This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json) Hash identifier: fBc7jNWtjX3GbUBIRLJ7QfJyaQDZug0yR+jJ1zj9AOI= Subject key identifier: D5:0A:26:EF:0C:A5:0A:E5:A5:31:1E:3E:1A:A8:04:D3:07:6E:3C:24 Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Certificate serial: D4B35211A54E9EBC44F09EB32EE2CEE669AC83 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft Manifest number: 1C Signing time: Sat 10 Jan 2026 23:05:39 +0000 Manifest this update: Sat 10 Jan 2026 23:00:39 +0000 Manifest next update: Sun 11 Jan 2026 23:33:39 +0000 Files and hashes: 1: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=) 2: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=) 3: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=) 4: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=) 5: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=) 6: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: B8gkML0Lq2EdyOoYTQAhOoZinwd/2BICVrUdcGb5qf4=) 7: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 14:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d4:b3:52:11:a5:4e:9e:bc:44:f0:9e:b3:2e:e2:ce:e6:69:ac:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Validity Not Before: Jan 10 23:00:39 2026 GMT Not After : Jan 11 23:33:39 2026 GMT Subject: CN=D50A26EF0CA50AE5A5311E3E1AA804D3076E3C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:e3:ea:de:c2:2b:c7:de:d9:37:ae:eb:c9: ea:7a:a7:03:ff:26:7b:de:b3:5d:80:8e:5f:c6:16: 78:12:75:cb:41:1a:da:31:42:ef:c4:31:c4:74:96: 12:09:bf:e8:9b:4c:de:06:6c:38:0b:e3:73:be:ad: 71:b8:a7:a3:a6:66:30:f6:c0:e6:f8:d6:4c:92:08: e9:c8:0b:e6:68:b6:54:1b:18:24:35:ad:4a:a3:5f: 44:5d:39:6e:50:31:6f:ce:c4:2d:f7:89:ce:8e:1c: 3a:ba:b6:44:b2:2a:85:9a:8a:2c:a2:14:6d:22:a4: 4c:95:65:d9:d4:e4:8a:33:bf:3a:d3:10:09:e5:92: 18:ab:3d:28:49:a9:19:68:bd:da:6f:58:dd:4b:c6: 47:35:de:eb:b9:86:b1:47:d8:78:85:c6:b1:ca:b4: 1d:8a:ef:95:6e:86:1b:c8:aa:33:00:6d:f8:b2:d4: 9b:81:58:b3:c8:a3:f3:a4:39:29:2d:27:1c:77:8a: 9e:06:6c:c6:8e:37:91:8d:f0:b9:60:1a:96:09:04: c1:85:8a:ae:87:48:7b:c2:08:af:f9:6d:dc:02:fc: 13:f1:0f:b8:ea:79:85:04:1f:24:42:53:85:3a:60: 42:4e:52:3f:87:19:eb:a0:31:23:ca:4d:88:77:2b: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0A:26:EF:0C:A5:0A:E5:A5:31:1E:3E:1A:A8:04:D3:07:6E:3C:24 X509v3 Authority Key Identifier: keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7e:20:cb:6b:81:3a:86:d3:1c:06:7a:c3:e5:68:fd:f3:4c: 20:dd:c2:1b:f9:af:bd:00:0f:95:74:21:e0:3c:10:99:d9:74: d7:ac:ee:c9:93:17:37:26:f2:90:45:a2:94:42:7d:4c:62:61: 12:2d:26:c1:69:71:0d:ec:e7:b1:29:a1:43:86:a2:16:47:f1: 1d:be:e2:32:a7:a3:09:e2:de:29:3f:82:77:00:d4:9b:14:92: a9:bc:7b:1d:4d:18:ac:0d:4c:fd:1b:28:a0:46:43:e7:10:32: ad:df:e8:8e:6b:08:12:c1:8a:0d:0f:4b:d4:f1:60:65:30:5a: c3:92:fa:73:cf:8a:da:33:f8:10:e7:5d:fb:ba:e5:f0:f4:9f: 64:e5:14:14:22:b1:dd:85:8a:47:ad:74:ce:e6:4b:55:34:b3: 71:bb:3f:d3:80:85:66:e2:c7:c9:07:6b:b7:61:17:34:f6:19: 3d:03:66:53:f1:6e:21:d9:bc:c0:6e:d6:5b:d4:5b:75:c5:e4: df:26:63:dd:87:75:ea:2d:ee:31:78:64:09:79:39:b5:d3:2e: 46:e5:68:d8:f3:6d:5a:1f:7d:8b:c2:b4:da:83:45:79:eb:b0: b8:16:67:1d:eb:cd:55:cc:bf:c1:e0:01:fd:60:63:14:3e:a8: 08:c7:e6:ca -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUANSzUhGlTp68RPCesy7izuZprIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3 NkJCMDI3NzAeFw0yNjAxMTAyMzAwMzlaFw0yNjAxMTEyMzMzMzlaMDMxMTAvBgNV BAMTKEQ1MEEyNkVGMENBNTBBRTVBNTMxMUUzRTFBQTgwNEQzMDc2RTNDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyOPq3sIrx97ZN67ryep6pwP/ Jnves12Ajl/GFngSdctBGtoxQu/EMcR0lhIJv+ibTN4GbDgL43O+rXG4p6OmZjD2 wOb41kySCOnIC+ZotlQbGCQ1rUqjX0RdOW5QMW/OxC33ic6OHDq6tkSyKoWaiiyi FG0ipEyVZdnU5IozvzrTEAnlkhirPShJqRlovdpvWN1Lxkc13uu5hrFH2HiFxrHK tB2K75VuhhvIqjMAbfiy1JuBWLPIo/OkOSktJxx3ip4GbMaON5GN8LlgGpYJBMGF iq6HSHvCCK/5bdwC/BPxD7jqeYUEHyRCU4U6YEJOUj+HGeugMSPKTYh3KxLDAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU1Qom7wylCuWlMR4+GqgE0wduPCQwHwYDVR0j BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZ+IMtrgTqG0xwGesPlaP3zTCDdwhv5r70AD5V0IeA8EJnZdNes7smT Fzcm8pBFopRCfUxiYRItJsFpcQ3s57EpoUOGohZH8R2+4jKnowni3ik/gncA1JsU kqm8ex1NGKwNTP0bKKBGQ+cQMq3f6I5rCBLBig0PS9TxYGUwWsOS+nPPitoz+BDn Xfu65fD0n2TlFBQisd2FiketdM7mS1U0s3G7P9OAhWbix8kHa7dhFzT2GT0DZlPx biHZvMBu1lvUW3XF5N8mY92Hdeot7jF4ZAl5ObXTLkblaNjzbVoffYvCtNqDRXnr sLgWZx3rzVXMv8HgAf1gYxQ+qAjH5so= -----END CERTIFICATE-----Generated at Sun Jan 11 04:36:17 2026 by rpki-client