This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
File:                     652C0199E6562FB6119E25923016982629C2108D.mft (raw, json)
Hash identifier:          CrFRFEzl0JwCJWnmTERpiQcGgk8rkHgRiHscHYqRRiI=
Subject key identifier:   AF:C4:A2:58:5F:27:E5:5C:30:E4:E4:AB:D3:64:0A:ED:13:6E:3B:99
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       19CECBF5DF2B7EE6233BA8DF895A8AA47E9FB2D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
Manifest number:          68
Signing time:             Sun 25 Jan 2026 06:04:51 +0000
Manifest this update:     Sun 25 Jan 2026 05:59:51 +0000
Manifest next update:     Mon 26 Jan 2026 06:53:51 +0000
Files and hashes:         1: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: t859eM/21Ihz32sEe0c1AsW78lvki7bEFnJsJ550pww=)
                          2: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: kAoBY+HPJ+v2B5y0tTwW0KdPdiz3ZVlVKWhx52C/bb0=)
                          3: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (hash: wNF04zTzM01ZsoUyNOrqB+433Orn6dMaQ3nxpWytFbE=)
                          4: 323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa (hash: YX1mxzfkZu8LGScEYjaMn4TI1hSQfjHgcc9tVmbWEew=)
                          5: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (hash: 2HgLzd+gynGabzidkPluIBMAmXgeRg5AWmNASYFvWAg=)
                          6: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: eYJ5D/9jy4JCP/LWnKkem2A6/sqvpj4yLievQ5xZkqc=)
                          7: 32332e3137352e32342e302f32342d3234203d3e203533383038.roa (hash: 3g+bm1Ov3KS4q8fCecAmN/EtcwCqqHTyfkZNmIpgPag=)
                          8: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: Jp73CAhT8X4qbMvWPriH8XdxbLv++q2700sN8D3HLOc=)
                          9: 323630323a663932613a613030303a3a2f34302d3430203d3e203331383938.roa (hash: 77ENf7sW1BYWlrZsuPT4kCCM20ORkMmn120RBw4rXco=)
                          10: 323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (hash: mTj4Kpj9skM4imBRREZv8jcja5D2jsvUqRlIxwoc3SI=)
                          11: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: D17tZy0W46+eBaikW356HvxnGVw+z5QvhP9P2uKPsGA=)
                          12: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: EVy9CWEs34kEUh8TkA4Rmz3njW+txDVeXC4tnInrqdQ=)
                          13: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: /qmxO62TEMzZ2vSC6btQrvhe0ZmEtLUcutZduW5u2X4=)
                          14: AS53808.asa (hash: WAEZrHuRhdK1Z36FrLyWoQXwLDK1zrdvX2vbKzmSJsU=)
                          15: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: 2EGlmklKNEj2X3VAACc5ImzmapK/a+f/dwpE/uH21pE=)
                          16: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 0Pqy++OUhFsmQuylEZfhVLwMq0m790qyN5/JFrzL8g8=)
                          17: 652C0199E6562FB6119E25923016982629C2108D.crl (hash: 25qjyLWWAohQUO4XXylHgcrmJA9lT/OIQOWuYJ6/0Q0=)
                          18: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: 33uUixA0uJZoNLjO6KgeYE3kw/aA7v5tf1atLI8laIQ=)
                          19: 323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (hash: nHGY9JwHA1gV3ZB01r0NsQMlXvaKKqpqjnW3pCpd9Fc=)
                          20: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: VR8n5OiM1XagsyzshXLRVRO8kZHjcaV2UvwohfY+qAQ=)
                          21: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: +hGf1zwD/VOsHCtsdJm6vjqzA9Qar1hq3f+g1LScl20=)
                          22: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: 5jdaGtzWyEuE6pwfQTMlcahgSsIJf1oc0wSJrUGoFWM=)
                          23: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: d+oVpHutbFyQRry0VWAIg6yAHPeo2/Kc+Lvm+iA5ji0=)
                          24: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: HuKbQrOvcjKaYoy37BUB5dGKW0EZLAtznzlUcwdKtQQ=)
                          25: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: 4FkS6cxLOa3BJuHaPuW7A4f2/YG2W6yW4OgbVOHPnHE=)
                          26: 323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (hash: QXjsuQCqZvo7gSFq8pe5a2qbRx0ksORhzu/TOa4aKlE=)
