This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft File: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json) Hash identifier: jy6xX0WafhaPh3vZWXip7pTgmlehTG6NojZ/4JY4p1Y= Subject key identifier: B3:D1:C5:EE:0A:17:92:EC:69:94:13:48:5C:2F:00:D3:EA:16:3D:8E Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 2E64DCF1510A247B5DF3D0C73DE329F94E581369 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft Manifest number: E1 Signing time: Sat 20 Dec 2025 05:25:00 +0000 Manifest this update: Sat 20 Dec 2025 05:20:00 +0000 Manifest next update: Sun 21 Dec 2025 08:11:00 +0000 Files and hashes: 1: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=) 2: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=) 3: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=) 4: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=) 5: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=) 6: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=) 7: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=) 8: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=) 9: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=) 10: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=) 11: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=) 12: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=) 13: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=) 14: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=) 15: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=) 16: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=) 17: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: 864E5pAgJ8zfQEL/PC2ocZCu4Ol967h/v7yd34rg2y8=) 18: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=) 19: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:64:dc:f1:51:0a:24:7b:5d:f3:d0:c7:3d:e3:29:f9:4e:58:13:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Dec 20 05:20:00 2025 GMT Not After : Dec 21 08:11:00 2025 GMT Subject: CN=B3D1C5EE0A1792EC699413485C2F00D3EA163D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:e7:8c:d0:b6:16:1e:1f:9f:16:51:5c:10: e8:33:16:7b:c3:66:90:c5:b5:15:db:c8:a2:83:0b: 5a:f5:7d:b9:4f:48:4d:ad:59:9a:c9:b8:00:ec:ac: f1:74:f9:f5:84:84:9c:2b:20:70:0f:bc:c3:22:cc: c4:09:c4:39:ef:e2:99:81:dc:ed:b1:52:00:ac:91: 56:0f:90:fe:66:c5:88:97:0c:ad:e5:21:c2:46:8e: 43:32:73:2b:6f:c0:ad:d2:2c:fd:ff:93:56:d5:a7: 88:2a:ce:99:30:be:89:d8:76:2b:81:ab:76:9f:9c: 76:cb:41:a2:0e:2c:3d:2d:32:32:e4:b3:16:e7:2e: bb:6f:eb:f0:13:3c:42:09:fa:7e:bd:43:f8:ee:81: f4:c4:af:05:09:9d:fe:74:e0:20:df:2c:9d:47:f1: a7:9c:3c:fe:8a:ca:6e:7c:c4:3b:22:ee:36:78:10: b6:39:73:a6:be:98:61:63:27:5b:55:3e:e0:a7:2a: bb:d6:09:ec:0a:0d:1a:62:e5:50:28:ad:83:a2:79: 5a:98:7e:7d:2a:5a:ed:df:9a:77:b8:b5:43:3b:f7: 65:34:53:07:f8:82:78:13:d2:99:46:72:b0:78:0c: f5:32:32:98:e0:1c:45:b2:95:b9:b7:71:1e:73:94: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:C5:EE:0A:17:92:EC:69:94:13:48:5C:2F:00:D3:EA:16:3D:8E X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:a0:cb:eb:7f:f3:26:76:e8:8b:28:d6:6d:f8:2b:2c:62: 3e:a4:a6:de:b1:03:c6:5e:a1:11:56:aa:b8:dc:46:33:97:05: 59:d2:59:a0:09:6a:42:56:ae:78:e1:59:fd:8b:d3:66:b1:45: 21:29:a6:7e:66:6a:89:e1:e0:37:25:2e:06:e5:69:ad:56:38: ff:bd:28:a0:6f:5f:3c:5b:ef:4e:6d:07:37:9a:a0:9d:fe:85: 21:a5:3d:28:cd:eb:36:36:82:37:4e:2c:31:55:3a:f1:44:56: d4:bc:64:a9:8d:fd:25:5f:0d:4d:b2:db:85:d2:45:0e:4a:73: 2f:f5:05:3b:61:d0:ae:2c:f1:66:36:2e:fd:74:cf:d3:5b:15: 06:3f:7d:b7:33:61:6e:3b:47:a5:95:44:8b:cb:ea:cc:f9:53: 9b:96:c0:e4:ea:bb:2d:d7:df:5c:21:9c:cf:fd:72:44:22:6c: 12:57:1c:53:d6:7a:64:47:6a:f1:b4:b4:af:68:81:a2:00:bc: 5b:52:30:2b:90:29:d5:9c:d0:08:d2:5e:30:84:30:16:07:88: d8:aa:23:fa:1f:93:63:d9:67:28:7a:cb:3f:6d:56:6d:92:c7: 7e:cc:49:ec:1e:14:43:16:4d:34:b7:04:3c:83:d8:6d:7a:3b: 47:63:9f:fc -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIULmTc8VEKJHtd89DHPeMp+U5YE2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTEyMjAwNTIwMDBaFw0yNTEyMjEwODExMDBaMDMxMTAvBgNV BAMTKEIzRDFDNUVFMEExNzkyRUM2OTk0MTM0ODVDMkYwMEQzRUExNjNEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5eeM0LYWHh+fFlFcEOgzFnvD ZpDFtRXbyKKDC1r1fblPSE2tWZrJuADsrPF0+fWEhJwrIHAPvMMizMQJxDnv4pmB 3O2xUgCskVYPkP5mxYiXDK3lIcJGjkMycytvwK3SLP3/k1bVp4gqzpkwvonYdiuB q3afnHbLQaIOLD0tMjLksxbnLrtv6/ATPEIJ+n69Q/jugfTErwUJnf504CDfLJ1H 8aecPP6Kym58xDsi7jZ4ELY5c6a+mGFjJ1tVPuCnKrvWCewKDRpi5VAorYOieVqY fn0qWu3fmne4tUM792U0Uwf4gngT0plGcrB4DPUyMpjgHEWylbm3cR5zlBZlAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUs9HF7goXkuxplBNIXC8A0+oWPY4wHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4N2Yy LzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEynoMvrf/MmduiLKNZt+CssYj6kpt6xA8ZeoRFWqrjcRjOXBVnSWaAJ akJWrnjhWf2L02axRSEppn5maonh4DclLgblaa1WOP+9KKBvXzxb705tBzeaoJ3+ hSGlPSjN6zY2gjdOLDFVOvFEVtS8ZKmN/SVfDU2y24XSRQ5Kcy/1BTth0K4s8WY2 Lv10z9NbFQY/fbczYW47R6WVRIvL6sz5U5uWwOTquy3X31whnM/9ckQibBJXHFPW emRHavG0tK9ogaIAvFtSMCuQKdWc0AjSXjCEMBYHiNiqI/ofk2PZZyh6yz9tVm2S x37MSeweFEMWTTS3BDyD2G16O0djn/w= -----END CERTIFICATE-----Generated at Sat Dec 20 22:55:15 2025 by rpki-client