This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
File:                     n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json)
Hash identifier:          fnqDipW71TvvhZACyIjfXjBazugiJiVrj2s6NEmKClo=
Subject key identifier:   8C:F7:09:17:51:66:E4:6E:14:A0:BC:CF:0A:06:C0:84:4F:77:F9:73
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       0EAFAE30E172FAEAFCE80F3B9FFE78DF450BF67E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
Manifest number:          CF
Signing time:             Sat 06 Dec 2025 00:14:50 +0000
Manifest this update:     Sat 06 Dec 2025 00:14:50 +0000
Manifest next update:     Wed 10 Dec 2025 00:14:50 +0000
Files and hashes:         1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: a/Xvj7EjpSWqEbH/rKgrxmT338MNKeCcF4aIkodYf/s=)
                          2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: 53r7DX11grAnGug5krxqiTwIYP+1HP7pBsVWkbp6JTU=)
                          3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: jsAP7RHMKTdyk2pm6Rjc2bQLq+MsnZWsZjrWeXDm5Zo=)
                          4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: WWnpRQu0p7bLJecbN8+nx0yDE/2hifOe/P8nL3Mg+Mc=)
                          5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: Fw/MlejbHanRZ+AsxUCgq2XCb1lygA7irTL4dbLz9/4=)
                          6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: 7S4pM8TfmARcc77ePLXEMbmkNWDfzNYs7qKhqrjkyaw=)
                          7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: KXQrOOR+WXPqCOEZhf8a7+FDqIo7PVRPo7CpVTaa1lM=)
                          8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: K5JUgSfmBKKrclDAmHrxeWqJ4Rn1McvXK2kv+YzBdl8=)
                          9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: 3dsfcspQpd0Uv4xsfLdK5fj/Kmuen+LbiE+RDr00F5s=)
                          10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: xl32gW7P7q7uVaXbsFsLrrxHecmkrf/V33q/LI6uYUA=)
                          11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: pBLWfYjg/4LKU8tJBp4EiYDn9M7ne2VA1UxCQxBjfsQ=)
                          12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: aOgiXS+0XpzizH5aQ2/2xSbuK/7geahYo1I/WCXU1Js=)
                          13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: uNgpWWtfCET5DmHMQcvOblhA+UA2X2X2WRtHp5k4uw4=)
                          14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: BwNH3nFLdWTvprZ7vZ1Irs5I3A6fTCu1Ii7ND74xCBQ=)
                          15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: Y2vnFzdN3qbeXFLRRtI6RNh6rcwe7npMExmw8y3+xx0=)
                          16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: yP8hHFDdDTMlKBBdJbJpS+cNdFW6ggUN8BR/ZgvKpM0=)
                          17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: mVWgVN3ZRwctuWEkrSRaC9RZi53ZmnZchrQgGTwyr8Q=)
                          18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: 9QZZ6X5sTHQjDv3BtJF0IFUyc7nfmGdvLQRpoQhpNdw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:af:ae:30:e1:72:fa:ea:fc:e8:0f:3b:9f:fe:78:df:45:0b:f6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Dec  6 00:14:50 2025 GMT
            Not After : Dec 10 00:14:50 2025 GMT
        Subject: serialNumber=217bddbbc75d2dca8cc79f71331a8468a2f5ab8d83572cbc0fdcab0d520cb7cd, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:e3:31:bd:b9:72:25:8c:65:6f:24:a6:df:
                    6d:4d:ed:33:61:07:75:ef:3c:04:97:45:86:b9:ad:
                    eb:de:b4:40:f6:50:73:3a:14:7b:8c:14:2e:23:be:
                    e4:dd:c5:42:bb:1b:f5:60:95:75:db:fd:76:bf:43:
                    3f:a7:31:a6:17:99:17:c3:0e:2b:5e:68:26:3a:61:
                    8b:bd:ac:7c:8f:69:4d:3c:69:30:6d:0b:ca:a5:09:
                    c2:a9:52:6d:77:bd:57:d0:01:ed:8a:73:93:89:ea:
                    d1:84:56:67:b1:cb:3f:05:74:c1:8e:0c:bb:97:4a:
                    17:7f:fb:d1:e3:bc:b4:0a:93:78:c2:42:f2:1c:3b:
                    f1:47:8a:13:72:5b:b0:61:df:ae:a9:1e:a5:42:8c:
                    59:01:49:ad:dd:d5:88:5d:97:e9:d8:48:20:e8:60:
                    8b:58:5e:7e:65:6b:08:74:b2:47:aa:0b:84:62:44:
                    f7:0f:79:36:be:32:b6:3a:c7:87:76:df:3d:4c:33:
                    34:ca:37:de:8a:54:20:09:3a:af:8b:33:5a:e7:98:
                    ef:b8:da:de:0e:41:bd:4a:31:69:72:bd:24:bd:42:
                    64:d9:85:a2:61:c2:55:7a:b0:68:1c:4a:d4:28:d8:
                    6f:4b:e4:b2:9b:67:da:81:87:32:d9:85:f5:d2:cc:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F7:09:17:51:66:E4:6E:14:A0:BC:CF:0A:06:C0:84:4F:77:F9:73
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:5a:a3:0e:ce:68:e2:95:57:61:97:82:90:ba:21:f4:e2:
         d8:72:c5:fa:f8:6c:9a:5a:35:63:8a:4c:8b:3e:c5:2b:cb:f5:
         e4:c2:8d:0d:8a:9b:be:9c:d5:24:24:cf:c6:89:ce:7c:a5:11:
         ba:85:3b:a7:7c:5f:ad:03:8a:ac:68:43:24:0a:5a:49:68:99:
         a0:6f:c1:8b:7a:3a:25:73:e9:1c:3c:34:24:80:81:6b:3c:6f:
         92:ec:39:2a:a4:87:9b:2c:d2:ac:c8:f8:82:31:8b:bd:e4:2d:
         95:fd:21:5a:25:68:90:21:7a:fb:ef:a1:fe:69:c3:36:7f:1b:
         4f:bb:65:bb:53:bb:50:b4:00:d9:e1:80:77:80:b7:92:70:6f:
         85:f8:20:f9:fa:d8:9c:72:21:ff:6c:0e:99:a1:95:09:c5:c0:
         d3:5c:a9:c7:24:c9:50:48:1b:0b:74:f1:7d:2d:0b:0d:cf:9a:
         1e:8d:fe:04:f4:88:e4:f3:26:c3:1d:50:86:a6:a5:27:de:26:
         9a:e8:c7:ce:ae:06:2b:80:db:8c:62:fc:eb:1b:a1:1b:a4:ab:
         66:d2:4b:20:e3:e1:42:77:a4:d7:69:6a:fe:50:82:13:46:af:
         50:56:1a:58:ac:85:33:9e:e3:88:f2:cf:ac:35:bc:3e:e9:78:
         cb:22:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----