This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File:                     1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier:          YkCTQxoKmzFJ8rCo6wB92VFR/bcMDR7AaGU3uDLRNXk=
Subject key identifier:   70:50:53:8E:D0:54:01:C3:5C:4F:95:C1:63:36:D9:55:BD:3B:FF:0A
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       1398C522DC8E76413A9A0C5F84E35557925BA86D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number:          0186
Signing time:             Sat 06 Dec 2025 01:14:49 +0000
Manifest this update:     Sat 06 Dec 2025 01:09:49 +0000
Manifest next update:     Sun 07 Dec 2025 03:54:49 +0000
Files and hashes:         1: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=)
                          2: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=)
                          3: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=)
                          4: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=)
                          5: AS396064.asa (hash: 9aB6OfxXafAaw+LdCPDg9ldZUjfI/7K0V3Sqjl93zr8=)
                          6: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: Lta29YTGCazEeh3Cnrkbk00pnGYZ+ydtDcbwIPo+ZB4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 03:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:98:c5:22:dc:8e:76:41:3a:9a:0c:5f:84:e3:55:57:92:5b:a8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Dec  6 01:09:49 2025 GMT
            Not After : Dec  7 03:54:49 2025 GMT
        Subject: CN=7050538ED05401C35C4F95C16336D955BD3BFF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:3f:c1:0d:d4:e8:99:6e:27:5e:b4:37:5e:
                    61:a7:e0:3e:f9:72:ca:ee:e1:3f:27:b0:96:98:bd:
                    9c:30:29:16:6a:11:05:80:c5:4d:c3:c9:66:05:b5:
                    4f:3d:30:0c:6d:81:1f:02:44:6f:8c:c2:2e:36:d0:
                    6b:d7:5e:19:0b:2b:7a:d2:57:ee:34:d4:78:2e:b0:
                    b5:71:0c:22:a3:21:38:32:fd:6a:8a:79:bb:1f:29:
                    18:1c:7c:77:4b:d2:44:48:27:0f:b1:aa:09:0e:ab:
                    6c:10:cf:46:4e:12:a7:8e:47:69:d0:f3:98:44:52:
                    55:d8:94:ea:68:53:ac:8e:03:50:b6:23:54:f4:e9:
                    8f:d8:09:28:da:48:c0:4d:ef:87:c8:70:6d:05:79:
                    38:ad:cb:b6:3b:84:79:82:83:1c:d5:eb:e8:a9:b0:
                    0b:e8:96:6c:8a:a2:ca:3d:59:cf:55:40:ed:f5:a5:
                    64:a9:be:4e:ed:b2:d8:3e:d7:d1:44:0e:a5:9a:ae:
                    e6:28:08:e7:86:8d:c2:32:45:ff:28:7b:c2:33:32:
                    3c:3e:ea:f6:c6:de:c4:92:10:32:81:7e:41:a3:12:
                    bf:19:eb:b0:8e:4d:2c:48:b0:11:a1:b8:dd:4e:eb:
                    e8:cc:2f:ca:44:72:f2:a3:a8:36:9c:ec:23:5b:0f:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:50:53:8E:D0:54:01:C3:5C:4F:95:C1:63:36:D9:55:BD:3B:FF:0A
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2d:0f:25:10:76:40:b2:87:92:6a:11:d8:ab:f7:1e:2b:80:
         f7:af:a1:9f:33:96:e8:c6:59:77:ce:81:e4:e4:83:ff:18:2f:
         d8:66:2f:62:c1:94:79:2d:8b:89:16:42:c0:3f:f8:d6:0c:9a:
         9f:fd:9e:cc:d0:15:30:b0:76:85:12:d3:41:78:08:f8:8f:80:
         db:36:13:ab:19:08:4d:2c:20:ee:d4:a6:45:22:2b:e8:b0:f5:
         c2:e9:4f:f2:29:8d:b2:50:62:63:74:f6:8e:aa:cb:39:2a:75:
         56:d7:ff:d9:a2:90:5c:f9:dd:6a:62:e7:bd:ed:50:d5:fd:b1:
         98:da:35:c3:12:88:57:04:db:4b:dc:00:41:3f:91:32:76:7b:
         0b:10:4c:a7:63:f7:3b:18:ea:95:07:24:b2:fc:58:7f:89:1f:
         f4:23:20:a9:8f:d7:fa:bf:71:03:86:a2:50:94:db:80:aa:eb:
         fa:80:5d:19:93:ac:c0:c5:eb:2f:e4:90:f5:22:78:d4:6f:09:
         60:57:ea:12:a9:84:a9:ff:f1:cb:9d:5c:e6:83:a3:1c:07:72:
         ec:53:c0:be:55:53:7c:d8:90:7d:51:5d:26:0d:af:9c:a9:4c:
         50:79:77:5f:99:f6:48:cc:c8:46:c8:14:a0:65:c2:3f:e5:12:
         aa:1a:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:06:42 2025 by rpki-client