This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: 2/BQcDZwhUB6WdwZZ4eQE6pshN3TaUQGtJuSVAES7K0= Subject key identifier: 91:DB:14:E0:14:7B:44:EA:5F:CB:18:A4:16:B8:52:80:E4:C1:74:13 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 2821E718D50F3BC24535A7015A299DDA897C1410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 03FD Signing time: Mon 22 Dec 2025 01:15:57 +0000 Manifest this update: Mon 22 Dec 2025 01:15:57 +0000 Manifest next update: Fri 26 Dec 2025 01:15:57 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: TtthkdSi8fMpCSQCAzb6nPUZ5pZu9lzF+aYny5A11mQ=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:21:e7:18:d5:0f:3b:c2:45:35:a7:01:5a:29:9d:da:89:7c:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Dec 22 01:15:57 2025 GMT Not After : Dec 26 01:15:57 2025 GMT Subject: serialNumber=85c8fa554ca5370b4d156c93ea19ae81b4a8fb79cee70df776027d40a9253a8e, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:b0:d3:4f:09:0d:fe:57:8c:2a:c0:23:89: 9a:9a:82:0f:dd:0f:36:b0:f6:5c:34:db:43:50:b0: cd:b2:db:53:eb:84:be:0a:69:f0:a6:9f:bf:8e:19: ac:ee:1f:8a:ad:2e:18:2e:87:07:48:b6:9c:dc:e1: 7b:25:63:b7:4b:2d:58:d2:1e:3c:23:11:ae:85:b3: 57:5a:ed:1b:d9:cc:c9:c3:1e:5d:e7:ec:08:26:ed: 02:3b:75:7a:44:69:55:58:ba:8a:5e:41:61:22:e1: f0:2f:9d:85:22:6d:de:b9:63:29:1a:b7:34:3d:d8: 83:2b:a3:a4:2e:51:95:50:73:f5:03:ba:8f:83:ab: 29:a8:0b:6a:57:0d:ec:0a:10:68:d0:72:cf:a9:0d: 8a:ed:64:d3:e7:71:7a:9c:a8:a1:aa:cd:66:b8:b0: 50:a0:ad:3f:d4:99:84:4e:d2:e1:25:87:bf:c8:a6: 1c:8f:3b:e4:6a:8f:ce:2c:97:f9:28:87:1f:37:43: 93:8b:71:44:e4:42:ce:98:03:90:69:19:a3:40:7e: 18:7e:69:1f:6b:76:84:87:e2:28:74:ce:66:f4:4f: 14:2d:50:59:df:9d:d7:62:a3:9e:65:bb:07:3f:47: b7:64:e4:69:7d:46:ad:5a:1b:9c:59:f2:06:cc:5c: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DB:14:E0:14:7B:44:EA:5F:CB:18:A4:16:B8:52:80:E4:C1:74:13 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:74:a8:e6:84:89:a3:64:fc:47:c5:a2:dd:5f:2d:f5:7e:bb: 87:af:cb:33:8a:e8:cd:9d:ac:18:db:ff:61:23:3a:94:4a:7b: 68:8d:3e:da:5f:22:1c:7e:19:e5:b3:86:81:f9:e6:cd:55:1c: d3:d7:14:41:d4:40:0d:df:8d:2a:2c:90:84:24:77:81:01:f8: a1:cd:dc:33:d4:2b:3d:b0:62:bd:ad:f0:a1:72:15:28:f9:95: bf:bc:5a:97:e5:74:39:06:c8:f4:d2:33:10:bc:0a:d5:cf:8a: ce:13:73:f1:a9:39:5c:44:f5:ed:06:e4:ea:65:ad:50:f6:a5: 98:af:0a:eb:4a:75:19:6e:02:e4:09:04:50:d1:e9:d1:d9:ba: bf:91:1a:ee:dc:1d:75:28:92:25:bb:04:f2:7b:97:58:2f:53: fa:94:14:b9:f0:2b:c6:6a:06:b1:6c:8d:f4:f0:0b:b3:ff:a2: 28:9d:00:f7:e1:3a:7b:96:09:63:5e:68:1d:de:f9:15:1b:ae: a2:c2:d2:f1:19:6f:e4:5c:b4:4e:5a:90:58:84:d2:60:35:60: 25:71:1d:60:f7:f5:1a:4d:45:de:fb:74:da:b5:f3:d7:b0:dd: cd:07:68:8d:dd:88:73:be:12:e9:31:15:92:e5:dc:49:54:4b: 8d:f4:55:2f -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUKCHnGNUPO8JFNacBWimd2ol8FBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUxMjIyMDExNTU3WhcNMjUxMjI2MDExNTU3 WjB6MUkwRwYDVQQFE0A4NWM4ZmE1NTRjYTUzNzBiNGQxNTZjOTNlYTE5YWU4MWI0 YThmYjc5Y2VlNzBkZjc3NjAyN2Q0MGE5MjUzYThlMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Z7DTTwkN/leMKsAjiZqagg/dDzaw9lw020NQsM2y21Pr hL4KafCmn7+OGazuH4qtLhguhwdItpzc4XslY7dLLVjSHjwjEa6Fs1da7RvZzMnD Hl3n7Agm7QI7dXpEaVVYuopeQWEi4fAvnYUibd65YykatzQ92IMro6QuUZVQc/UD uo+DqymoC2pXDewKEGjQcs+pDYrtZNPncXqcqKGqzWa4sFCgrT/UmYRO0uElh7/I phyPO+Rqj84sl/kohx83Q5OLcUTkQs6YA5BpGaNAfhh+aR9rdoSH4ih0zmb0TxQt UFnfnddio55luwc/R7dk5Gl9Rq1aG5xZ8gbMXHidAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUkdsU4BR7ROpfyxikFrhSgOTBdBMwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwdKjm hImjZPxHxaLdXy31fruHr8sziujNnawY2/9hIzqUSntojT7aXyIcfhnls4aB+ebN VRzT1xRB1EAN340qLJCEJHeBAfihzdwz1Cs9sGK9rfChchUo+ZW/vFqX5XQ5Bsj0 0jMQvArVz4rOE3PxqTlcRPXtBuTqZa1Q9qWYrwrrSnUZbgLkCQRQ0enR2bq/kRru 3B11KJIluwTye5dYL1P6lBS58CvGagaxbI308Auz/6IonQD34Tp7lgljXmgd3vkV G66iwtLxGW/kXLROWpBYhNJgNWAlcR1g9/UaTUXe+3TatfPXsN3NB2iN3YhzvhLp MRWS5dxJVEuN9FUv -----END CERTIFICATE-----Generated at Mon Dec 22 11:36:07 2025 by rpki-client