This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: p6HmcEP2ETRNcWlfU5E/GzFnS1gVhPxGfyjmprMV/0A= Subject key identifier: FC:95:EF:07:72:AF:A8:05:D0:95:4D:FD:F9:11:D5:1E:BE:C8:79:FE Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 1EA2226F0536DCD4D10DA707D3786C871AAA14DC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: 0102 Signing time: Sat 10 Jan 2026 13:46:39 +0000 Manifest this update: Sat 10 Jan 2026 13:41:39 +0000 Manifest next update: Sun 11 Jan 2026 15:22:39 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 2: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: Tg1lNmpINVSfZmH6rXYMbIrYjyT6ZNvc49Kk/1E9dKY=) 3: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 14:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a2:22:6f:05:36:dc:d4:d1:0d:a7:07:d3:78:6c:87:1a:aa:14:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Jan 10 13:41:39 2026 GMT Not After : Jan 11 15:22:39 2026 GMT Subject: CN=FC95EF0772AFA805D0954DFDF911D51EBEC879FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:f6:24:8f:63:78:3c:d2:4e:14:61:ac:a1: 29:19:6b:0d:d4:c5:4c:da:e8:60:32:8d:be:3e:e0: 68:68:e2:7b:e9:fd:2a:e5:e1:44:9b:55:02:f8:3b: bb:64:d2:a2:6b:62:5d:26:ff:f8:c0:76:ef:bf:7a: 5d:99:cd:b7:ad:bc:00:d1:5f:3d:54:6f:47:8f:7f: fc:91:9b:df:4a:b8:ec:15:bd:e8:97:30:f2:57:0c: 7b:30:b1:0d:ed:dc:71:9c:27:38:a8:fa:88:ac:05: 30:bd:40:2e:8c:20:ae:d5:ef:21:b7:b9:80:3e:a1: fa:19:93:ef:15:26:ab:4a:49:98:48:48:7b:20:3d: f2:6f:1f:28:75:78:d6:d6:11:73:5a:38:2b:ab:c9: 46:7c:09:36:8f:18:0e:cd:b3:f8:b7:79:fb:af:96: 7d:a7:38:a6:df:86:63:ed:20:9a:eb:b0:a6:5f:16: 93:35:b6:f1:4c:9b:0b:2d:4a:46:39:14:bc:f4:4c: 59:39:39:8e:e2:02:0b:b3:01:b7:9c:ff:1c:6d:c7: 15:65:42:20:b0:3f:b6:40:45:02:ea:34:c1:38:69: 24:38:2c:d8:a1:f4:b6:ea:54:57:43:21:ea:21:36: a0:c2:0c:30:38:b7:ec:aa:4a:47:56:89:1e:cc:00: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:95:EF:07:72:AF:A8:05:D0:95:4D:FD:F9:11:D5:1E:BE:C8:79:FE X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fc:73:68:67:27:2e:2a:99:c6:d8:4f:9c:32:13:14:09:2f: df:17:0d:6a:a4:f4:92:98:5b:92:04:a8:6c:36:bf:fe:db:a3: 45:e1:7b:c4:3c:b9:bf:f9:a3:fa:c3:f3:9c:81:3d:a9:b8:cd: 78:44:e1:4a:78:70:83:ea:4c:5e:15:72:c2:35:99:29:28:2b: 89:66:4c:a4:c2:9c:29:d7:1e:78:50:94:b1:a8:51:bb:4d:61: ac:44:42:fe:ef:75:b6:e6:c9:63:0b:cd:01:cd:0d:43:bd:9f: 9d:19:65:90:e4:dd:3f:10:b0:70:40:74:91:94:4e:e6:c0:cb: 1f:e9:f1:df:61:b2:80:96:7e:0a:58:c1:88:03:f9:a2:88:bc: 6d:86:8e:65:f7:55:e1:2c:9c:ac:47:04:a7:90:f7:55:a6:27: 9e:5b:16:3c:9e:35:d5:b9:24:52:8b:92:67:ff:9c:fc:fa:d1: b5:25:12:d1:be:2a:35:74:ee:f9:d0:30:df:5f:57:27:67:3d: 9b:da:d9:e5:b4:e2:1c:23:bc:ad:bc:81:a0:1e:dc:55:03:ab: 15:c0:c4:9c:81:5e:ba:62:60:60:4c:59:1a:24:3d:11:c3:1e: 71:b9:4b:73:68:61:b9:ac:8b:56:08:3d:5d:b3:7a:e0:63:ff: e9:a8:dd:48 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUHqIibwU23NTRDacH03hshxqqFNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNjAxMTAxMzQxMzlaFw0yNjAxMTExNTIyMzlaMDMxMTAvBgNV BAMTKEZDOTVFRjA3NzJBRkE4MDVEMDk1NERGREY5MTFENTFFQkVDODc5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9/Ykj2N4PNJOFGGsoSkZaw3U xUza6GAyjb4+4Gho4nvp/Srl4USbVQL4O7tk0qJrYl0m//jAdu+/el2ZzbetvADR Xz1Ub0ePf/yRm99KuOwVveiXMPJXDHswsQ3t3HGcJzio+oisBTC9QC6MIK7V7yG3 uYA+ofoZk+8VJqtKSZhISHsgPfJvHyh1eNbWEXNaOCuryUZ8CTaPGA7Ns/i3efuv ln2nOKbfhmPtIJrrsKZfFpM1tvFMmwstSkY5FLz0TFk5OY7iAguzAbec/xxtxxVl QiCwP7ZARQLqNME4aSQ4LNih9LbqVFdDIeohNqDCDDA4t+yqSkdWiR7MAGIjAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU/JXvB3KvqAXQlU39+RHVHr7Ief4wHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAD78c2hnJy4qmcbYT5wyExQJL98XDWqk9JKYW5IEqGw2v/7bo0Xhe8Q8 ub/5o/rD85yBPam4zXhE4Up4cIPqTF4VcsI1mSkoK4lmTKTCnCnXHnhQlLGoUbtN YaxEQv7vdbbmyWMLzQHNDUO9n50ZZZDk3T8QsHBAdJGUTubAyx/p8d9hsoCWfgpY wYgD+aKIvG2GjmX3VeEsnKxHBKeQ91WmJ55bFjyeNdW5JFKLkmf/nPz60bUlEtG+ KjV07vnQMN9fVydnPZva2eW04hwjvK28gaAe3FUDqxXAxJyBXrpiYGBMWRokPRHD HnG5S3NoYbmsi1YIPV2zeuBj/+mo3Ug= -----END CERTIFICATE-----Generated at Sun Jan 11 04:38:55 2026 by rpki-client