                          27: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: JA+7vvkApnndXq6JQ4v/gpd5o6G7r0mhztl1imiG/Sc=)
                          28: 323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (hash: BLqZYyTalxRWLkSRCH3NbfzX0BV/EB7yx8snEAYqCaA=)
                          29: AS40929.asa (hash: FtGCbRkrWas9p3eUjhdMEWMC8DERziA5T8Vyxb3mP9U=)
                          30: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: 77eb0TAjk47MkAe5OX0t+bmIiF/5o238LUqAq2w/M6s=)
                          31: 323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (hash: ZTuzUBd8F+6HeeOFmS8JC85pek1UrzJEnRIsKAeVglc=)
                          32: AS198304.asa (hash: Q1oyH2RltJZtkfYMhSd3sdrsTyKEQcU+rFa23ibSyfQ=)
                          33: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: gY/kBif7jhVfPZuIqYEp13QW/DiRe/GtQlvuralOCJs=)
                          34: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: X4uCLc+QUi4BlYjs6hSIP26jH4L3kRKB3mx5SEMVmvs=)
                          35: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: BYOSvSzHK3d/aeAGCn7LrqqSyr0aELRrR6V1K4HBENw=)
                          36: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: p2TAJ+SoheZVgt720I7qYK/LH2/2CMUTnLeIel9iBps=)
                          37: 323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (hash: 7bJdTrlT6VfYPtZ524N64q5rra/HSG/apOSRN+7RXaM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ce:cb:f5:df:2b:7e:e6:23:3b:a8:df:89:5a:8a:a4:7e:9f:b2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 25 05:59:51 2026 GMT
            Not After : Jan 26 06:53:51 2026 GMT
        Subject: CN=AFC4A2585F27E55C30E4E4ABD3640AED136E3B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:e1:d9:d8:23:2b:19:f0:d5:6a:e5:8d:61:
                    a1:2e:f0:43:d4:77:94:ac:f1:72:8d:f8:d4:4d:18:
                    34:fb:d2:60:c7:9e:3b:42:84:51:96:25:ee:46:24:
                    45:e0:de:59:de:b0:a4:43:8f:40:36:d3:a6:a0:e8:
                    ba:3d:4a:dd:d6:f0:78:86:0f:eb:94:d6:ed:23:0b:
                    1f:18:eb:29:c5:6f:51:19:7d:a7:c8:ac:9c:48:f5:
                    99:a5:d6:16:8c:6a:0e:f5:72:f5:4b:c2:5e:0a:19:
                    4e:93:f7:db:d0:2e:cf:63:69:b9:af:f0:86:9d:26:
                    49:cd:8a:92:36:11:7a:57:09:6f:4d:f7:15:db:cf:
                    11:a9:4a:00:37:10:5a:fd:c7:2f:30:24:0b:06:a0:
                    0e:93:80:a5:f5:45:86:f3:1a:47:e6:7c:0c:76:d8:
                    5c:a2:1d:2b:82:1f:09:4f:33:2d:a7:c8:95:f6:c3:
                    18:bd:0c:51:92:b4:c4:35:ba:3a:64:92:b8:5d:3b:
                    0c:d5:03:21:f1:2e:90:3f:ef:87:b5:c9:50:e6:57:
                    f7:47:cf:11:00:09:e0:c6:89:3e:4e:86:47:d9:76:
                    51:ad:da:c5:d2:6f:44:b2:11:8c:32:2f:62:45:03:
                    03:b9:6f:88:07:3a:bf:cb:99:17:34:43:80:61:e2:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C4:A2:58:5F:27:E5:5C:30:E4:E4:AB:D3:64:0A:ED:13:6E:3B:99
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:f3:ac:0e:62:e7:88:ae:6b:0e:70:c8:e7:8e:33:95:c8:
         b9:c3:c0:f1:b0:9b:e3:63:cf:f7:a3:3a:c0:fa:e6:29:38:76:
         21:1e:60:57:f9:9e:d1:45:23:d7:a9:ea:eb:0e:04:fd:73:01:
         22:76:ab:a0:94:3e:e4:69:02:3d:4f:9a:ff:7e:ed:8f:bb:e7:
         f2:73:df:86:ac:91:b5:32:d7:a6:b6:0e:2d:97:fe:a0:b3:16:
         44:7b:4f:70:a0:e9:7f:ae:c3:e0:f7:19:e0:49:09:d4:d8:6f:
         95:06:6d:59:d3:7a:58:88:f8:1a:e4:9d:88:0e:3a:1e:bd:72:
         59:0f:e2:be:db:48:14:ca:5b:32:53:66:14:7e:3a:bc:e5:db:
         e3:76:46:55:3c:47:a3:36:e6:62:d2:15:4e:36:6a:61:2c:25:
         ef:a3:4f:37:53:a0:5f:37:23:8f:89:5c:50:f5:4a:03:59:fb:
         90:c8:d9:de:63:45:4c:c8:9b:c5:3b:26:20:41:41:63:69:cd:
         75:72:46:80:c2:88:a5:72:2a:5b:50:f4:0b:78:b6:05:34:f1:
         39:c3:6a:bc:94:ad:db:cb:45:ac:58:36:18:7c:63:e3:bb:01:
         07:a0:18:db:cb:ce:9a:aa:2f:eb:16:44:89:bc:51:d6:f5:71:
         1e:de:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:13 2026 by rpki-client