This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
File: 0F728B914670434DCF5633E81E2B8721DF75CEB8.mft (raw, json)
Hash identifier: 1gM2stoMj7Hz3DqJH+DuowDUIBPDrALYpiXBlkotSZU=
Subject key identifier: C6:03:6E:2F:79:8F:4E:0B:BA:84:9F:1C:6C:EB:20:39:0D:A3:7E:A7
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial: 0D8EBD13294356973593B3E69C3E0A6D9BD1E750
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
Manifest number: E5
Signing time: Sat 20 Dec 2025 05:14:09 +0000
Manifest this update: Sat 20 Dec 2025 05:09:09 +0000
Manifest next update: Sun 21 Dec 2025 08:41:09 +0000
Files and hashes: 1: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (hash: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw=)
2: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (hash: t9hcvqhwXlPB3lKs0hXk2UPtuWy2Mwkk+JEAH74z3hU=)
3: 326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (hash: 5zkOtfMFRCYhmVW7LBhzu0cT34wr5G4zsYBbwLKUwUQ=)
4: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (hash: wQCSXfUitadFHqKjKe8NWt6UbMgOvdQ9vSj233OT9/o=)
5: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (hash: yfbaeT34FbMIGlyj0tQySNH5shIHOUf5oJ7SB3fvio4=)
6: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (hash: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=)
7: 326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (hash: MtzTkzQ35m22EvkbzZHwIxUncfZ/F5ZBQnc0K5rFcKk=)
8: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (hash: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8=)
9: 326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (hash: 6S/HZN+hofz7bGbwqskKxqv7EIALWOyIB31Jd/CmpLk=)
10: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (hash: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=)
11: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (hash: 9olAe2k5YVfRqkBWbCUyoH95HOSdUCIE1uFD0aZVTK8=)
12: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (hash: T/jZB6hJnvckE1oQM04wQ4G6elO8ybOC5fa2RX6LRvo=)
13: 0F728B914670434DCF5633E81E2B8721DF75CEB8.crl (hash: n3uDg+qLtg54t5fqEwzwpr54tpOMu8r2sPl3ayfhjTA=)
14: 326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (hash: o0c6z8BVXaf88Og/NHkXsPQxVXa5TEEzjiKJXKikl2E=)
15: 326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (hash: WTZmUkrbRvCnq1WV0/b4J3wKCnYUZUlJ7NyI7AuLwZg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8e:bd:13:29:43:56:97:35:93:b3:e6:9c:3e:0a:6d:9b:d1:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Validity
Not Before: Dec 20 05:09:09 2025 GMT
Not After : Dec 21 08:41:09 2025 GMT
Subject: CN=C6036E2F798F4E0BBA849F1C6CEB20390DA37EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:16:c6:b9:48:82:2e:6c:d1:7c:97:d7:de:
8e:0a:f4:b7:2e:ff:67:fa:88:67:ea:08:05:3e:b1:
df:d2:4f:74:98:6c:a6:64:fa:3d:44:f4:4d:97:94:
24:05:39:c1:8e:f9:d1:c1:9e:5c:a0:c6:8c:d1:04:
a6:ad:58:1b:66:37:e9:65:cb:59:c7:b9:c4:66:02:
33:cf:ef:49:ee:24:ce:da:0a:28:ab:2e:ad:d5:fd:
50:56:5b:22:76:08:94:dc:f2:fc:d4:c7:e4:15:73:
ed:cf:36:be:de:58:ec:4e:17:ea:f1:fb:13:93:ca:
04:10:b0:c2:a5:d3:da:35:d3:c1:16:5a:c5:fa:4b:
02:a0:c6:1c:7b:31:6e:78:43:f6:de:13:40:ef:dc:
27:01:a3:70:15:f1:9d:a1:80:fc:66:41:8c:bb:91:
13:e5:c6:6b:85:9a:31:82:91:b3:0a:79:d6:68:65:
de:9b:91:01:f9:a4:f6:ca:de:be:c5:59:8c:3d:37:
01:93:eb:ea:cc:b5:58:96:f9:cd:79:3e:27:28:4a:
3e:9f:62:9f:b1:b9:d3:af:42:8f:a2:7c:ac:71:1b:
e6:eb:41:e3:8f:8c:0f:66:37:75:1e:11:eb:c8:27:
7d:0f:24:c1:53:e4:2c:88:e7:36:d9:21:8e:90:f2:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:6E:2F:79:8F:4E:0B:BA:84:9F:1C:6C:EB:20:39:0D:A3:7E:A7
X509v3 Authority Key Identifier:
keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e8:6a:d2:76:d5:68:00:96:6c:1f:f5:2a:de:0e:2e:f3:8a:
83:3f:55:4c:23:25:db:b5:36:50:38:26:ec:dd:27:2a:95:1f:
11:b4:a0:15:20:4f:72:39:bb:48:98:c5:b9:6e:86:35:e1:96:
3e:ec:90:12:7f:be:1d:9d:27:59:a8:56:1d:3c:54:28:c4:58:
64:5e:05:4a:5d:0c:06:5d:7d:26:15:a2:53:72:05:7b:b3:e8:
fa:98:b7:ca:e8:b0:f8:47:29:92:c5:f6:5f:29:af:2f:01:3b:
c1:83:47:64:62:73:0a:2c:c1:68:ea:87:cc:25:ba:e6:06:84:
d8:37:f5:40:63:a4:85:a3:34:3c:71:13:83:50:56:37:83:90:
97:09:5d:f3:08:d1:0a:c2:a0:34:a9:df:1c:65:0e:96:25:a9:
f7:36:87:1e:d6:0c:4f:f0:17:42:78:03:c8:a4:87:20:f3:e9:
a9:45:09:4a:c7:cc:0f:13:68:47:7c:e8:5f:a0:b2:28:09:4c:
f1:14:1c:54:bf:7e:5b:6c:39:43:94:6a:94:2e:73:af:88:ef:
08:9a:0f:8b:25:4f:92:73:2e:6b:ac:76:80:26:fa:18:50:8d:
0e:33:cd:89:f3:53:53:41:c7:48:d7:96:4b:70:05:87:23:63:
ba:bf:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:58:13 2025 by rpki-client