This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File:                     72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier:          bCM1HM2kTSk7HoO4ivOqV104V17HCvS7y48xZ4phtyQ=
Subject key identifier:   BC:61:8C:6B:C2:72:1F:13:DD:54:67:75:C2:45:2F:E4:8A:6B:71:B7
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       5331B75298E891D78502EEA9BE01B3BF5DDAFEF2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number:          D7
Signing time:             Fri 12 Dec 2025 16:36:38 +0000
Manifest this update:     Fri 12 Dec 2025 16:31:38 +0000
Manifest next update:     Sat 13 Dec 2025 19:18:38 +0000
Files and hashes:         1: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=)
                          2: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: ovSklA/8+tEEqgsOh+4pQ88ZbvoeoGBTBhxWhkkQSn8=)
                          3: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=)
                          4: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=)
                          5: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=)
                          6: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=)
                          7: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=)
                          8: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=)
                          9: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=)
                          10: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=)
                          11: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=)
                          12: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=)
                          13: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=)
                          14: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=)
                          15: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=)
                          16: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=)
                          17: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=)
                          18: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=)
                          19: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 16:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:31:b7:52:98:e8:91:d7:85:02:ee:a9:be:01:b3:bf:5d:da:fe:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Dec 12 16:31:38 2025 GMT
            Not After : Dec 13 19:18:38 2025 GMT
        Subject: CN=BC618C6BC2721F13DD546775C2452FE48A6B71B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:b3:d3:30:21:69:ee:0a:4d:52:e7:93:30:
                    3f:4b:3e:3b:0d:f3:97:84:39:e9:c0:b4:ad:ba:21:
                    a0:0c:8b:b6:97:00:2d:38:c8:99:dd:41:96:72:f9:
                    20:95:2f:fd:46:d2:bf:91:dd:88:c6:30:25:f8:df:
                    ec:6f:b0:32:21:66:e0:03:e8:32:3a:25:07:6d:2c:
                    4e:e4:e2:2f:f7:9d:25:ad:e5:0d:bb:ab:e4:24:a1:
                    97:2f:d1:27:1e:91:74:ba:fe:de:62:c0:41:dc:2b:
                    a8:f4:10:e4:30:63:d9:a3:39:d1:7c:da:c1:2e:83:
                    ec:7a:cf:a7:02:c0:5e:0c:1e:d9:c6:7a:59:92:2d:
                    fe:9d:01:ba:15:e9:f3:38:50:dd:cc:b2:46:5a:8b:
                    1d:ef:36:5b:bf:d4:1a:f4:8a:bf:1a:a6:07:7c:6d:
                    4c:57:bd:e7:0b:d1:cd:8f:fb:ab:90:cb:91:51:87:
                    44:8f:e6:38:67:4d:55:ac:ac:35:e1:d9:f2:88:3e:
                    19:08:e4:6b:39:d0:ff:af:2c:0f:c8:43:54:17:32:
                    4c:21:5d:42:64:0d:c8:89:3f:74:8e:25:4b:9c:e8:
                    bd:31:f2:18:6b:f4:ec:52:b0:10:04:c2:cd:c6:8f:
                    21:10:97:df:de:7b:81:ca:ba:3d:d5:3e:08:32:22:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:8C:6B:C2:72:1F:13:DD:54:67:75:C2:45:2F:E4:8A:6B:71:B7
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1e:e3:80:47:04:67:58:e4:cd:15:b7:ff:29:a5:de:33:ca:
         4d:47:f0:9a:ee:ec:6c:44:02:ad:c4:79:40:9e:43:dc:0f:c7:
         1b:f9:ff:52:69:3a:7f:03:1c:69:ef:29:5a:2a:57:ce:1d:e4:
         6c:cb:ae:b5:17:bc:f2:8c:df:7a:1e:0f:6d:57:2c:19:31:af:
         17:0b:cc:e0:fb:4c:03:cf:9d:cd:e3:fa:cf:56:34:12:c5:4a:
         7b:8d:20:e6:3b:f0:f4:cc:48:40:19:93:68:55:84:e1:f8:5d:
         02:fe:6c:2e:9d:8b:fd:ec:86:e1:6b:ec:b6:73:b7:63:0f:db:
         aa:a1:8d:1c:b4:e9:da:f7:6b:dd:f1:39:b8:df:a4:9c:4a:dd:
         35:60:33:db:ee:47:b7:34:8f:5d:68:04:25:d5:9a:65:b0:ff:
         ce:34:31:c7:25:64:d9:6b:c0:b8:7e:9c:6a:49:77:b6:68:a1:
         0a:45:46:ca:19:31:43:0d:52:05:9f:60:2b:b6:c0:ec:c2:b1:
         cf:ff:0a:84:70:c8:e3:f6:c2:20:17:99:4e:dc:24:9f:dd:c4:
         6f:ac:48:33:98:13:8a:59:c4:dd:25:90:c4:36:4b:24:64:3c:
         6d:05:1f:0a:8d:51:c9:79:67:db:e7:18:95:b2:0e:cd:bc:3c:
         cb:ff:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 22:47:30 2025 by rpki-client