This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
File:                     n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json)
Hash identifier:          viYXzzeyiJbBPPoq2FXVDHQrDdQba2eZr2pXaidOk/Q=
Subject key identifier:   8D:B0:B8:78:87:4F:35:89:19:94:1E:48:33:D1:27:75:7C:12:40:A0
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       6656CEFF10833FB465EFFB4043E9314F7397EECF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
Manifest number:          E0
Signing time:             Mon 22 Dec 2025 00:13:30 +0000
Manifest this update:     Mon 22 Dec 2025 00:13:30 +0000
Manifest next update:     Fri 26 Dec 2025 00:13:30 +0000
Files and hashes:         1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: y20aXrI+eNDOG6od7OxjOrLX+UG/nRzLA/TtDllCYs0=)
                          2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: L9oJqbmD1vFZW/a2la5u//Rx8WPzUda4GOYT0MAf0rE=)
                          3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: OPQnK+ExAZ65RXucwyUA7ACV57O/Vf0Ft5TgdyoRaBg=)
                          4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: irGiXFRUFAKWuWWKz40rRFEdj/riGkH1rKq0RC8R5/4=)
                          5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: +7odOGAixFZkzpnQ/em6sNvldWnEircDk5I3XCMkvjA=)
                          6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: lgtN2ykAtQoLOZeOAG1RRJIVFe610eXIuBktL4rzoxQ=)
                          7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: UVmOHEeOsEK5xfoXGjqEXEP9IATX36+fWroTdevPII8=)
                          8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: rrm9U4u3ThkdFftHCdHeXpPWUS7M6nU0k3ZwDAJ4Uz0=)
                          9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: CzL3tXlFl1NHZQYwsCmhXonhIOFJJ2Y3nwhw1+fjBag=)
                          10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: pAG73moofledSjquc8DWf09esuI72iQHtzftWS9IKWo=)
                          11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: u8AYgH+x5cLgMLVWOowaB2fv3RDvf06tnBTy4f+458I=)
                          12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: QZx14X+lxrX1wm7nOXl4GBewfeITfBtxdybSz1SZwwM=)
                          13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: jc7/IOHd5Kaf24z/iYKne1QcbMY146jH/vPKcafKmLc=)
                          14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: YgjE8pKxx3pgo4WvQqgb7IU7wqopZIVNnFA3We0/WVg=)
                          15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: jOirw4cWyeJOf4VdGHdGSjtW73gU6CW1pqo5iV8NBoA=)
                          16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: GX6D4EMLfoaMnpBeGAjAjszZFBVsp1t7Dy13B+dgmSg=)
                          17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: +QFUAFtbgypWwpZgec+z4qNlEokU421haR3DZrtrSQU=)
                          18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: 8s88RbxWmub6vteuATUv42OfmLLNntC9NjawA3GBWyU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:56:ce:ff:10:83:3f:b4:65:ef:fb:40:43:e9:31:4f:73:97:ee:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Dec 22 00:13:30 2025 GMT
            Not After : Dec 26 00:13:30 2025 GMT
        Subject: serialNumber=284bf60c1ecb53ff35c252b0b5e49491abbb5f474a42408a0cd4843c95498820, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:73:96:a9:6b:b6:54:21:3f:e2:1e:c1:10:
                    3b:98:82:a5:06:1f:88:b2:24:eb:d0:ed:b8:d7:e8:
                    e0:2c:6e:c9:e3:8d:29:3d:4d:c6:18:77:ca:c3:09:
                    82:d9:e5:5d:c4:66:9e:ab:77:94:4d:cd:bc:c3:11:
                    55:03:a8:93:b8:50:3d:65:61:5c:47:68:80:d6:0c:
                    0a:95:b0:37:9f:14:7f:1d:87:5b:8e:84:77:84:26:
                    e5:c6:5c:ea:0c:26:5d:fc:be:6a:ef:44:f5:e1:93:
                    4b:99:1b:9c:e9:32:89:62:9e:52:8e:5f:91:0d:6b:
                    fb:78:2d:b6:5d:56:b0:e4:c7:b5:bd:a9:bf:2c:81:
                    3a:0a:73:d6:b7:56:47:77:0f:2c:7e:8c:db:7a:e2:
                    8b:e3:ec:e8:12:9e:76:5b:6a:5b:0c:6d:ac:aa:2a:
                    d2:8d:d6:b4:f3:2d:82:19:2b:ae:f2:e4:40:c8:f3:
                    ed:44:e8:1d:31:bc:45:46:30:93:5d:47:32:cb:72:
                    e2:2b:fc:1c:31:f6:07:a9:d6:79:c1:bd:af:38:cd:
                    a3:8e:39:7b:84:d3:a9:2e:10:cc:92:0a:00:47:48:
                    23:80:49:a1:37:3a:11:6f:a1:c8:42:a0:54:7e:63:
                    f0:3f:25:15:13:ff:49:6d:a3:a8:ad:31:97:00:a4:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:B8:78:87:4F:35:89:19:94:1E:48:33:D1:27:75:7C:12:40:A0
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:2f:e3:e7:0b:de:74:e2:a1:af:d3:2c:1d:6c:ba:0f:e4:
         fd:d1:79:15:52:aa:24:1b:be:df:74:fd:54:be:b7:ac:b8:d8:
         13:4a:71:06:47:81:2c:9a:51:4f:9c:de:48:e3:d4:b2:51:53:
         36:60:e3:2e:08:db:e5:fb:9f:ca:8a:bf:8e:58:a7:d2:2f:f2:
         a7:0b:85:79:1f:0c:4e:dd:c2:79:5f:7c:6f:a6:40:62:a0:8d:
         3b:1a:76:54:90:ca:4f:62:a6:0a:60:d0:26:ba:3e:20:3a:19:
         4c:26:a3:02:a9:67:26:b6:d0:30:92:b5:ca:b7:d4:f7:70:ec:
         37:10:54:20:1a:65:b8:a4:16:db:70:61:37:3f:f6:f5:d0:99:
         d2:b1:c6:6e:84:5f:4c:13:24:f4:d1:67:ab:bc:b6:b0:e7:5b:
         a5:14:28:e4:66:49:d9:65:7b:f9:95:6d:c8:5b:de:ae:a2:9a:
         1f:8e:76:c5:e7:f8:a6:c3:35:a9:75:1d:a7:42:3e:e6:4a:14:
         1d:8a:a6:e4:af:35:c7:86:26:3a:e2:21:b9:2a:22:dc:f0:c1:
         77:5b:6c:10:bc:2e:9b:0c:3d:f7:fb:f8:58:c0:5a:d9:3c:80:
         0a:22:7c:6f:1a:89:c4:68:26:c7:6f:fd:6d:c4:a9:d8:cb:02:
         76:56:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----