This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File:                     B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier:          TgeedhXv2bjdTCbM9KvnuGgnhF85gjkXxTOgaLE0ZUE=
Subject key identifier:   BB:93:63:3A:BB:BE:A5:95:12:44:5D:DA:A0:7A:75:E6:77:D8:5E:E4
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer:       /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial:       1B04A5C3B47E8CFCEF496A20227EEBAAE8A6DED1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number:          0114
Signing time:             Sat 24 Jan 2026 22:40:39 +0000
Manifest this update:     Sat 24 Jan 2026 22:35:39 +0000
Manifest next update:     Mon 26 Jan 2026 02:34:39 +0000
Files and hashes:         1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=)
                          2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: K3qqfslcYfffoJZNIIcYsWjSRBW4mydrwhL9x39f09U=)
                          3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:04:a5:c3:b4:7e:8c:fc:ef:49:6a:20:22:7e:eb:aa:e8:a6:de:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Validity
            Not Before: Jan 24 22:35:39 2026 GMT
            Not After : Jan 26 02:34:39 2026 GMT
        Subject: CN=BB93633ABBBEA59512445DDAA07A75E677D85EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:1e:14:1c:56:56:96:be:8c:55:c5:a5:25:
                    45:ce:75:eb:26:bb:bf:50:d9:80:0d:1b:b8:59:4a:
                    38:78:6b:7d:08:bb:60:93:08:01:2c:a2:af:99:3a:
                    ed:de:8d:a7:a3:75:41:c4:04:3c:41:84:c2:78:33:
                    ba:9b:8e:04:c4:f3:24:ba:c4:d2:98:e5:84:70:dd:
                    99:59:93:53:20:71:e4:bd:fe:be:82:3f:d4:25:4a:
                    e8:19:0f:a1:92:e9:6a:6c:4f:0d:69:0f:63:c0:00:
                    13:5a:6c:44:e6:95:a9:e1:24:e3:6e:67:f8:0c:55:
                    0d:2d:7f:88:d1:02:75:8b:fb:c3:b8:83:cd:e5:ef:
                    ed:59:6c:20:13:c0:09:bf:a8:46:c8:89:4b:08:56:
                    63:bc:bb:e8:a4:41:45:0f:80:b4:06:75:38:f1:58:
                    0b:d5:b8:93:3e:55:4c:47:d2:dd:34:74:31:21:a3:
                    10:02:8e:cf:5d:91:1f:66:dc:25:29:b8:4b:3c:e8:
                    08:69:e2:e5:c6:cc:cb:3e:80:6d:4b:3b:ee:b4:40:
                    a0:7b:d6:cd:2a:c5:5e:c1:ff:88:5a:4c:13:43:5c:
                    f8:f4:70:c2:da:2f:5d:3e:d0:41:05:c3:09:cd:b7:
                    0c:fb:86:47:42:02:ed:e0:ea:7e:45:ba:10:7d:5a:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:63:3A:BB:BE:A5:95:12:44:5D:DA:A0:7A:75:E6:77:D8:5E:E4
            X509v3 Authority Key Identifier:
                keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:ac:b2:5b:5a:26:72:f6:04:9f:83:35:b9:db:03:b4:53:
         4d:27:8e:02:ac:ab:a4:6d:c8:95:dd:70:fc:3d:e8:d1:b6:d4:
         8a:46:6b:19:b8:66:ed:ca:69:e8:01:6e:4c:33:af:ba:d2:fe:
         7c:5d:52:56:88:2c:7e:4d:38:7b:84:4f:99:bb:0b:b1:c0:cd:
         17:88:24:a1:a7:b9:40:9e:c0:e9:f3:d8:7f:2b:ce:9e:c1:0b:
         24:9f:c4:75:22:f1:a9:d5:22:25:74:10:45:7a:51:15:e9:56:
         f6:52:c6:6e:de:e2:9f:fe:80:1c:23:c8:68:c0:04:d9:a1:f1:
         88:a1:96:5b:25:92:21:b4:d4:61:a6:0a:d2:3e:4e:17:7f:4a:
         30:68:67:84:40:34:2a:2c:df:cc:0c:49:26:10:16:63:e8:5f:
         31:ec:ed:a7:34:b0:8a:01:5c:09:60:d4:cc:76:22:fb:d7:15:
         7a:8e:23:48:9e:06:fd:32:52:77:0d:bc:56:bb:bf:af:be:77:
         0e:9b:25:94:2c:e3:71:0e:02:80:11:19:98:2e:70:09:67:40:
         31:46:89:40:55:86:ac:df:34:c6:dc:56:c7:54:d0:6a:36:77:
         2b:65:96:b7:f1:c3:15:eb:3b:46:bc:ed:24:d4:ff:b5:cd:d0:
         a7:33:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:09 2026 by rpki-client