This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier: lcgkxAIZKhSf54kl2lLRq30WDbGgDJnI6ugeE8EyUkA=
Subject key identifier: 03:92:21:61:E2:75:4D:D9:82:2D:4B:F0:D2:18:4F:80:CD:6B:6A:43
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial: 6BA33AF0441C6EF6BED433D8DBEA1D24264D1C11
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number: 0101
Signing time: Sat 10 Jan 2026 13:20:37 +0000
Manifest this update: Sat 10 Jan 2026 13:15:37 +0000
Manifest next update: Sun 11 Jan 2026 13:58:37 +0000
Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=)
2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: ZJydbQEEpmj8kfGTPd3GSpB1s2w0M9kr7636p+NGyu0=)
3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 13:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a3:3a:f0:44:1c:6e:f6:be:d4:33:d8:db:ea:1d:24:26:4d:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Validity
Not Before: Jan 10 13:15:37 2026 GMT
Not After : Jan 11 13:58:37 2026 GMT
Subject: CN=03922161E2754DD9822D4BF0D2184F80CD6B6A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:4a:93:d5:0f:9e:8e:a3:0d:ae:00:3e:44:
72:b3:ca:22:17:07:f2:ce:46:13:50:df:69:c2:85:
22:ed:ef:90:78:80:38:db:3e:6a:d3:1e:58:6c:ce:
20:2a:f3:7a:f7:ea:3e:01:ee:d6:33:04:a1:77:f3:
f3:aa:c6:ef:0b:9a:35:cc:b3:1b:1e:e4:30:2d:41:
81:6f:b7:e8:f3:8e:ca:67:ba:ed:f0:2d:0c:3e:c1:
ce:ea:df:3a:46:63:6b:3b:f1:28:87:46:25:f3:79:
e9:25:0f:c6:26:cc:12:3e:10:b8:77:65:a6:28:13:
6b:01:d1:f2:f4:b7:05:4b:00:a7:9b:03:eb:bb:58:
a5:9d:d4:6d:f4:86:8a:9a:23:95:b0:8a:3b:94:bb:
fd:66:dd:60:21:d2:68:23:54:f0:c6:6e:1f:7e:4d:
12:d7:41:c8:ba:65:df:4d:45:1c:e6:98:f7:a0:a4:
fd:3b:eb:5d:8c:8a:8e:8d:fe:77:06:20:8b:4e:b3:
0d:2c:01:29:ab:e6:6c:27:c0:bd:c2:24:3b:70:6a:
b3:63:59:6e:4a:b4:c4:c0:cc:0c:2f:04:b5:ea:05:
d5:0f:d1:90:ad:c5:c2:00:e1:46:d6:22:8e:54:54:
74:b5:4c:1a:45:7d:8c:71:df:7c:93:2b:8d:05:e8:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:21:61:E2:75:4D:D9:82:2D:4B:F0:D2:18:4F:80:CD:6B:6A:43
X509v3 Authority Key Identifier:
keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f9:70:1d:58:10:34:8a:0b:1e:d5:38:26:3c:15:d1:94:8b:
a5:a6:eb:7e:63:7b:17:a0:e2:f3:63:d0:10:d9:84:8b:b4:da:
4a:cf:5d:7c:34:f5:ef:2e:6a:bf:6b:e2:73:f5:4e:a0:03:1e:
12:4e:59:78:d9:38:34:25:ad:52:92:8d:84:ec:9b:1f:26:09:
6b:1b:83:a9:36:31:7b:35:cb:dd:42:2a:ee:98:7c:31:51:ce:
bb:06:79:43:dd:5b:38:78:bd:b7:80:88:13:c5:08:22:4a:9c:
02:bf:45:28:87:27:86:85:8a:2d:2c:96:d8:54:5a:12:c5:87:
7d:47:d4:3f:97:73:fe:94:fe:03:3e:c7:6d:09:da:8d:c2:c2:
05:3e:80:1f:e1:a5:97:3b:10:76:fe:ee:d3:02:6d:4b:1f:ea:
e1:d8:49:6c:96:af:3a:a3:aa:17:f7:34:a9:d7:73:ed:5c:27:
b0:af:43:f7:2f:13:e0:20:ed:52:b5:5b:b7:1f:65:fb:4a:80:
b2:47:4b:a6:96:c7:4b:12:92:e1:f5:73:cf:f6:f4:5f:42:40:
7b:7b:5e:44:72:1b:bc:09:1b:a9:3c:10:32:3c:43:bb:75:9c:
bd:bd:f1:b1:02:96:a7:7b:d9:0f:b5:70:88:be:db:57:ed:dc:
16:07:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:39:07 2026 by rpki-client