This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft File: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft (raw, json) Hash identifier: 31G2tBv4h5M4Dn2AqoSSbclx+qG3tPRyja58Yr7mgAM= Subject key identifier: AF:9A:6B:8F:4E:34:7F:08:75:79:26:DC:F8:CA:54:C1:A6:B3:58:21 Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C Certificate issuer: /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Certificate serial: 06CACC05BE3B37CB1B70902F0FD15F7E1249A3FB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft Manifest number: C0 Signing time: Sat 22 Nov 2025 07:38:34 +0000 Manifest this update: Sat 22 Nov 2025 07:33:34 +0000 Manifest next update: Sun 23 Nov 2025 10:01:34 +0000 Files and hashes: 1: 326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (hash: EPbQn4nTyAleGN23OETUsYn80EOl1eLpliPnGLTdXDk=) 2: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (hash: oi3cTY9RPbSSa44GzFqVMPw4EmmK/P6XuRB3HCSy6ZU=) 3: CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl (hash: pn280P5RqqeNFPLTJj/PvtjDuIZ+Zh9gTQRm2yjgAYA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ca:cc:05:be:3b:37:cb:1b:70:90:2f:0f:d1:5f:7e:12:49:a3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C Validity Not Before: Nov 22 07:33:34 2025 GMT Not After : Nov 23 10:01:34 2025 GMT Subject: CN=AF9A6B8F4E347F08757926DCF8CA54C1A6B35821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:b0:c5:82:fc:49:c1:84:93:48:34:73:6e: 73:6e:35:dd:b6:d7:ff:1b:a1:87:ea:e1:67:c1:b8: 23:19:59:45:f0:34:c2:a0:d6:89:6e:14:a1:a0:2f: b3:b7:40:23:21:35:02:a7:71:d8:45:fc:78:e6:5a: df:3c:c3:26:12:c0:1c:96:11:35:de:95:23:16:29: ac:14:c0:e9:f0:38:1c:ee:4e:32:a1:ad:cb:cd:37: 9f:5c:98:b4:d1:e6:50:e4:ca:36:de:b5:cb:ca:5a: c0:dc:8d:f2:84:84:6d:9f:4d:2e:96:f3:47:0e:17: c8:59:08:56:8f:6f:28:6f:69:61:06:cc:d4:f6:af: de:0a:6b:60:df:e5:ea:90:e3:71:af:05:86:b4:80: 81:3b:e9:87:9c:40:f0:b1:48:0a:f8:98:01:b5:b0: 35:85:2e:6b:3b:4d:fb:32:6c:5d:7c:f1:48:fe:d9: fd:30:a7:bc:b2:bc:9a:53:6e:5f:b2:04:0b:62:a1: 33:93:f9:d4:9e:d0:fa:f7:df:38:68:30:81:39:f1: bf:5f:b6:3e:20:69:b9:fb:af:59:ee:6a:a0:de:3e: 65:86:00:7e:0c:05:34:0c:fb:ca:c3:4d:09:36:a0: ee:5f:15:a7:2c:2e:29:14:e1:fe:93:a7:f6:6d:ea: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:6B:8F:4E:34:7F:08:75:79:26:DC:F8:CA:54:C1:A6:B3:58:21 X509v3 Authority Key Identifier: keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e3:86:ca:67:08:41:55:14:c6:38:02:98:ba:0a:16:70:d3: 2c:00:e1:e0:bc:21:1e:36:74:2c:4f:1a:82:98:2b:67:a4:a5: 5d:bc:c4:10:c2:59:68:bc:cf:61:8f:ec:33:17:a2:2b:ed:cc: f1:ca:94:9c:67:95:fc:3c:65:55:8c:6b:eb:25:81:23:d3:59: 82:b7:4f:a4:90:e4:ce:43:1e:27:52:25:ca:0f:6a:ad:f1:bb: 28:2d:5d:22:6f:f2:05:9a:1e:49:53:93:d7:f1:3b:35:30:92: 43:ed:f8:d9:7c:ff:19:f4:8d:5e:8f:86:ae:94:5c:c1:45:8d: 70:23:72:34:5c:42:f0:88:5a:73:84:f5:18:68:31:88:f4:97: 69:24:6d:49:06:a9:b6:1e:9f:55:b7:86:17:21:85:7e:d4:48: 2b:b0:64:f2:d6:73:bf:22:61:cc:e5:0c:c9:6b:06:65:38:07: 3f:7e:4b:65:13:a4:ed:08:91:51:52:b0:94:c8:2b:d4:97:2d: 4e:db:fe:34:25:75:36:77:e4:38:fa:0c:97:48:1e:8d:bd:96: 8c:4f:a8:b0:3c:08:7f:ea:1d:e5:65:8b:41:a4:ca:dd:b7:04: f3:23:d8:b7:51:d3:89:d4:5d:e9:53:c2:3b:12:87:2d:49:34: 83:f1:3c:74 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUBsrMBb47N8sbcJAvD9FffhJJo/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1 Q0QyNTY1QzAeFw0yNTExMjIwNzMzMzRaFw0yNTExMjMxMDAxMzRaMDMxMTAvBgNV BAMTKEFGOUE2QjhGNEUzNDdGMDg3NTc5MjZEQ0Y4Q0E1NEMxQTZCMzU4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IbDFgvxJwYSTSDRzbnNuNd22 1/8boYfq4WfBuCMZWUXwNMKg1oluFKGgL7O3QCMhNQKncdhF/HjmWt88wyYSwByW ETXelSMWKawUwOnwOBzuTjKhrcvNN59cmLTR5lDkyjbetcvKWsDcjfKEhG2fTS6W 80cOF8hZCFaPbyhvaWEGzNT2r94Ka2Df5eqQ43GvBYa0gIE76YecQPCxSAr4mAG1 sDWFLms7TfsybF188Uj+2f0wp7yyvJpTbl+yBAtioTOT+dSe0Pr33zhoMIE58b9f tj4gabn7r1nuaqDePmWGAH4MBTQM+8rDTQk2oO5fFacsLikU4f6Tp/Zt6ssPAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUr5prj040fwh1eSbc+MpUwaazWCEwHwYDVR0j BBgwFoAUzG7MRiDDMpi6rvFwmtbQWVzSVlwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0NDNkVDQzQ2MjBDMzMy OThCQUFFRjE3MDlBRDZEMDU5NUNEMjU2NUMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1NjRh LzMvQ0M2RUNDNDYyMEMzMzI5OEJBQUVGMTcwOUFENkQwNTk1Q0QyNTY1Qy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABrjhspnCEFVFMY4Api6ChZw0ywA4eC8IR42dCxPGoKYK2ekpV28xBDC WWi8z2GP7DMXoivtzPHKlJxnlfw8ZVWMa+slgSPTWYK3T6SQ5M5DHidSJcoPaq3x uygtXSJv8gWaHklTk9fxOzUwkkPt+Nl8/xn0jV6Phq6UXMFFjXAjcjRcQvCIWnOE 9RhoMYj0l2kkbUkGqbYen1W3hhchhX7USCuwZPLWc78iYczlDMlrBmU4Bz9+S2UT pO0IkVFSsJTIK9SXLU7b/jQldTZ35Dj6DJdIHo29loxPqLA8CH/qHeVli0Gkyt23 BPMj2LdR04nUXelTwjsShy1JNIPxPHQ= -----END CERTIFICATE-----Generated at Sat Nov 22 21:54:41 2025 by rpki-client