This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          cBk6q6J8YKkI0gxVvB0H/O/bx2j3j/q8RzoG0sA/yAY=
Subject key identifier:   E0:B2:39:3D:EE:39:66:70:07:B3:D8:03:AF:53:82:8C:62:D9:B4:14
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       01D53CD8A4D16565DF0A5F5F018EC5D0B9E14342
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          063A
Signing time:             Sat 06 Dec 2025 20:23:07 +0000
Manifest this update:     Sat 06 Dec 2025 20:18:07 +0000
Manifest next update:     Sun 07 Dec 2025 23:03:07 +0000
Files and hashes:         1: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
                          2: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
                          3: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=)
                          4: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          5: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          6: 323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa (hash: M7868WXtqAKmg/2GcYPXHlqzGv673y1NrEBWzHOAn8s=)
                          7: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
                          8: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          9: 323630323a663939323a66353a3a2f34382d3438203d3e2030.roa (hash: dO4GOf8X86hgNTC2If8vBzNuybBxmkNlYTyanbrkRnU=)
                          10: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
                          11: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
                          12: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: wHLKX9Oo4Ol0P0Zzn8RXzhhEgz2cYkXEPs/wKLZMkl0=)
                          13: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
                          14: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
                          15: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
                          16: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
                          17: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          18: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
                          19: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
                          20: 323630323a663939323a66363a3a2f34382d3438203d3e2030.roa (hash: 6GBWB4w7LpAqZZsFZ/5hqsbITBZPRg9rgrqjz2AA2Yo=)
                          21: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d5:3c:d8:a4:d1:65:65:df:0a:5f:5f:01:8e:c5:d0:b9:e1:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Dec  6 20:18:07 2025 GMT
            Not After : Dec  7 23:03:07 2025 GMT
        Subject: CN=E0B2393DEE39667007B3D803AF53828C62D9B414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:13:3c:45:c9:84:cd:ec:78:e8:54:c1:64:
                    93:05:8d:8a:93:3b:7d:b2:46:2d:09:45:2d:af:d3:
                    0f:25:9d:72:a3:7b:b5:35:12:76:d4:ab:ef:80:70:
                    6b:f4:9d:be:b3:df:91:d0:d2:69:52:ab:82:ed:ce:
                    25:f7:3e:f3:32:38:5b:b1:80:71:3d:69:90:2f:d9:
                    f1:53:f1:ba:28:15:19:7d:5a:ba:25:69:b6:5e:da:
                    1b:ab:15:f6:26:b4:97:10:a1:f4:1b:9c:a0:c3:0b:
                    7b:54:c4:e1:ff:ab:69:d7:ff:7d:8b:e9:ce:fa:ee:
                    42:82:d9:a8:04:f1:02:09:4e:34:d1:c4:fd:b3:23:
                    b9:7e:a1:91:61:3c:f4:ca:1a:88:ea:68:90:62:7c:
                    1f:55:49:52:3e:cb:13:16:39:8c:1f:bd:df:6a:e3:
                    77:ec:91:08:ed:2b:1d:a6:8a:ad:3f:f2:0c:7e:e5:
                    9c:0b:f9:a7:43:71:2e:1a:c8:34:ef:0f:e6:aa:3a:
                    77:62:75:81:80:ec:ab:d4:e4:1d:4e:5d:87:9d:db:
                    5f:f2:d9:09:65:d4:fb:3e:27:83:24:77:4a:a4:c3:
                    ab:29:c9:03:86:96:1e:35:49:00:fa:a5:c2:24:3c:
                    8e:94:cc:17:58:24:47:49:2a:c1:bc:f0:5f:8e:85:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:39:3D:EE:39:66:70:07:B3:D8:03:AF:53:82:8C:62:D9:B4:14
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:38:62:eb:34:a8:38:29:b1:34:00:ef:53:9d:68:e9:80:aa:
         32:30:1f:37:cf:da:f5:6b:3c:ef:c6:30:01:e9:f0:fa:35:d1:
         d1:73:0c:09:55:fd:fb:2c:3d:79:98:f8:87:95:0c:f4:d2:38:
         20:d2:33:a6:f9:a5:b7:eb:b9:76:7d:ad:39:3c:d2:c1:d6:eb:
         bf:72:a5:3f:c7:00:a8:db:78:5c:1d:a4:7d:3d:d8:bb:9f:5b:
         af:ed:ac:7b:06:f1:0a:ed:6c:bf:49:d8:cc:e4:c4:90:19:05:
         81:71:2c:e6:ab:2c:42:1c:b1:e5:d9:d4:be:13:ee:63:cd:12:
         ff:06:0f:72:ba:ab:c2:1a:26:dd:d4:11:d1:05:34:8c:f9:6d:
         23:96:cd:6c:2c:23:60:51:65:65:c4:ba:90:2b:6c:f3:bb:eb:
         e9:fc:63:db:7d:ac:a5:9c:36:c8:cd:d6:0e:ed:ec:a4:ea:52:
         98:88:26:a3:16:ad:4d:1f:30:72:ac:08:e2:6c:49:a9:03:47:
         a7:77:e8:19:a1:cd:1f:a0:0f:2b:9d:80:c3:6c:3a:91:18:44:
         8e:ca:a8:a6:7c:fd:b6:4e:3a:3f:dc:b2:1e:b2:50:6e:18:29:
         24:1a:9b:c0:55:99:87:06:66:d7:e4:ee:0e:16:4b:15:1f:24:
         f7:0f:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:12:21 2025 by rpki-client