This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json) Hash identifier: NpX9giAb6MLYfS/ZCd3r5fEZwd4Ll35v4/NFUV4jJLk= Subject key identifier: C5:9E:83:F6:31:32:92:5F:1D:79:D8:E7:3F:83:AA:1F:7C:D6:AA:BB Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 33B26033EC2E74CAEA2D3492F44A0C3FB4E583FE Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft Manifest number: E5 Signing time: Sat 20 Dec 2025 20:15:33 +0000 Manifest this update: Sat 20 Dec 2025 20:10:33 +0000 Manifest next update: Sun 21 Dec 2025 20:38:33 +0000 Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=) 2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=) 3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: 5yhlukxLAmTh1tX/t1NFWJGPO9ilgNKud2yWK2i04TE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b2:60:33:ec:2e:74:ca:ea:2d:34:92:f4:4a:0c:3f:b4:e5:83:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Dec 20 20:10:33 2025 GMT Not After : Dec 21 20:38:33 2025 GMT Subject: CN=C59E83F63132925F1D79D8E73F83AA1F7CD6AABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:21:fe:05:4f:c3:ad:87:79:6c:e4:53:f0: 8b:c8:7f:c6:8c:57:36:47:a1:6d:61:d7:28:09:f1: 41:b7:c6:86:e0:1c:64:a5:1f:89:b1:40:1a:d5:b1: 4c:24:50:3e:b5:44:db:ab:48:70:52:60:bc:a8:f0: 0c:1a:8f:4b:52:95:6b:eb:12:ff:d3:11:91:1a:b2: 99:3d:2e:66:06:9d:67:88:c3:7a:84:14:e8:16:ef: 6b:64:2f:15:15:53:0d:cc:cd:02:a5:9c:a4:97:54: 1e:e7:ad:95:5b:e1:40:60:0b:36:54:b4:96:21:0f: 6a:3a:6f:64:a9:6f:65:b7:f4:66:4f:7b:03:74:d8: 43:7c:da:ec:af:0a:00:1d:37:4f:4b:c8:70:06:12: a2:dc:c7:06:e5:5e:4d:75:db:6c:fb:82:61:bd:30: 75:7a:d6:ea:cd:f9:e0:fc:02:06:77:25:b1:ab:80: 73:bf:97:8f:70:03:91:ee:62:3e:44:1c:f5:8f:d7: 12:ae:5f:39:8b:1c:22:fb:73:b1:c2:4b:45:34:db: 0c:a5:c0:d2:1a:1c:03:99:60:cd:14:6d:8e:e7:de: 35:d8:ec:6d:43:ed:1a:67:25:84:27:b0:21:a9:81: 31:03:72:42:b3:92:35:b4:14:e0:7e:1e:0c:34:45: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:83:F6:31:32:92:5F:1D:79:D8:E7:3F:83:AA:1F:7C:D6:AA:BB X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fb:86:22:58:5f:5e:66:d4:4c:a1:20:dc:87:fe:ab:34:07: 74:a8:10:f2:61:5e:4c:5c:ee:2b:ba:20:7c:7d:4d:ba:9a:b8: 14:d3:f0:dc:df:40:4a:e9:e8:e0:4a:8e:80:6c:4e:04:3f:65: 25:26:06:47:5b:b0:21:ab:29:5d:27:66:46:46:fd:2c:d4:c2: f8:92:a5:24:e0:89:fd:60:ac:74:ef:18:a2:44:ff:91:ec:23: 73:ac:c9:a4:d8:17:1c:8a:03:89:99:16:4f:a0:79:31:a7:57: f1:fb:c6:6c:28:15:e0:9c:f1:77:90:51:00:27:64:7f:62:19: 9c:7f:f8:30:cd:e4:33:e6:11:2f:f5:65:bb:14:20:8c:f4:1e: 30:a9:91:4a:f0:5d:b6:c6:08:9d:6a:0f:90:4d:a5:ab:97:bd: a2:c6:d2:b2:bd:01:81:5d:a9:32:19:bf:51:c8:1a:c0:b7:cb: c4:bc:e2:7e:dd:16:82:d1:31:af:e4:ab:3e:8c:69:1e:bf:f1: ae:a8:0c:ad:b0:f6:df:f6:08:3d:f3:2f:5f:5b:6e:79:29:f5: 07:0e:dd:a5:d2:97:a5:8d:c7:b1:28:43:70:48:8a:b2:b3:a8: 42:a9:c7:ef:ab:d9:b3:e5:3d:09:c5:c3:f2:b3:fa:80:38:83: ee:1e:b5:84 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUM7JgM+wudMrqLTSS9EoMP7Tlg/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTEyMjAyMDEwMzNaFw0yNTEyMjEyMDM4MzNaMDMxMTAvBgNV BAMTKEM1OUU4M0Y2MzEzMjkyNUYxRDc5RDhFNzNGODNBQTFGN0NENkFBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfliH+BU/DrYd5bORT8IvIf8aM VzZHoW1h1ygJ8UG3xobgHGSlH4mxQBrVsUwkUD61RNurSHBSYLyo8Awaj0tSlWvr Ev/TEZEaspk9LmYGnWeIw3qEFOgW72tkLxUVUw3MzQKlnKSXVB7nrZVb4UBgCzZU tJYhD2o6b2Spb2W39GZPewN02EN82uyvCgAdN09LyHAGEqLcxwblXk1122z7gmG9 MHV61urN+eD8AgZ3JbGrgHO/l49wA5HuYj5EHPWP1xKuXzmLHCL7c7HCS0U02wyl wNIaHAOZYM0UbY7n3jXY7G1D7RpnJYQnsCGpgTEDckKzkjW0FOB+Hgw0Rb7TAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUxZ6D9jEykl8dedjnP4OqH3zWqrswHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVm LzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABb7hiJYX15m1EyhINyH/qs0B3SoEPJhXkxc7iu6IHx9TbqauBTT8Nzf QErp6OBKjoBsTgQ/ZSUmBkdbsCGrKV0nZkZG/SzUwviSpSTgif1grHTvGKJE/5Hs I3OsyaTYFxyKA4mZFk+geTGnV/H7xmwoFeCc8XeQUQAnZH9iGZx/+DDN5DPmES/1 ZbsUIIz0HjCpkUrwXbbGCJ1qD5BNpauXvaLG0rK9AYFdqTIZv1HIGsC3y8S84n7d FoLRMa/kqz6MaR6/8a6oDK2w9t/2CD3zL19bbnkp9QcO3aXSl6WNx7EoQ3BIirKz qEKpx++r2bPlPQnFw/Kz+oA4g+4etYQ= -----END CERTIFICATE-----Generated at Sat Dec 20 22:53:48 2025 by rpki-client