This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File:                     B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier:          lcgkxAIZKhSf54kl2lLRq30WDbGgDJnI6ugeE8EyUkA=
Subject key identifier:   03:92:21:61:E2:75:4D:D9:82:2D:4B:F0:D2:18:4F:80:CD:6B:6A:43
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer:       /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial:       6BA33AF0441C6EF6BED433D8DBEA1D24264D1C11
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number:          0101
Signing time:             Sat 10 Jan 2026 13:20:37 +0000
Manifest this update:     Sat 10 Jan 2026 13:15:37 +0000
Manifest next update:     Sun 11 Jan 2026 13:58:37 +0000
Files and hashes:         1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=)
                          2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: ZJydbQEEpmj8kfGTPd3GSpB1s2w0M9kr7636p+NGyu0=)
                          3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 13:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:3a:f0:44:1c:6e:f6:be:d4:33:d8:db:ea:1d:24:26:4d:1c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Validity
            Not Before: Jan 10 13:15:37 2026 GMT
            Not After : Jan 11 13:58:37 2026 GMT
        Subject: CN=03922161E2754DD9822D4BF0D2184F80CD6B6A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:4a:93:d5:0f:9e:8e:a3:0d:ae:00:3e:44:
                    72:b3:ca:22:17:07:f2:ce:46:13:50:df:69:c2:85:
                    22:ed:ef:90:78:80:38:db:3e:6a:d3:1e:58:6c:ce:
                    20:2a:f3:7a:f7:ea:3e:01:ee:d6:33:04:a1:77:f3:
                    f3:aa:c6:ef:0b:9a:35:cc:b3:1b:1e:e4:30:2d:41:
                    81:6f:b7:e8:f3:8e:ca:67:ba:ed:f0:2d:0c:3e:c1:
                    ce:ea:df:3a:46:63:6b:3b:f1:28:87:46:25:f3:79:
                    e9:25:0f:c6:26:cc:12:3e:10:b8:77:65:a6:28:13:
                    6b:01:d1:f2:f4:b7:05:4b:00:a7:9b:03:eb:bb:58:
                    a5:9d:d4:6d:f4:86:8a:9a:23:95:b0:8a:3b:94:bb:
                    fd:66:dd:60:21:d2:68:23:54:f0:c6:6e:1f:7e:4d:
                    12:d7:41:c8:ba:65:df:4d:45:1c:e6:98:f7:a0:a4:
                    fd:3b:eb:5d:8c:8a:8e:8d:fe:77:06:20:8b:4e:b3:
                    0d:2c:01:29:ab:e6:6c:27:c0:bd:c2:24:3b:70:6a:
                    b3:63:59:6e:4a:b4:c4:c0:cc:0c:2f:04:b5:ea:05:
                    d5:0f:d1:90:ad:c5:c2:00:e1:46:d6:22:8e:54:54:
                    74:b5:4c:1a:45:7d:8c:71:df:7c:93:2b:8d:05:e8:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:21:61:E2:75:4D:D9:82:2D:4B:F0:D2:18:4F:80:CD:6B:6A:43
            X509v3 Authority Key Identifier:
                keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:70:1d:58:10:34:8a:0b:1e:d5:38:26:3c:15:d1:94:8b:
         a5:a6:eb:7e:63:7b:17:a0:e2:f3:63:d0:10:d9:84:8b:b4:da:
         4a:cf:5d:7c:34:f5:ef:2e:6a:bf:6b:e2:73:f5:4e:a0:03:1e:
         12:4e:59:78:d9:38:34:25:ad:52:92:8d:84:ec:9b:1f:26:09:
         6b:1b:83:a9:36:31:7b:35:cb:dd:42:2a:ee:98:7c:31:51:ce:
         bb:06:79:43:dd:5b:38:78:bd:b7:80:88:13:c5:08:22:4a:9c:
         02:bf:45:28:87:27:86:85:8a:2d:2c:96:d8:54:5a:12:c5:87:
         7d:47:d4:3f:97:73:fe:94:fe:03:3e:c7:6d:09:da:8d:c2:c2:
         05:3e:80:1f:e1:a5:97:3b:10:76:fe:ee:d3:02:6d:4b:1f:ea:
         e1:d8:49:6c:96:af:3a:a3:aa:17:f7:34:a9:d7:73:ed:5c:27:
         b0:af:43:f7:2f:13:e0:20:ed:52:b5:5b:b7:1f:65:fb:4a:80:
         b2:47:4b:a6:96:c7:4b:12:92:e1:f5:73:cf:f6:f4:5f:42:40:
         7b:7b:5e:44:72:1b:bc:09:1b:a9:3c:10:32:3c:43:bb:75:9c:
         bd:bd:f1:b1:02:96:a7:7b:d9:0f:b5:70:88:be:db:57:ed:dc:
         16:07:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 04:39:07 2026 by rpki-client