:80:c1:8a:c0:90: 8a:47:12:67:58:e1:5c:9c:e9:7a:c8:7d:5f:5d:68:27:b8:4d: 7c:2f:6c:0d:67:94:58:26:ef:7b:3d:5d:20:b8:2c:af:66:7f: 1d:df:79:b0:b3:87:37:ce:f4:d0:14:e7:47:13:43:f2:e6:92: 1b:97:d8:21:be:2b:d2:44:db:eb:d6:12:fc:6a:b9:d4:b0:96: d2:d4:fb:2e:47:88:b2:f5:32:93:ff:3d:2e:b2:87:85:02:34: c0:dc:41:ea:5d:9c:d2:10:37:b8:70:29:67:83:46:c6:99:7d: 51:d2:61:5e:59:2f:70:cd:0a:0d:bc:a0:1a:45:9a:d9:d7:a8: 7e:f7:d7:4a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIURCIww1VYoqLDcPJr4ZGZoarrfmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTExMjIwNzI4MDZaFw0yNTExMjMwOTQzMDZaMDMxMTAvBgNV BAMTKDNFNDBFOTlDMTQ2QUY1MTQ4QjkwN0Y2MjI2OTYyNjYyQTRGMTUwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8Vlekq2ayhmSb6MufhSqUitj d2WeDVA6Lm6yDO5ySupKOCAvGkDojPhuEBy7jicZKlZYnBAid/eGdPYM7zZ+Khyu JhOpRcxgB4yEA+xvw7qRps77Ixvw2Um71aq2aKVcUxlVAkjVuoAcKMO8b3bGJiS1 KbuhhqsAL1i/7LbxjpesuxeznFI/511xUby0o4I3WCnou8iDndWS/k7mAOSsMOFm QBS7XzS2tpVBEHV6o2oKeme5bsi4qOvNGBgCpXR6uTUJbrSimfHoRVVmTcq4vyc9 WuzVSeRE7eWGH1C5HDUvicTeegu+fnGZT/t0L8OojooQgiZ2C9wpTxVcbx75AgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUPkDpnBRq9RSLkH9iJpYmYqTxUNQwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABghx106oRQAfZqrhZVr7ZAVuk6HtPjQTmRSzB8KYd00ajoTlefn+vlU chrhBXNDp0lP2lvKGcKhUO6gMRQmDuEVY5Mj1vnauXY14dhYMNfWNDROYyQ0c+o8 nNNNjSjIQUUAEL//WJd0m4dCLGdG6+NSLZ2nWD2G8sWAwYrAkIpHEmdY4Vyc6XrI fV9daCe4TXwvbA1nlFgm73s9XSC4LK9mfx3febCzhzfO9NAU50cTQ/LmkhuX2CG+ K9JE2+vWEvxqudSwltLU+y5HiLL1MpP/PS6yh4UCNMDcQepdnNIQN7hwKWeDRsaZ fVHSYV5ZL3DNCg28oBpFmtnXqH7310o= -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:51 2025 by rpki-client