This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File:                     1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier:          MUat4HzZJt6+yf7/hLbjKh9R56xsKviPUL/uJH0fo+0=
Subject key identifier:   8D:C0:2A:7B:13:DC:41:7B:1E:F4:BB:59:00:25:21:A0:42:74:80:57
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       01C58A17B8592DD9C07922AD4D8AE13030FD4936
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number:          019A
Signing time:             Sat 20 Dec 2025 19:39:45 +0000
Manifest this update:     Sat 20 Dec 2025 19:34:45 +0000
Manifest next update:     Sun 21 Dec 2025 19:41:45 +0000
Files and hashes:         1: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=)
                          2: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=)
                          3: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=)
                          4: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: 2OIJ3/dahs4KJNvUK76DJrwTd4jBYPebR4Y5uz3w4lU=)
                          5: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=)
                          6: AS396064.asa (hash: 9aB6OfxXafAaw+LdCPDg9ldZUjfI/7K0V3Sqjl93zr8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 19:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:8a:17:b8:59:2d:d9:c0:79:22:ad:4d:8a:e1:30:30:fd:49:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Dec 20 19:34:45 2025 GMT
            Not After : Dec 21 19:41:45 2025 GMT
        Subject: CN=8DC02A7B13DC417B1EF4BB59002521A042748057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:c0:4b:cc:aa:af:ad:f5:a6:b2:ad:0c:d1:
                    ec:9c:31:0e:db:65:80:5e:0f:86:97:ea:b5:8a:f9:
                    6e:c7:48:33:fa:62:37:37:ce:f6:41:c1:80:5c:7d:
                    77:6e:d7:9a:7e:9a:28:d3:ee:dc:36:24:69:e7:b5:
                    90:1d:c0:b4:41:24:13:d0:c4:dc:c3:95:83:d6:c1:
                    c3:bb:53:08:da:b9:3e:57:35:a8:cb:ed:57:2e:97:
                    03:1d:45:c4:60:fe:68:15:6e:ae:5d:4c:df:ec:22:
                    6f:a6:1f:ca:88:01:3a:da:ef:63:ae:fe:1f:87:c5:
                    85:9e:a1:56:03:6b:4b:44:b8:34:5d:69:ff:0b:d8:
                    38:fa:fc:e4:6e:44:45:c1:56:e9:0c:ef:30:28:71:
                    3b:5a:c6:81:02:26:31:fe:7d:5e:47:7e:2d:de:a7:
                    77:f4:34:62:c7:cd:82:1a:90:b4:e9:bb:ae:fe:a4:
                    6a:48:26:21:6c:be:9f:b9:6e:f5:c3:af:74:8f:34:
                    ff:ce:5e:ee:81:9a:14:9f:a5:0d:16:b6:1d:1f:36:
                    f1:81:8f:51:7c:da:2d:79:4f:7c:f7:34:22:07:84:
                    09:fa:e1:84:e0:f9:d7:d9:6b:a9:16:75:5f:c9:55:
                    96:d8:d3:3e:19:17:54:03:c0:3c:52:27:89:7a:2b:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:2A:7B:13:DC:41:7B:1E:F4:BB:59:00:25:21:A0:42:74:80:57
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:b9:37:4d:1d:3a:ab:c2:c0:a8:6f:31:c9:1b:ff:31:60:
         54:7e:2a:f7:c5:b9:60:72:c9:95:3c:3d:6c:ae:c0:04:a6:b6:
         a6:1b:1b:ef:62:d1:0e:49:35:e0:8a:fe:d0:b0:26:57:d3:30:
         78:f6:ae:70:42:77:5f:02:12:d5:f9:d7:67:7a:41:02:58:1b:
         dd:6b:9a:3d:8f:e8:c6:ab:55:bd:7e:ad:c5:48:4e:eb:a8:96:
         ce:5d:1e:71:55:0d:5f:3d:de:98:58:0d:30:9b:30:ac:31:4d:
         d8:b7:ba:78:62:50:18:74:f4:e4:05:10:6c:ff:29:4a:d8:1f:
         32:18:1c:d6:55:f2:15:7d:58:c9:21:ea:d5:27:3f:54:ba:7e:
         22:af:ac:a1:0e:3d:51:01:1f:67:f4:b1:8b:96:4d:c7:c5:28:
         b2:a9:25:90:f2:84:70:2b:48:5f:8e:55:c4:9d:fc:5a:8a:3e:
         9b:09:a6:d4:84:da:71:b8:9a:89:36:ab:84:6e:12:7e:af:7a:
         f1:30:1e:e5:83:d3:4e:14:39:4e:9a:37:57:1a:de:79:b1:70:
         7b:3f:27:c2:fb:e3:3b:74:ec:0d:10:28:99:be:9f:59:07:d4:
         21:1c:03:40:03:84:7c:8a:d5:9d:39:f3:1b:ec:41:a9:7d:44:
         79:0d:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:41:32 2025 by rpki-client