This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft File: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json) Hash identifier: 1G+lgaU1VmqkGSxHvBGqyNhGJi0ZDHt5hyrycupktkM= Subject key identifier: 3C:88:71:D8:FC:A8:E2:ED:60:A6:FF:6F:67:D8:22:09:22:C2:1B:7B Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 30B72FDFDC5EE16915EB7DB806FAADD0C99F72C7 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft Manifest number: CE Signing time: Fri 05 Dec 2025 18:11:06 +0000 Manifest this update: Fri 05 Dec 2025 18:06:06 +0000 Manifest next update: Sat 06 Dec 2025 18:56:06 +0000 Files and hashes: 1: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=) 2: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=) 3: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: eqs/gr+3mUH7OdJ9zJEtKOQ2+GrI90+a4j4jIojoyh8=) 4: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=) 5: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=) 6: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=) 7: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=) 8: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=) 9: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=) 10: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=) 11: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=) 12: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=) 13: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=) 14: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=) 15: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=) 16: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=) 17: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=) 18: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=) 19: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 18:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b7:2f:df:dc:5e:e1:69:15:eb:7d:b8:06:fa:ad:d0:c9:9f:72:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Dec 5 18:06:06 2025 GMT Not After : Dec 6 18:56:06 2025 GMT Subject: CN=3C8871D8FCA8E2ED60A6FF6F67D8220922C21B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:52:17:27:bb:26:59:94:3f:36:61:f5:20: 42:ce:73:e1:f0:49:03:5a:6f:e2:a2:93:0c:7d:af: a2:20:54:98:5c:02:7d:7d:10:3f:6e:24:d2:e1:13: 84:ba:88:d7:93:9a:c9:60:40:f1:4f:64:87:37:9a: 51:cb:4e:41:d1:f2:b5:78:b5:87:01:6a:74:b9:c7: 3f:8b:2b:82:b2:19:08:02:fd:e8:88:87:4a:a4:95: 20:fd:b1:42:ec:85:66:61:cf:95:da:c9:d3:a8:13: bb:e2:66:f4:3f:2d:57:4e:dd:09:88:2c:03:1e:d6: 10:7b:f6:fc:28:07:db:4c:82:38:88:a4:52:06:08: 68:8a:38:09:97:75:5f:d8:5b:9b:02:05:72:78:50: f1:9c:ff:c1:05:eb:97:fd:a5:b5:c6:10:2f:00:5d: b0:af:cd:da:48:d6:34:f5:c0:b9:7a:5c:49:88:ab: 2c:7f:14:fe:76:62:78:f9:e9:9f:72:01:1b:6a:b8: 6a:4b:d8:7f:62:01:60:8c:7e:fa:40:dd:90:ea:02: 80:af:c6:73:84:57:06:54:93:4b:9b:11:dd:94:6c: ea:c6:9a:4b:d4:29:5f:d1:d9:1f:66:b3:5c:fd:fc: a8:0a:cf:fd:26:53:c9:14:d3:d5:c5:fd:63:02:24: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:88:71:D8:FC:A8:E2:ED:60:A6:FF:6F:67:D8:22:09:22:C2:1B:7B X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8e:33:ba:07:0c:bf:e8:81:af:b9:32:bc:04:05:07:ab:be: 9d:d1:51:e5:be:4e:49:4d:c3:0a:c8:9e:0e:65:49:89:2d:f4: fc:9f:8c:ef:54:95:ff:92:de:dd:fd:23:37:a1:bf:9f:11:28: 20:a6:0a:6c:aa:a8:5a:84:84:fd:3f:c1:bc:92:5c:fb:78:13: 29:cb:8e:fc:da:08:83:13:d9:29:1f:52:5b:d3:99:7c:90:d2: dd:13:36:5f:a9:c8:09:52:aa:82:e6:7e:58:0c:e3:0a:32:63: 81:9a:13:8b:01:a5:77:9d:3a:03:4e:81:0f:7b:51:62:75:d4: 3f:05:29:d7:9f:3e:b0:eb:b5:0f:a9:fe:19:56:3b:0c:ae:9a: a6:e2:f4:f5:42:d2:dd:eb:43:0f:51:74:e3:ea:2e:96:fd:67: 91:77:07:db:2e:2a:38:e0:53:16:a3:90:8d:54:c1:41:48:88: cb:a0:82:7b:c0:a2:62:d1:3e:56:b6:e9:a1:06:e1:30:63:bc: f7:9d:90:54:28:45:01:e8:d1:9b:17:be:0c:ec:36:01:9e:cc: 1d:ef:8a:62:5e:4f:7f:46:9e:88:dc:7e:21:60:3f:f4:ab:96: 23:80:14:d1:bf:00:66:41:e0:2a:59:c1:15:d7:22:a4:bb:e5: 4f:39:f7:48 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUMLcv39xe4WkV6324Bvqt0MmfcscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTEyMDUxODA2MDZaFw0yNTEyMDYxODU2MDZaMDMxMTAvBgNV BAMTKDNDODg3MUQ4RkNBOEUyRUQ2MEE2RkY2RjY3RDgyMjA5MjJDMjFCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1lIXJ7smWZQ/NmH1IELOc+Hw SQNab+Kikwx9r6IgVJhcAn19ED9uJNLhE4S6iNeTmslgQPFPZIc3mlHLTkHR8rV4 tYcBanS5xz+LK4KyGQgC/eiIh0qklSD9sULshWZhz5XaydOoE7viZvQ/LVdO3QmI LAMe1hB79vwoB9tMgjiIpFIGCGiKOAmXdV/YW5sCBXJ4UPGc/8EF65f9pbXGEC8A XbCvzdpI1jT1wLl6XEmIqyx/FP52Ynj56Z9yARtquGpL2H9iAWCMfvpA3ZDqAoCv xnOEVwZUk0ubEd2UbOrGmkvUKV/R2R9ms1z9/KgKz/0mU8kU09XF/WMCJDQdAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUPIhx2Pyo4u1gpv9vZ9giCSLCG3swHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4N2Yy LzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2OM7oHDL/oga+5MrwEBQervp3RUeW+TklNwwrIng5lSYkt9PyfjO9U lf+S3t39Izehv58RKCCmCmyqqFqEhP0/wbySXPt4EynLjvzaCIMT2SkfUlvTmXyQ 0t0TNl+pyAlSqoLmflgM4woyY4GaE4sBpXedOgNOgQ97UWJ11D8FKdefPrDrtQ+p /hlWOwyumqbi9PVC0t3rQw9RdOPqLpb9Z5F3B9suKjjgUxajkI1UwUFIiMuggnvA omLRPla26aEG4TBjvPedkFQoRQHo0ZsXvgzsNgGezB3vimJeT39GnojcfiFgP/Sr liOAFNG/AGZB4CpZwRXXIqS75U8590g= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:56 2025 by rpki-client