This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json) Hash identifier: kABxZLco4sV/xYMupUbeMLHAFZNrg0K4g/UP5+fXJDA= Subject key identifier: 9C:6D:8E:66:87:7E:9B:A3:25:AA:20:4F:BD:FB:AF:5F:DE:C1:78:3D Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Certificate serial: 1A7CBBC041293B9CDE590FF268CA0975F0996C03 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft Manifest number: DF Signing time: Wed 17 Dec 2025 00:07:51 +0000 Manifest this update: Wed 17 Dec 2025 00:02:51 +0000 Manifest next update: Thu 18 Dec 2025 02:35:51 +0000 Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=) 2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: 8f/fJJGW7pJzC7knmjD7BX0mRLSPeJq9KBrxA+phebY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7c:bb:c0:41:29:3b:9c:de:59:0f:f2:68:ca:09:75:f0:99:6c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE Validity Not Before: Dec 17 00:02:51 2025 GMT Not After : Dec 18 02:35:51 2025 GMT Subject: CN=9C6D8E66877E9BA325AA204FBDFBAF5FDEC1783D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:7c:5f:f0:99:41:89:f9:0f:ea:22:fd:b8: 28:fe:d9:c4:bc:9d:f2:95:66:67:4a:d1:d3:ce:b9: ae:a8:aa:cb:05:21:f5:a0:24:5b:28:40:b3:6c:2a: 61:ea:db:de:61:96:c5:74:f7:08:53:ab:52:9c:22: 8b:1b:7b:c7:39:10:c8:88:bf:37:bc:d7:fa:0d:2b: 80:81:b7:0d:6c:ee:d1:3b:67:87:7b:4b:20:5f:10: 5b:5a:72:fb:7f:6b:44:bb:da:5a:9c:c9:5c:6a:95: fa:2e:04:99:14:f3:06:24:71:5e:83:c1:55:b4:d4: c3:59:e7:7e:b4:b8:86:fd:56:70:b0:32:5d:4f:d1: cb:7e:03:e7:08:5e:92:a4:bd:11:3f:aa:c6:31:ed: ce:a2:62:8d:7f:90:a0:88:c0:9b:9c:6a:78:94:ab: 3f:86:ea:52:5b:11:9d:e9:dd:62:6e:ea:1f:b4:0d: 54:d3:9b:be:7f:29:bb:13:de:33:3c:5b:a3:4c:5a: 13:fb:14:b5:8b:cc:d3:0f:8f:2c:e1:56:cd:a0:d9: 01:f7:8d:2f:eb:1a:ec:f0:63:06:ee:3d:87:2a:2a: b6:cd:0e:a7:6d:09:1e:78:0b:34:40:64:c4:68:c9: ee:a5:a8:4d:4c:21:10:3f:6c:84:89:dd:f6:66:f0: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6D:8E:66:87:7E:9B:A3:25:AA:20:4F:BD:FB:AF:5F:DE:C1:78:3D X509v3 Authority Key Identifier: keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:d1:4e:5a:66:23:76:cc:54:0e:01:fa:4b:1f:af:30:8a: 16:e2:29:da:5f:1f:ef:67:0b:d4:14:86:7e:02:ce:77:62:ae: 54:e2:ad:bc:0f:b1:a7:61:9e:8f:db:54:7a:89:aa:74:39:7e: b0:44:96:8f:2d:b2:d8:12:5b:84:94:48:fd:6e:e6:88:fb:37: 65:08:6e:16:62:79:f7:b4:85:58:67:6a:11:f3:56:67:e2:c2: 0f:63:52:94:b0:78:ab:43:f7:3f:13:09:67:22:05:4d:c2:b1: a2:18:22:f6:f3:6b:00:47:ec:5c:5a:f9:79:d4:34:2c:11:1f: da:df:6b:14:ca:72:c6:c9:ed:b1:be:06:b1:6d:8c:45:e7:2f: a2:d5:74:c4:a6:90:b5:0a:42:7f:f2:66:38:5f:b3:ae:f2:bf: 65:cc:7f:8d:2d:b6:ef:74:c3:0e:5c:d0:70:3e:de:3b:3e:3b: cd:63:2e:a5:5e:bc:20:3c:6a:72:74:74:f3:a7:bc:3c:3d:f0: 21:39:10:d3:27:36:04:65:4d:89:ce:78:eb:2c:f4:7b:6d:4d: 75:8c:9e:b6:f9:67:d7:58:80:1e:8d:a9:6f:e4:6b:24:ab:c7: e5:5f:59:84:93:02:87:2a:99:82:bd:ce:52:a8:8d:c8:d9:60: 6d:0b:f5:d2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGny7wEEpO5zeWQ/yaMoJdfCZbAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5 QzJBMEVFRTAeFw0yNTEyMTcwMDAyNTFaFw0yNTEyMTgwMjM1NTFaMDMxMTAvBgNV BAMTKDlDNkQ4RTY2ODc3RTlCQTMyNUFBMjA0RkJERkJBRjVGREVDMTc4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpnxf8JlBifkP6iL9uCj+2cS8 nfKVZmdK0dPOua6oqssFIfWgJFsoQLNsKmHq295hlsV09whTq1KcIosbe8c5EMiI vze81/oNK4CBtw1s7tE7Z4d7SyBfEFtacvt/a0S72lqcyVxqlfouBJkU8wYkcV6D wVW01MNZ5360uIb9VnCwMl1P0ct+A+cIXpKkvRE/qsYx7c6iYo1/kKCIwJucaniU qz+G6lJbEZ3p3WJu6h+0DVTTm75/KbsT3jM8W6NMWhP7FLWLzNMPjyzhVs2g2QH3 jS/rGuzwYwbuPYcqKrbNDqdtCR54CzRAZMRoye6lqE1MIRA/bISJ3fZm8BHbAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUnG2OZod+m6MlqiBPvfuvX97BeD0wHwYDVR0j BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQV0U5aZiN2zFQOAfpLH68wihbiKdpfH+9nC9QUhn4CzndirlTirbwP sadhno/bVHqJqnQ5frBElo8tstgSW4SUSP1u5oj7N2UIbhZiefe0hVhnahHzVmfi wg9jUpSweKtD9z8TCWciBU3CsaIYIvbzawBH7Fxa+XnUNCwRH9rfaxTKcsbJ7bG+ BrFtjEXnL6LVdMSmkLUKQn/yZjhfs67yv2XMf40ttu90ww5c0HA+3js+O81jLqVe vCA8anJ0dPOnvDw98CE5ENMnNgRlTYnOeOss9HttTXWMnrb5Z9dYgB6NqW/kaySr x+VfWYSTAocqmYK9zlKojcjZYG0L9dI= -----END CERTIFICATE-----Generated at Wed Dec 17 03:44:03 2025 by rpki-client