This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          OQRh/Gqzlh+F9LnW+iO0bbfFktsZxM2xH7GXU7qExH4=
Subject key identifier:   B9:50:B7:99:C1:EC:9D:1A:B8:0D:FC:2B:0A:49:5E:7E:2E:00:22:D2
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       4C09C67CE008F93FBCA79BE7DE6289801B3739D2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          0110
Signing time:             Sat 24 Jan 2026 13:53:59 +0000
Manifest this update:     Sat 24 Jan 2026 13:48:59 +0000
Manifest next update:     Sun 25 Jan 2026 16:02:59 +0000
Files and hashes:         1: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=)
                          2: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=)
                          3: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=)
                          4: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=)
                          5: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=)
                          6: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=)
                          7: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=)
                          8: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=)
                          9: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=)
                          10: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=)
                          11: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=)
                          12: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=)
                          13: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=)
                          14: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=)
                          15: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=)
                          16: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=)
                          17: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=)
                          18: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: rOTqlWQVtVXwz6ANs4a0LoIa7c6APGPS8Cjmib6EScY=)
                          19: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:09:c6:7c:e0:08:f9:3f:bc:a7:9b:e7:de:62:89:80:1b:37:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jan 24 13:48:59 2026 GMT
            Not After : Jan 25 16:02:59 2026 GMT
        Subject: CN=B950B799C1EC9D1AB80DFC2B0A495E7E2E0022D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:43:a8:60:0d:2d:65:f6:68:c7:12:f2:93:
                    03:8e:37:e9:68:c4:cd:d5:ae:a1:c0:20:e8:dd:59:
                    1a:02:98:38:47:97:c1:23:b1:02:a8:0a:a7:7d:a8:
                    d7:b3:e9:fc:b6:7f:24:1d:d6:ab:07:70:b3:9c:79:
                    86:6d:e6:93:f1:91:7b:12:c4:2e:74:f1:d8:c0:90:
                    26:47:46:4e:ec:3d:2f:09:ca:c3:e4:d7:0a:31:48:
                    d8:a5:a0:8a:6e:72:a3:ec:e7:b2:8f:8c:6a:c1:2b:
                    73:77:86:19:da:03:38:a6:0e:cc:fd:b1:ac:4a:b0:
                    c3:bd:17:84:fa:3f:4c:dd:69:f1:68:d4:70:09:14:
                    7e:3e:56:4d:e9:8d:1b:ef:77:d8:cd:90:6b:c3:a0:
                    c0:dd:07:f4:24:fb:1b:aa:b2:b6:1d:53:f6:7a:5a:
                    49:b0:75:6c:62:68:9e:8f:b8:71:ad:dd:92:14:ee:
                    7a:c3:d3:49:15:eb:1b:37:3d:72:1e:c1:39:91:9d:
                    d7:73:53:e6:12:f2:3f:33:e7:bd:40:ae:69:36:96:
                    90:97:b4:6f:d9:12:16:88:a8:06:e0:49:e1:0b:7e:
                    9e:40:a0:c7:48:7b:b7:8a:c8:a5:3b:73:8a:94:83:
                    9c:1d:41:78:97:8a:7d:0e:05:31:7e:c7:1d:47:98:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:B7:99:C1:EC:9D:1A:B8:0D:FC:2B:0A:49:5E:7E:2E:00:22:D2
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:69:57:47:b7:d3:58:36:cf:2d:31:ea:fb:23:f3:e5:a8:
         7e:47:83:1e:28:5e:4f:24:94:77:5c:76:b2:5c:fa:12:db:88:
         f1:02:0d:83:36:2b:b9:a3:0d:62:19:ca:e8:dc:93:1f:ec:4f:
         a7:c9:76:b5:71:06:27:58:4a:2c:8a:fb:94:1e:75:da:4c:a4:
         5b:a8:b4:bd:7b:ab:9e:38:13:22:45:32:b9:84:94:be:82:53:
         58:c7:f5:e4:4b:24:e4:73:cb:3d:47:fd:91:06:90:e9:1b:39:
         01:e0:60:d8:73:33:02:0a:53:ea:32:17:b5:94:ac:94:a3:cd:
         59:ff:bc:be:63:66:c4:9b:a7:10:fd:71:01:79:03:65:b0:0d:
         90:9a:54:7d:8d:00:12:a6:b8:b0:ae:cb:02:dd:c7:80:1e:57:
         28:ce:80:e8:b2:b2:b4:fb:98:ae:70:be:7e:d1:ae:9e:6a:d5:
         84:9d:ce:c1:19:5d:6c:61:87:0d:f6:bd:b2:c2:04:d1:90:83:
         de:2a:5f:55:28:1c:f5:f4:48:06:4a:16:0f:c0:91:c7:7f:11:
         01:17:02:10:a7:05:44:05:9f:0b:46:94:8b:16:73:33:f1:fc:
         fe:1e:07:a2:45:ea:5f:63:91:f5:87:3a:dd:44:cf:63:11:18:
         9c:7e:96:2e
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUTAnGfOAI+T+8p5vn3mKJgBs3OdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3
MTdDOTNDQzAeFw0yNjAxMjQxMzQ4NTlaFw0yNjAxMjUxNjAyNTlaMDMxMTAvBgNV
BAMTKEI5NTBCNzk5QzFFQzlEMUFCODBERkMyQjBBNDk1RTdFMkUwMDIyRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxFkOoYA0tZfZoxxLykwOON+lo
xM3VrqHAIOjdWRoCmDhHl8EjsQKoCqd9qNez6fy2fyQd1qsHcLOceYZt5pPxkXsS
xC508djAkCZHRk7sPS8JysPk1woxSNiloIpucqPs57KPjGrBK3N3hhnaAzimDsz9
saxKsMO9F4T6P0zdafFo1HAJFH4+Vk3pjRvvd9jNkGvDoMDdB/Qk+xuqsrYdU/Z6
WkmwdWxiaJ6PuHGt3ZIU7nrD00kV6xs3PXIewTmRnddzU+YS8j8z571Armk2lpCX
tG/ZEhaIqAbgSeELfp5AoMdIe7eKyKU7c4qUg5wdQXiXin0OBTF+xx1HmGXJAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUuVC3mcHsnRq4DfwrCklefi4AItIwHwYDVR0j
BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1
RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4N2Yy
LzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF9waVdHt9NYNs8tMer7I/PlqH5Hgx4oXk8klHdcdrJc+hLbiPECDYM2
K7mjDWIZyujckx/sT6fJdrVxBidYSiyK+5QeddpMpFuotL17q544EyJFMrmElL6C
U1jH9eRLJORzyz1H/ZEGkOkbOQHgYNhzMwIKU+oyF7WUrJSjzVn/vL5jZsSbpxD9
cQF5A2WwDZCaVH2NABKmuLCuywLdx4AeVyjOgOiysrT7mK5wvn7Rrp5q1YSdzsEZ
XWxhhw32vbLCBNGQg94qX1UoHPX0SAZKFg/Akcd/EQEXAhCnBUQFnwtGlIsWczPx
/P4eB6JF6l9jkfWHOt1Ez2MRGJx+li4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:43 2026 by rpki-client