This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json) Hash identifier: 4DzBFlk9TMMmuIn/FzlU6fMh5xlOQ+ClvUnx4AckpX4= Subject key identifier: BD:0E:78:25:F8:D5:A8:D9:C4:C2:42:88:04:6D:8F:00:8A:8A:EC:B5 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 28E8946EAEEC27A3CBF60BFEBAF871ECDB655CB1 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft Manifest number: FC Signing time: Sat 10 Jan 2026 21:00:13 +0000 Manifest this update: Sat 10 Jan 2026 20:55:13 +0000 Manifest next update: Mon 12 Jan 2026 00:56:13 +0000 Files and hashes: 1: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=) 2: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=) 3: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: bNMl41sSA9nNYKyXcjiT+yu5cn3Vrv/HX5DMnUoidNo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 14:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e8:94:6e:ae:ec:27:a3:cb:f6:0b:fe:ba:f8:71:ec:db:65:5c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Jan 10 20:55:13 2026 GMT Not After : Jan 12 00:56:13 2026 GMT Subject: CN=BD0E7825F8D5A8D9C4C24288046D8F008A8AECB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:d7:88:3c:90:7a:6d:85:5d:a6:13:fe:de: 89:2c:4e:fd:3c:0e:8c:28:38:db:58:e6:d3:fc:c1: cc:c0:a9:1b:5b:6e:9f:15:7b:e4:26:f5:8d:7b:e8: ae:50:97:cf:29:e3:95:1d:5a:41:a1:94:30:d8:cb: 82:7d:69:3c:e9:2c:1d:35:d3:7d:b2:0e:ec:8c:d1: 0e:63:bf:bc:0b:4b:d9:bb:42:0c:2c:d1:4f:26:94: 19:57:d7:bb:06:7b:51:53:57:f9:6a:e2:08:0b:e1: 30:28:86:b0:5d:68:65:a8:26:01:3b:d6:5b:1d:00: ef:78:26:14:8e:16:3e:68:41:68:c8:4d:68:2a:12: 82:47:e7:e8:c2:c5:a1:04:71:56:a1:1a:9e:0a:82: 55:88:fc:20:37:c9:cb:b2:3d:48:e5:41:b5:04:5e: 1f:d3:5a:4c:2e:a9:6d:7c:6b:26:04:4a:e9:4e:1e: 8c:c4:b7:6a:7a:27:86:a1:f8:13:b1:32:c7:46:8b: f0:91:fa:91:2a:c1:fe:50:24:2c:76:cd:db:d8:9e: 47:34:b7:54:60:4d:34:bc:81:59:b6:9a:57:e5:90: 77:ef:c5:af:6a:0e:59:16:e2:59:63:39:39:94:5b: a5:d8:75:29:a9:ff:44:58:01:13:ce:b4:41:6d:23: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0E:78:25:F8:D5:A8:D9:C4:C2:42:88:04:6D:8F:00:8A:8A:EC:B5 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:27:b9:1d:4f:93:2d:19:3d:82:b2:5c:19:b1:d0:71:c3:85: 97:df:bd:f9:3e:9d:4f:6b:0e:fb:05:51:fc:fa:ca:c2:0b:6f: 59:5b:32:db:1a:65:b2:59:67:5a:8e:e3:66:60:08:61:80:6b: 05:0a:76:6c:3f:36:2f:d6:5f:3f:fb:59:53:96:1e:4d:34:36: 15:3e:8a:ae:6a:23:5a:30:84:8b:09:d0:b9:a8:27:91:0d:43: 92:94:be:b1:99:56:a9:57:36:43:0f:c4:88:bc:b8:3c:6d:7e: d6:34:fa:7b:b3:10:47:e1:37:15:c3:16:a2:2e:e0:a3:a0:c2: 4b:bf:2e:a4:c7:84:46:f9:cd:05:5f:3c:dc:5e:65:58:b6:54: 16:90:42:aa:38:e5:67:ff:89:19:75:4f:c0:2f:a5:85:ef:6d: ed:31:1a:83:77:6f:49:46:c6:80:03:ad:b1:e5:20:16:6b:fd: 71:e9:84:9f:cf:15:04:88:e0:c5:75:61:c0:a2:31:46:ff:19: d3:00:ad:b4:1a:61:fc:d3:8c:3b:99:fd:c8:31:c6:c7:e8:37: 64:d8:4d:c4:85:2a:72:1b:45:7a:91:3a:6d:c1:7f:24:ce:ca: ea:ea:43:00:40:33:3e:dd:08:86:35:f9:2e:ea:ca:d1:ab:ba: ab:0c:56:a3 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUKOiUbq7sJ6PL9gv+uvhx7NtlXLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNjAxMTAyMDU1MTNaFw0yNjAxMTIwMDU2MTNaMDMxMTAvBgNV BAMTKEJEMEU3ODI1RjhENUE4RDlDNEMyNDI4ODA0NkQ4RjAwOEE4QUVDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6NeIPJB6bYVdphP+3oksTv08 DowoONtY5tP8wczAqRtbbp8Ve+Qm9Y176K5Ql88p45UdWkGhlDDYy4J9aTzpLB01 032yDuyM0Q5jv7wLS9m7Qgws0U8mlBlX17sGe1FTV/lq4ggL4TAohrBdaGWoJgE7 1lsdAO94JhSOFj5oQWjITWgqEoJH5+jCxaEEcVahGp4KglWI/CA3ycuyPUjlQbUE Xh/TWkwuqW18ayYESulOHozEt2p6J4ah+BOxMsdGi/CR+pEqwf5QJCx2zdvYnkc0 t1RgTTS8gVm2mlflkHfvxa9qDlkW4lljOTmUW6XYdSmp/0RYARPOtEFtI1DzAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUvQ54JfjVqNnEwkKIBG2PAIqK7LUwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADsnuR1Pky0ZPYKyXBmx0HHDhZffvfk+nU9rDvsFUfz6ysILb1lbMtsa ZbJZZ1qO42ZgCGGAawUKdmw/Ni/WXz/7WVOWHk00NhU+iq5qI1owhIsJ0LmoJ5EN Q5KUvrGZVqlXNkMPxIi8uDxtftY0+nuzEEfhNxXDFqIu4KOgwku/LqTHhEb5zQVf PNxeZVi2VBaQQqo45Wf/iRl1T8AvpYXvbe0xGoN3b0lGxoADrbHlIBZr/XHphJ/P FQSI4MV1YcCiMUb/GdMArbQaYfzTjDuZ/cgxxsfoN2TYTcSFKnIbRXqROm3BfyTO yurqQwBAMz7dCIY1+S7qytGruqsMVqM= -----END CERTIFICATE-----Generated at Sun Jan 11 04:39:07 2026 by rpki-client