This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
File:                     0F728B914670434DCF5633E81E2B8721DF75CEB8.mft (raw, json)
Hash identifier:          7RSkqD5hcrNEDguCAVvvNeWMgo3imnuQYUeuKYvE8jc=
Subject key identifier:   42:A3:15:0E:9B:C8:DC:9A:B9:B9:F3:97:7F:22:FC:E4:4D:D9:98:E0
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       35BD191DD3B12E1D6B28334B54F04CF6A811367C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
Manifest number:          D4
Signing time:             Sun 07 Dec 2025 18:29:04 +0000
Manifest this update:     Sun 07 Dec 2025 18:24:04 +0000
Manifest next update:     Mon 08 Dec 2025 20:23:04 +0000
Files and hashes:         1: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (hash: t9hcvqhwXlPB3lKs0hXk2UPtuWy2Mwkk+JEAH74z3hU=)
                          2: 326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (hash: 5zkOtfMFRCYhmVW7LBhzu0cT34wr5G4zsYBbwLKUwUQ=)
                          3: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (hash: yfbaeT34FbMIGlyj0tQySNH5shIHOUf5oJ7SB3fvio4=)
                          4: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (hash: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw=)
                          5: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (hash: 9olAe2k5YVfRqkBWbCUyoH95HOSdUCIE1uFD0aZVTK8=)
                          6: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (hash: wQCSXfUitadFHqKjKe8NWt6UbMgOvdQ9vSj233OT9/o=)
                          7: 326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (hash: 6S/HZN+hofz7bGbwqskKxqv7EIALWOyIB31Jd/CmpLk=)
                          8: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (hash: T/jZB6hJnvckE1oQM04wQ4G6elO8ybOC5fa2RX6LRvo=)
                          9: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (hash: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=)
                          10: 326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (hash: WTZmUkrbRvCnq1WV0/b4J3wKCnYUZUlJ7NyI7AuLwZg=)
                          11: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (hash: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=)
                          12: 0F728B914670434DCF5633E81E2B8721DF75CEB8.crl (hash: 2NWCPq5aPDrHMq9Rq5RG4NnR8x8RcHDLklXmlUMhiyE=)
                          13: 326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (hash: MtzTkzQ35m22EvkbzZHwIxUncfZ/F5ZBQnc0K5rFcKk=)
                          14: 326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (hash: o0c6z8BVXaf88Og/NHkXsPQxVXa5TEEzjiKJXKikl2E=)
                          15: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (hash: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bd:19:1d:d3:b1:2e:1d:6b:28:33:4b:54:f0:4c:f6:a8:11:36:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Dec  7 18:24:04 2025 GMT
            Not After : Dec  8 20:23:04 2025 GMT
        Subject: CN=42A3150E9BC8DC9AB9B9F3977F22FCE44DD998E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:a6:16:5c:ea:36:89:16:67:e8:4a:81:74:
                    f0:70:d9:e0:a9:55:ad:a9:d9:10:ab:05:6f:0a:72:
                    83:fb:5b:0b:5f:65:92:5d:bf:45:11:f6:07:43:3b:
                    df:35:33:e0:f1:6d:da:06:bd:ff:84:7d:07:72:1f:
                    35:c0:48:dc:6f:76:b9:49:df:bc:48:c9:d0:5a:85:
                    19:16:7b:c8:25:04:1a:b3:ce:9d:45:32:0c:50:5b:
                    88:f8:ba:5d:10:3a:97:b7:4e:3f:d1:cd:0d:d2:8c:
                    67:9f:f1:c0:39:af:5e:10:fe:a8:90:e8:81:d1:09:
                    05:74:bf:69:28:80:cd:c2:34:af:8c:dd:9f:0b:29:
                    68:86:38:fd:45:19:a0:4a:3e:8c:61:9e:42:e0:86:
                    8f:e1:16:d6:67:ff:be:ab:34:73:d6:dc:00:11:f2:
                    15:3d:8a:68:19:aa:55:04:a2:01:f2:0d:d0:c3:d7:
                    1a:87:2c:dd:a5:ee:2b:c0:30:64:21:67:71:b4:e9:
                    91:12:76:f5:bf:a5:8e:82:76:ed:2b:49:49:c1:6f:
                    29:37:b8:73:53:40:58:b2:fd:b8:ce:28:a6:c0:d7:
                    6b:68:d5:b1:09:9a:bd:2e:6b:56:0f:a7:ee:bf:31:
                    6b:70:c9:e9:30:49:61:4f:cb:96:59:b8:bf:c2:a9:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:15:0E:9B:C8:DC:9A:B9:B9:F3:97:7F:22:FC:E4:4D:D9:98:E0
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:11:2c:9d:88:4d:98:e4:2d:5a:df:66:ea:66:91:46:26:
         2e:c4:10:08:ac:82:86:e0:ad:53:9f:6f:4c:f0:ac:b3:13:27:
         be:a2:60:b0:97:b6:a2:75:28:ea:87:f3:57:54:ba:95:c6:7a:
         bd:9b:73:a7:59:7e:2e:80:fc:56:fb:dd:d8:60:44:81:3e:13:
         ee:e1:5a:47:90:cb:b5:c9:70:46:49:d0:df:0f:ac:95:62:b1:
         24:6c:f5:b1:ef:0b:f7:71:d3:f4:f4:fc:a5:ea:33:d1:80:6c:
         37:25:31:74:9f:1c:53:6e:f3:57:0e:b2:d6:37:1a:ae:8f:58:
         53:1b:79:61:2d:4d:2f:04:34:3a:bf:b6:6f:ba:5d:ae:68:c7:
         5a:5b:bf:24:1f:38:b9:a8:74:3d:66:75:33:ba:5b:5b:92:42:
         44:31:5c:a3:16:53:64:9b:1c:a7:04:18:d6:d3:aa:b7:92:ac:
         9e:3e:6a:b9:f0:97:81:88:f6:d5:05:bf:83:bc:c7:f6:82:71:
         67:11:91:bc:9e:7c:8f:25:80:a7:ca:78:ff:fb:e2:fc:01:b8:
         04:7c:01:4c:0c:e4:e1:25:df:88:69:15:fc:f9:04:46:9a:bb:
         69:17:d7:2d:a3:9d:74:67:f4:18:9f:1b:52:c9:cc:ac:2c:23:
         8d:e6:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:18:47 2025 by rpki-client