This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
File:                     C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft (raw, json)
Hash identifier:          fsJdjXbt6IPpZdil6ViTd9ImABAMYLzghRLEeTK5vf8=
Subject key identifier:   60:F2:B4:BA:B2:32:3B:2C:87:D4:99:50:B2:12:E9:C0:2D:F2:69:DF
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Certificate issuer:       /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial:       0429D684AE2C3449162BF6D1155C9BFD6B608352
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
Manifest number:          32
Signing time:             Sun 25 Jan 2026 10:08:10 +0000
Manifest this update:     Sun 25 Jan 2026 10:03:10 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:10 +0000
Files and hashes:         1: C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl (hash: Ai3b1jTRVjrJzdnnMj9dJ71kueDsWQp3iRkeTnoQX7c=)
                          2: AS23506.asa (hash: bhGh+c3Ih2QuOJSgaxNsPUHR8xEaC/v1u3mjsEZ8kHk=)
                          3: 323630323a663730343a3430303a3a2f33382d3338203d3e2030.roa (hash: VK4mFBiOqkQD1y9m/nfx5zbWBqpESEY5LRMhbXtnICw=)
                          4: 32332e3133332e3230352e302f32342d3234203d3e203233353036.roa (hash: XdMcTGnzjuF/TnKu1faa3U3+KL5P/sj4q9nBJvAdx6M=)
                          5: 323630323a663730343a6330303a3a2f33382d3338203d3e203233353037.roa (hash: J9rZjFkJ8d8ZJ5cpUH6RgUs3CDQPd+WqLRed7i2cP5U=)
                          6: AS23507.asa (hash: 8wmdPOBgLqwPxENiOgLKLftZVZ30Mqo/NnpFyui4XKI=)
                          7: 323630323a663730343a3a2f33382d3338203d3e2030.roa (hash: MX9jf4GXqO17otuH0C/uZwF7S6RA6XINVR8eNup20dY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:29:d6:84:ae:2c:34:49:16:2b:f6:d1:15:5c:9b:fd:6b:60:83:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
        Validity
            Not Before: Jan 25 10:03:10 2026 GMT
            Not After : Jan 26 14:00:10 2026 GMT
        Subject: CN=60F2B4BAB2323B2C87D49950B212E9C02DF269DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:fe:64:f9:57:2d:d6:47:9e:39:6b:18:12:
                    0b:64:13:ff:b4:cb:bb:9b:66:e2:18:4c:7c:34:22:
                    33:b9:0c:4a:90:a3:13:9b:c2:49:df:41:a6:3a:06:
                    a0:fa:6e:bc:37:79:0f:d0:05:60:1f:df:9a:3f:9d:
                    c2:92:2a:a9:9a:29:19:68:2e:85:40:49:8d:25:40:
                    6b:74:e9:e9:98:74:22:20:4a:df:92:94:6b:50:4c:
                    e7:20:3b:35:02:5b:3f:45:f5:b4:c2:68:6c:69:66:
                    12:eb:ce:14:b1:44:1e:18:a4:c5:67:5e:af:a4:82:
                    5e:06:71:0b:6d:a8:00:ab:a6:b8:36:44:8c:04:af:
                    9f:8a:0d:2c:76:ff:b4:26:35:22:1d:46:2f:bc:6b:
                    e6:2b:17:ef:bf:6a:91:8e:82:5d:6e:4e:25:a5:cb:
                    4c:18:b2:92:3c:bb:05:f4:a6:6d:4f:6f:1e:28:d2:
                    60:35:a3:19:36:30:1a:53:80:41:43:5e:5f:3d:96:
                    c3:56:c6:07:0c:02:2d:0d:46:86:26:68:83:e1:a9:
                    9d:34:bd:45:6c:69:57:07:64:fe:68:ea:33:18:73:
                    6f:82:17:ed:ce:cd:de:dd:58:b7:44:f1:43:48:b5:
                    39:82:14:d5:eb:de:ac:ee:5a:59:c8:b5:85:46:65:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F2:B4:BA:B2:32:3B:2C:87:D4:99:50:B2:12:E9:C0:2D:F2:69:DF
            X509v3 Authority Key Identifier:
                keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:b1:5a:ea:10:a8:e0:f1:9b:c1:d3:d7:61:bd:4a:02:b1:
         d7:4e:da:6f:b0:f9:8e:d6:93:4f:cd:51:6d:83:8a:e2:78:27:
         ae:dc:58:1a:60:21:7a:f8:28:62:8c:46:bb:9a:26:d6:14:42:
         23:60:0c:f2:83:59:8f:6e:ee:51:0d:eb:2c:c2:78:01:3c:d5:
         a8:ca:67:3e:28:8d:6a:c6:4b:36:72:71:b8:82:6c:25:af:26:
         8d:7f:df:c7:ac:f2:7b:d4:bc:b6:53:b5:30:1c:b8:74:67:f8:
         03:4e:51:5a:32:21:33:d6:c1:5a:22:11:7a:44:9d:78:25:51:
         86:f9:02:a7:8e:fb:24:64:5e:7d:1d:b1:78:bf:36:d1:91:da:
         35:2d:99:6e:37:ed:90:a0:57:86:52:cc:d7:bc:b7:46:1d:7b:
         92:fe:28:36:fb:6b:b9:38:8b:b9:62:40:e6:13:8e:17:56:a6:
         3c:5e:e8:88:e8:1f:82:45:b2:01:33:e6:81:0d:a1:b3:51:f8:
         6e:a5:d4:cc:b4:24:f2:6c:d7:d1:ed:ae:bc:71:f6:1e:6c:0e:
         aa:2c:63:aa:3e:97:21:f4:d0:28:1a:aa:29:2b:c9:14:04:2f:
         ed:f1:b7:75:54:ae:2d:b6:d3:f5:9f:ef:7a:4a:e0:68:48:fc:
         59:5a:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:57 2026 by rpki-client