This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
File: 0F728B914670434DCF5633E81E2B8721DF75CEB8.mft (raw, json)
Hash identifier: 7RSkqD5hcrNEDguCAVvvNeWMgo3imnuQYUeuKYvE8jc=
Subject key identifier: 42:A3:15:0E:9B:C8:DC:9A:B9:B9:F3:97:7F:22:FC:E4:4D:D9:98:E0
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Certificate issuer: /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial: 35BD191DD3B12E1D6B28334B54F04CF6A811367C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
Manifest number: D4
Signing time: Sun 07 Dec 2025 18:29:04 +0000
Manifest this update: Sun 07 Dec 2025 18:24:04 +0000
Manifest next update: Mon 08 Dec 2025 20:23:04 +0000
Files and hashes: 1: 326130613a363034303a626161313a3a2f34382d3438203d3e20313939353138.roa (hash: t9hcvqhwXlPB3lKs0hXk2UPtuWy2Mwkk+JEAH74z3hU=)
2: 326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (hash: 5zkOtfMFRCYhmVW7LBhzu0cT34wr5G4zsYBbwLKUwUQ=)
3: 326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (hash: yfbaeT34FbMIGlyj0tQySNH5shIHOUf5oJ7SB3fvio4=)
4: 326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (hash: Iq4eSkM2mD7cqfU/UltgR+hYhlRTOg/EsQBpvTZNrRw=)
5: 326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (hash: 9olAe2k5YVfRqkBWbCUyoH95HOSdUCIE1uFD0aZVTK8=)
6: 326130613a363034303a626137653a3a2f34382d3438203d3e20313939353138.roa (hash: wQCSXfUitadFHqKjKe8NWt6UbMgOvdQ9vSj233OT9/o=)
7: 326130613a363034303a626135653a3a2f34382d3438203d3e20313939353138.roa (hash: 6S/HZN+hofz7bGbwqskKxqv7EIALWOyIB31Jd/CmpLk=)
8: 326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (hash: T/jZB6hJnvckE1oQM04wQ4G6elO8ybOC5fa2RX6LRvo=)
9: 326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (hash: Cf7Hq4Bj6m3ldjocti6iTYM0fKxr5EeeVnIgQEdXi4Q=)
10: 326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (hash: WTZmUkrbRvCnq1WV0/b4J3wKCnYUZUlJ7NyI7AuLwZg=)
11: 326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (hash: KxJ7XF8Z2VNL2LPTKDndZcM/etl1/MxhPowc5xh/Txk=)
12: 0F728B914670434DCF5633E81E2B8721DF75CEB8.crl (hash: 2NWCPq5aPDrHMq9Rq5RG4NnR8x8RcHDLklXmlUMhiyE=)
13: 326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (hash: MtzTkzQ35m22EvkbzZHwIxUncfZ/F5ZBQnc0K5rFcKk=)
14: 326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (hash: o0c6z8BVXaf88Og/NHkXsPQxVXa5TEEzjiKJXKikl2E=)
15: 326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (hash: UPbRWjjdOjtlciOFfZiOUrhrbDXOps+Mf6X8zEAQmV8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bd:19:1d:d3:b1:2e:1d:6b:28:33:4b:54:f0:4c:f6:a8:11:36:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Validity
Not Before: Dec 7 18:24:04 2025 GMT
Not After : Dec 8 20:23:04 2025 GMT
Subject: CN=42A3150E9BC8DC9AB9B9F3977F22FCE44DD998E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:a6:16:5c:ea:36:89:16:67:e8:4a:81:74:
f0:70:d9:e0:a9:55:ad:a9:d9:10:ab:05:6f:0a:72:
83:fb:5b:0b:5f:65:92:5d:bf:45:11:f6:07:43:3b:
df:35:33:e0:f1:6d:da:06:bd:ff:84:7d:07:72:1f:
35:c0:48:dc:6f:76:b9:49:df:bc:48:c9:d0:5a:85:
19:16:7b:c8:25:04:1a:b3:ce:9d:45:32:0c:50:5b:
88:f8:ba:5d:10:3a:97:b7:4e:3f:d1:cd:0d:d2:8c:
67:9f:f1:c0:39:af:5e:10:fe:a8:90:e8:81:d1:09:
05:74:bf:69:28:80:cd:c2:34:af:8c:dd:9f:0b:29:
68:86:38:fd:45:19:a0:4a:3e:8c:61:9e:42:e0:86:
8f:e1:16:d6:67:ff:be:ab:34:73:d6:dc:00:11:f2:
15:3d:8a:68:19:aa:55:04:a2:01:f2:0d:d0:c3:d7:
1a:87:2c:dd:a5:ee:2b:c0:30:64:21:67:71:b4:e9:
91:12:76:f5:bf:a5:8e:82:76:ed:2b:49:49:c1:6f:
29:37:b8:73:53:40:58:b2:fd:b8:ce:28:a6:c0:d7:
6b:68:d5:b1:09:9a:bd:2e:6b:56:0f:a7:ee:bf:31:
6b:70:c9:e9:30:49:61:4f:cb:96:59:b8:bf:c2:a9:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:15:0E:9B:C8:DC:9A:B9:B9:F3:97:7F:22:FC:E4:4D:D9:98:E0
X509v3 Authority Key Identifier:
keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:11:2c:9d:88:4d:98:e4:2d:5a:df:66:ea:66:91:46:26:
2e:c4:10:08:ac:82:86:e0:ad:53:9f:6f:4c:f0:ac:b3:13:27:
be:a2:60:b0:97:b6:a2:75:28:ea:87:f3:57:54:ba:95:c6:7a:
bd:9b:73:a7:59:7e:2e:80:fc:56:fb:dd:d8:60:44:81:3e:13:
ee:e1:5a:47:90:cb:b5:c9:70:46:49:d0:df:0f:ac:95:62:b1:
24:6c:f5:b1:ef:0b:f7:71:d3:f4:f4:fc:a5:ea:33:d1:80:6c:
37:25:31:74:9f:1c:53:6e:f3:57:0e:b2:d6:37:1a:ae:8f:58:
53:1b:79:61:2d:4d:2f:04:34:3a:bf:b6:6f:ba:5d:ae:68:c7:
5a:5b:bf:24:1f:38:b9:a8:74:3d:66:75:33:ba:5b:5b:92:42:
44:31:5c:a3:16:53:64:9b:1c:a7:04:18:d6:d3:aa:b7:92:ac:
9e:3e:6a:b9:f0:97:81:88:f6:d5:05:bf:83:bc:c7:f6:82:71:
67:11:91:bc:9e:7c:8f:25:80:a7:ca:78:ff:fb:e2:fc:01:b8:
04:7c:01:4c:0c:e4:e1:25:df:88:69:15:fc:f9:04:46:9a:bb:
69:17:d7:2d:a3:9d:74:67:f4:18:9f:1b:52:c9:cc:ac:2c:23:
8d:e6:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:18:47 2025 by rpki-client