This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier: MUat4HzZJt6+yf7/hLbjKh9R56xsKviPUL/uJH0fo+0=
Subject key identifier: 8D:C0:2A:7B:13:DC:41:7B:1E:F4:BB:59:00:25:21:A0:42:74:80:57
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 01C58A17B8592DD9C07922AD4D8AE13030FD4936
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number: 019A
Signing time: Sat 20 Dec 2025 19:39:45 +0000
Manifest this update: Sat 20 Dec 2025 19:34:45 +0000
Manifest next update: Sun 21 Dec 2025 19:41:45 +0000
Files and hashes: 1: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=)
2: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=)
3: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=)
4: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: 2OIJ3/dahs4KJNvUK76DJrwTd4jBYPebR4Y5uz3w4lU=)
5: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=)
6: AS396064.asa (hash: 9aB6OfxXafAaw+LdCPDg9ldZUjfI/7K0V3Sqjl93zr8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 19:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c5:8a:17:b8:59:2d:d9:c0:79:22:ad:4d:8a:e1:30:30:fd:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: Dec 20 19:34:45 2025 GMT
Not After : Dec 21 19:41:45 2025 GMT
Subject: CN=8DC02A7B13DC417B1EF4BB59002521A042748057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:c0:4b:cc:aa:af:ad:f5:a6:b2:ad:0c:d1:
ec:9c:31:0e:db:65:80:5e:0f:86:97:ea:b5:8a:f9:
6e:c7:48:33:fa:62:37:37:ce:f6:41:c1:80:5c:7d:
77:6e:d7:9a:7e:9a:28:d3:ee:dc:36:24:69:e7:b5:
90:1d:c0:b4:41:24:13:d0:c4:dc:c3:95:83:d6:c1:
c3:bb:53:08:da:b9:3e:57:35:a8:cb:ed:57:2e:97:
03:1d:45:c4:60:fe:68:15:6e:ae:5d:4c:df:ec:22:
6f:a6:1f:ca:88:01:3a:da:ef:63:ae:fe:1f:87:c5:
85:9e:a1:56:03:6b:4b:44:b8:34:5d:69:ff:0b:d8:
38:fa:fc:e4:6e:44:45:c1:56:e9:0c:ef:30:28:71:
3b:5a:c6:81:02:26:31:fe:7d:5e:47:7e:2d:de:a7:
77:f4:34:62:c7:cd:82:1a:90:b4:e9:bb:ae:fe:a4:
6a:48:26:21:6c:be:9f:b9:6e:f5:c3:af:74:8f:34:
ff:ce:5e:ee:81:9a:14:9f:a5:0d:16:b6:1d:1f:36:
f1:81:8f:51:7c:da:2d:79:4f:7c:f7:34:22:07:84:
09:fa:e1:84:e0:f9:d7:d9:6b:a9:16:75:5f:c9:55:
96:d8:d3:3e:19:17:54:03:c0:3c:52:27:89:7a:2b:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:2A:7B:13:DC:41:7B:1E:F4:BB:59:00:25:21:A0:42:74:80:57
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4c:b9:37:4d:1d:3a:ab:c2:c0:a8:6f:31:c9:1b:ff:31:60:
54:7e:2a:f7:c5:b9:60:72:c9:95:3c:3d:6c:ae:c0:04:a6:b6:
a6:1b:1b:ef:62:d1:0e:49:35:e0:8a:fe:d0:b0:26:57:d3:30:
78:f6:ae:70:42:77:5f:02:12:d5:f9:d7:67:7a:41:02:58:1b:
dd:6b:9a:3d:8f:e8:c6:ab:55:bd:7e:ad:c5:48:4e:eb:a8:96:
ce:5d:1e:71:55:0d:5f:3d:de:98:58:0d:30:9b:30:ac:31:4d:
d8:b7:ba:78:62:50:18:74:f4:e4:05:10:6c:ff:29:4a:d8:1f:
32:18:1c:d6:55:f2:15:7d:58:c9:21:ea:d5:27:3f:54:ba:7e:
22:af:ac:a1:0e:3d:51:01:1f:67:f4:b1:8b:96:4d:c7:c5:28:
b2:a9:25:90:f2:84:70:2b:48:5f:8e:55:c4:9d:fc:5a:8a:3e:
9b:09:a6:d4:84:da:71:b8:9a:89:36:ab:84:6e:12:7e:af:7a:
f1:30:1e:e5:83:d3:4e:14:39:4e:9a:37:57:1a:de:79:b1:70:
7b:3f:27:c2:fb:e3:3b:74:ec:0d:10:28:99:be:9f:59:07:d4:
21:1c:03:40:03:84:7c:8a:d5:9d:39:f3:1b:ec:41:a9:7d:44:
79:0d:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:41:32 2025 by rpki-client