This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
File:                     z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json)
Hash identifier:          MRTo0NMaBPd67kaWkfbie18rxpgDsLp4lApmGZWozTM=
Subject key identifier:   0B:24:B6:AF:DF:79:C5:9D:97:9D:A9:F5:79:C9:6C:F7:6C:D7:D0:A0
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       35BCCCDCF0ABEAF32318128A2C2832C6C8001F09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
Manifest number:          03F6
Signing time:             Mon 15 Dec 2025 01:13:06 +0000
Manifest this update:     Mon 15 Dec 2025 01:13:06 +0000
Manifest next update:     Fri 19 Dec 2025 01:13:06 +0000
Files and hashes:         1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: q3n2uaATsvD3jq+V4kOZhCaOTPgVeKHKAi9e4oW3CXU=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bc:cc:dc:f0:ab:ea:f3:23:18:12:8a:2c:28:32:c6:c8:00:1f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Dec 15 01:13:06 2025 GMT
            Not After : Dec 19 01:13:06 2025 GMT
        Subject: serialNumber=5f0da479056941bb58fa47cf4b447c464639fe3bc064e4f91e590ac629a7b258, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:bf:37:70:14:67:3e:38:a0:66:ab:7a:9e:
                    a5:7d:72:81:dd:c3:69:e1:44:e1:3f:ba:a1:97:7c:
                    b0:e9:1e:93:d0:5a:24:18:8a:9f:cd:69:84:08:14:
                    ce:0b:67:a4:bb:ea:9a:c4:43:c2:57:2c:b6:90:c8:
                    ec:8b:63:65:5e:5c:2b:b2:67:30:78:5f:0e:c1:ac:
                    ba:6c:34:97:05:9e:f2:40:47:06:bb:c3:59:22:a8:
                    bd:3f:c9:20:c5:db:d2:b6:18:89:e1:b9:3c:09:1c:
                    75:00:b9:40:bb:5d:72:38:d4:f9:f7:57:13:95:16:
                    20:d3:f9:9e:ea:91:e8:61:33:29:8e:72:4e:ed:df:
                    09:3a:94:24:3b:2c:5d:cc:67:ae:bc:eb:68:4c:cd:
                    67:85:18:0b:59:d3:9f:9f:7a:24:5a:af:ab:22:3b:
                    7b:60:e8:6b:bd:88:33:3a:af:40:6c:59:8f:ca:72:
                    33:4b:9a:d6:10:58:cc:f7:3e:c5:e4:be:ae:dd:81:
                    dc:71:fa:fc:a4:30:b0:5d:f3:aa:7f:82:5c:7a:ab:
                    2a:9e:12:24:cf:b2:9b:25:9a:c3:9f:82:90:73:48:
                    73:50:e2:ab:17:6f:f4:73:f2:e5:05:2c:8f:e0:b5:
                    ad:88:a5:8c:8b:c2:96:77:77:8f:6c:fc:3e:9d:a7:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:24:B6:AF:DF:79:C5:9D:97:9D:A9:F5:79:C9:6C:F7:6C:D7:D0:A0
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:54:1e:80:d5:98:12:eb:f2:1c:a6:4e:12:39:e4:d6:72:
         36:7e:1d:f1:21:7a:2b:41:44:c5:99:3c:9f:92:18:3c:3d:b7:
         ea:0a:3a:18:e5:33:06:c4:3c:3b:59:17:a1:2b:5d:b3:53:f3:
         f4:ff:60:69:8c:58:f2:c9:61:bd:dc:70:58:54:b5:41:47:af:
         03:45:64:d4:01:ff:70:88:11:f7:1f:5d:6e:1d:25:44:a2:67:
         04:6c:73:2e:bb:7b:16:ec:ba:6b:e1:c8:90:0b:08:f6:10:fc:
         9a:e2:cb:f7:3b:e5:af:19:53:cf:96:18:e4:e9:c7:a9:73:03:
         98:e1:04:c2:62:e6:0e:1e:b6:0e:64:a2:25:b5:5e:1f:a7:5f:
         e7:f6:df:92:91:20:2c:1f:cc:b9:bf:ae:28:5b:0d:b4:1a:f6:
         cd:c9:04:b8:39:1f:ff:d6:2f:56:a7:de:7c:d7:c2:71:bd:ce:
         93:c7:45:b0:f9:f7:17:2e:5e:79:bc:ed:e8:fd:f7:15:06:c2:
         40:e6:cf:ea:14:f4:0b:cc:78:0f:c5:e0:4f:b4:68:0e:0b:97:
         be:d4:32:4d:0a:31:c4:22:19:56:14:dc:8b:a6:d0:a3:19:38:
         bb:97:02:92:7a:67:33:6b:2f:4a:a2:0d:c8:97:fc:e6:b4:bb:
         6c:f4:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:34:04 2025 by rpki-client