This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          BKLIeYV4Yvo1QLR5Mo66j6LUoKJ6TCA7kPUWIpUsSTg=
Subject key identifier:   42:87:F0:97:D3:D2:46:95:AB:07:89:59:5D:88:EF:61:F2:27:8C:1F
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       7AE0F29A9521F9655F23D9C7FFBF182890D8F178
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0638
Signing time:             Sat 06 Dec 2025 15:45:39 +0000
Manifest this update:     Sat 06 Dec 2025 15:40:39 +0000
Manifest next update:     Sun 07 Dec 2025 18:47:39 +0000
Files and hashes:         1: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
                          2: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
                          3: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
                          4: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          5: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          6: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
                          7: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
                          8: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
                          9: 323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa (hash: M7868WXtqAKmg/2GcYPXHlqzGv673y1NrEBWzHOAn8s=)
                          10: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
                          11: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: UlazUGJJZHmdX5occpglCrOC6AcvTB227e04l2V2A8I=)
                          12: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
                          13: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          14: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
                          15: 323630323a663939323a66363a3a2f34382d3438203d3e2030.roa (hash: 6GBWB4w7LpAqZZsFZ/5hqsbITBZPRg9rgrqjz2AA2Yo=)
                          16: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          17: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
                          18: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
                          19: 323630323a663939323a66353a3a2f34382d3438203d3e2030.roa (hash: dO4GOf8X86hgNTC2If8vBzNuybBxmkNlYTyanbrkRnU=)
                          20: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
                          21: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e0:f2:9a:95:21:f9:65:5f:23:d9:c7:ff:bf:18:28:90:d8:f1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Dec  6 15:40:39 2025 GMT
            Not After : Dec  7 18:47:39 2025 GMT
        Subject: CN=4287F097D3D24695AB0789595D88EF61F2278C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:71:71:9e:29:4e:9e:ba:fc:27:4d:5e:e0:
                    43:f9:01:fe:17:6c:f5:87:79:71:24:33:d4:d8:6c:
                    c7:c6:c7:22:51:d5:86:97:42:cc:1d:3a:fa:f9:03:
                    0f:15:3c:ab:2c:1e:71:6d:1c:29:52:3f:2f:70:1a:
                    55:c2:5b:12:5a:60:93:06:10:49:d5:c4:62:51:2e:
                    99:4a:79:dc:3c:6e:9c:97:33:24:1a:c4:d2:6b:6e:
                    bd:74:5c:14:b5:ab:6a:78:6a:17:33:1b:d7:42:3a:
                    8c:73:6f:32:3d:00:be:6c:2b:c2:98:56:37:e7:bf:
                    ab:53:73:55:f0:d6:e1:cb:4b:ea:d3:e7:60:ba:22:
