This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json)
Hash identifier: +8y20i4ACL93BASDS1mbZS+Ok5Lgld0RM/1sJ6m3FAw=
Subject key identifier: E6:7B:13:E6:62:8C:F1:96:99:DE:85:83:5D:31:05:72:80:53:31:28
Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Certificate serial: 14A02521F906F22DE61F6836FF60B22D7AD0381E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
Manifest number: 0120
Signing time: Tue 03 Feb 2026 16:48:14 +0000
Manifest this update: Tue 03 Feb 2026 16:43:14 +0000
Manifest next update: Wed 04 Feb 2026 16:54:14 +0000
Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: yAOhOAmLwzr7BWPxIabwK/3Dkf59Yq8gbTmLdW9wvX0=)
2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 15:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a0:25:21:f9:06:f2:2d:e6:1f:68:36:ff:60:b2:2d:7a:d0:38:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Validity
Not Before: Feb 3 16:43:14 2026 GMT
Not After : Feb 4 16:54:14 2026 GMT
Subject: CN=E67B13E6628CF19699DE85835D31057280533128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:cd:bf:c9:b9:c6:fe:cf:5f:d1:77:a0:21:
03:d6:d3:2b:4e:2f:d1:f1:c4:ba:f7:72:08:cb:fe:
3e:49:68:28:16:8b:97:4c:40:64:22:00:f1:57:58:
a2:bb:27:70:b9:ea:3d:81:4c:3e:4e:b8:75:21:77:
b5:ba:59:9b:f4:b1:2c:20:1c:b2:25:71:6f:2b:ef:
55:88:1c:07:14:d6:1c:b1:3e:e0:9f:49:15:7e:a7:
d7:ec:77:42:9c:8e:32:9e:82:90:d7:56:2a:cd:48:
fe:69:be:78:9c:87:c9:78:03:80:20:92:6e:2c:4f:
d1:c2:d7:f2:12:e1:4f:3f:db:0b:e4:54:29:2b:a4:
bb:42:4c:b7:8f:aa:4e:84:86:30:19:71:a8:b1:26:
82:e1:98:57:fc:aa:03:00:4b:64:6d:fd:43:f4:54:
fa:d3:ac:a0:2b:d3:15:c4:f8:6f:de:6d:e4:aa:58:
4f:d6:3c:7d:a5:a9:b2:3d:55:c7:05:55:de:1d:b1:
a3:17:fb:73:13:11:19:4d:8e:70:09:ff:50:11:7d:
f1:9e:0a:b1:b0:28:38:1b:cb:f2:4d:34:17:18:c0:
5b:e4:6c:84:53:25:60:53:e4:be:b4:13:86:79:1d:
8e:1b:36:ae:61:60:bc:12:2e:00:93:b1:59:f9:54:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7B:13:E6:62:8C:F1:96:99:DE:85:83:5D:31:05:72:80:53:31:28
X509v3 Authority Key Identifier:
keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:03:12:49:ab:ea:a0:e0:e0:f8:f9:1b:19:20:e3:e2:38:c8:
d9:9f:fe:1d:58:67:57:60:6b:9b:75:dc:92:79:4f:c8:cf:45:
ab:ff:b0:a5:3f:58:ee:41:a3:70:8f:08:7f:cc:68:6b:e6:e5:
df:b6:f8:3f:40:75:e8:b4:e2:93:44:01:cd:4c:0c:ca:84:eb:
67:ba:62:41:46:99:4b:8d:d1:9e:1d:22:f4:b9:ff:29:d5:48:
2c:f0:69:a8:79:33:72:23:da:20:e1:a5:a1:22:02:5f:2e:03:
86:23:b4:67:62:82:82:14:7f:59:35:06:23:4b:3c:df:2a:a0:
af:47:4d:6e:f1:62:0c:1b:9d:eb:bd:b3:da:7c:1a:03:d6:30:
33:f1:fd:f3:46:1a:6d:91:59:04:c2:1a:fe:27:a0:c0:7f:7c:
49:ef:ce:9a:fb:63:a9:83:67:7d:60:a3:53:65:cc:cc:59:98:
91:e8:f7:a2:2c:0f:02:ee:a4:cf:7d:7c:7f:b5:a1:46:c1:e0:
39:f4:b7:23:9a:1e:b4:ce:3e:cc:28:6d:d6:43:53:4d:1a:fb:
a8:7a:54:0b:2c:4e:c5:87:32:2e:15:8d:45:80:1c:a8:b0:93:
7d:ec:9f:07:d1:30:2e:ad:8d:55:d3:9d:8d:0c:92:b4:f7:d4:
54:51:e7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 00:32:33 2026 by rpki-client