                    72:99:56:84:ac:76:39:bc:c2:3b:f8:1e:7c:7c:cc:
                    11:ba:e7:ff:72:6b:47:4f:2c:8c:ba:96:b8:c2:59:
                    78:de:4f:e2:2a:7b:48:2c:e5:8d:2a:2e:81:11:0e:
                    1c:cb:2c:5b:12:51:5a:cc:f8:53:5b:81:68:6b:71:
                    2c:5a:1d:be:de:fd:0e:15:08:f7:c3:f8:79:5f:b7:
                    32:e4:24:0e:34:9e:00:bd:8a:ce:33:2a:f9:00:90:
                    8d:4d:dc:eb:0d:5e:be:2a:01:c2:4e:c7:04:a8:73:
                    bc:29:b2:3a:12:c4:2f:75:34:47:0c:e3:fb:f5:8b:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:F0:97:D3:D2:46:95:AB:07:89:59:5D:88:EF:61:F2:27:8C:1F
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:62:e6:32:f8:38:1a:a9:ac:c4:a0:50:fd:a1:ec:28:78:
         68:ba:30:1f:67:55:35:10:b1:cd:0f:a7:18:dd:8b:d9:28:50:
         19:48:3e:21:7e:cd:6c:f9:4e:f9:c5:30:68:37:90:4a:c5:3f:
         85:48:a0:5e:40:08:bc:00:10:5c:8c:ec:25:55:89:3b:2f:58:
         a6:52:ea:9d:c8:9b:3e:f2:19:29:7e:1f:ca:b7:b5:3e:f6:23:
         ae:d4:39:45:32:a7:0a:38:be:48:36:85:04:1f:ea:31:90:8e:
         91:48:e3:02:c6:5f:43:1a:42:f0:33:79:49:66:d5:30:ec:58:
         68:c1:56:99:ee:a2:4b:42:b2:74:6f:91:ec:19:e5:9c:aa:40:
         1f:da:54:cb:eb:48:23:a1:1a:44:5d:3b:a7:e6:f1:67:4d:79:
         35:af:33:d6:c4:08:f3:b8:35:a1:f5:d7:c4:61:69:6d:56:03:
         ab:e4:80:49:a9:08:04:b9:5a:ef:fa:d2:46:d9:2e:a1:c0:ed:
         0d:5c:13:89:76:26:02:ae:27:bf:c2:ff:63:09:de:ce:3b:4f:
         59:c8:1d:68:da:a0:2f:1c:ad:91:38:f8:70:2f:31:64:15:b8:
         6f:40:47:a8:60:7a:33:64:30:39:d8:ff:32:4d:cc:af:95:c8:
         6c:27:78:7f
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUeuDympUh+WVfI9nH/78YKJDY8XgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFi
ODI4MTc2ZmE0MzEwYjYzNTUwHhcNMjUxMjA2MTU0MDM5WhcNMjUxMjA3MTg0NzM5
WjAzMTEwLwYDVQQDEyg0Mjg3RjA5N0QzRDI0Njk1QUIwNzg5NTk1RDg4RUY2MUYy
Mjc4QzFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstNxcZ4pTp66
/CdNXuBD+QH+F2z1h3lxJDPU2GzHxsciUdWGl0LMHTr6+QMPFTyrLB5xbRwpUj8v
cBpVwlsSWmCTBhBJ1cRiUS6ZSnncPG6clzMkGsTSa269dFwUtatqeGoXMxvXQjqM
c28yPQC+bCvCmFY357+rU3NV8Nbhy0vq0+dguiJymVaErHY5vMI7+B58fMwRuuf/
cmtHTyyMupa4wll43k/iKntILOWNKi6BEQ4cyyxbElFazPhTW4Foa3EsWh2+3v0O
FQj3w/h5X7cy5CQONJ4AvYrOMyr5AJCNTdzrDV6+KgHCTscEqHO8KbI6EsQvdTRH
DOP79Yt26QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEKH8JfT0kaVqweJWV2I72Hy
J4wfMB8GA1UdIwQYMBaAFC8PG8Z90rmn4lRWOMFz1ewGDCfQMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5
LTMwOWVkOTdmMzgyNC8xLzJGMEYxQkM2N0REMkI5QTdFMjU0NTYzOEMxNzNENUVD
MDYwQzI3RDAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOTE1ODEwZC1iOTdhLTQ2OTYtOTU1ZC00
OTVkNWQxMmMzYjUvYTFiYTEwOTNiYmYzNDk5MWJmNTlhMzViMmJjYWY0OWFiODI4
MTc2ZmE0MzEwYjYzNTUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzEvMkYwRjFCQzY3
REQyQjlBN0UyNTQ1NjM4QzE3M0Q1RUMwNjBDMjdEMC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAErVYuYy
+DgaqazEoFD9oewoeGi6MB9nVTUQsc0Ppxjdi9koUBlIPiF+zWz5TvnFMGg3kErF
P4VIoF5ACLwAEFyM7CVViTsvWKZS6p3Imz7yGSl+H8q3tT72I67UOUUypwo4vkg2
hQQf6jGQjpFI4wLGX0MaQvAzeUlm1TDsWGjBVpnuoktCsnRvkewZ5ZyqQB/aVMvr
SCOhGkRdO6fm8WdNeTWvM9bECPO4NaH118RhaW1WA6vkgEmpCAS5Wu/60kbZLqHA
7Q1cE4l2JgKuJ7/C/2MJ3s47T1nIHWjaoC8crZE4+HAvMWQVuG9AR6hgejNkMDnY
/zJNzK+VyGwneH8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:37:23 2025 by rpki-client