This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json)
Hash identifier: 0ug5VCYoQOgX0Zp0cmBH558HzvBQ8lGYyVgYkNJDr/w=
Subject key identifier: 33:E1:2E:28:41:A2:14:10:3A:9B:1F:03:07:2F:8D:5E:0B:8F:4D:98
Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Certificate serial: 01342FD2C82EA322F5577EE56472C6D951CD43F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
Manifest number: 03E5
Signing time: Sat 20 Dec 2025 12:44:36 +0000
Manifest this update: Sat 20 Dec 2025 12:39:36 +0000
Manifest next update: Sun 21 Dec 2025 16:01:36 +0000
Files and hashes: 1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=)
2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: unu/luxAb/cFxAlEANhWDLtWSzlZecB/m1aSu7tiMIc=)
3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:34:2f:d2:c8:2e:a3:22:f5:57:7e:e5:64:72:c6:d9:51:cd:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Validity
Not Before: Dec 20 12:39:36 2025 GMT
Not After : Dec 21 16:01:36 2025 GMT
Subject: CN=33E12E2841A214103A9B1F03072F8D5E0B8F4D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:da:ce:d6:50:85:e0:08:b1:9e:83:5f:75:
11:dd:86:ef:4c:c8:1f:66:6a:01:2f:9b:0e:02:5d:
af:37:05:f3:65:56:78:c1:33:41:8a:d6:7d:d2:d0:
80:32:5d:93:e2:b4:fc:9a:bb:01:c5:2a:c8:f1:2b:
28:52:1c:e3:a1:3f:65:b8:4d:4d:fc:c4:55:eb:1d:
65:c0:bf:1d:a1:9e:5d:a4:ab:78:3b:96:f5:8f:1f:
29:96:80:91:8d:4c:0b:71:2c:63:33:2b:d6:04:96:
33:8b:57:ce:e4:a9:f5:99:ea:e2:96:c0:63:41:f2:
17:8a:8d:2c:ec:b5:7b:1d:4f:1a:98:22:03:3e:aa:
82:ec:70:a9:c7:09:95:55:5e:19:c4:bd:0f:d5:2d:
cd:f4:1c:c6:28:5d:b9:27:bf:55:ff:d8:7d:1d:02:
e5:ae:d2:fe:a3:02:97:c7:44:08:d2:37:c8:bf:80:
f7:db:e5:42:17:33:e7:81:56:aa:9c:1e:3b:aa:88:
7f:ea:70:30:a9:80:35:35:77:5e:e8:35:27:07:6c:
79:0f:ed:5c:cd:46:ad:cd:ca:8c:82:6f:db:6f:ca:
d9:a6:8d:2c:79:e2:19:2f:9f:f8:1a:c0:58:6f:e8:
44:b2:b9:86:43:96:99:be:f9:77:c3:e0:e6:49:19:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E1:2E:28:41:A2:14:10:3A:9B:1F:03:07:2F:8D:5E:0B:8F:4D:98
X509v3 Authority Key Identifier:
keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:09:9b:1d:bb:9f:18:98:fb:02:c0:84:4c:2b:f6:5e:5f:
dd:f4:d9:9b:06:13:27:5e:28:97:29:fe:5a:47:09:ff:e1:e6:
33:ab:9a:1b:c4:c1:c5:3d:5a:b6:3a:63:47:55:61:14:e9:f9:
a7:27:14:ae:b8:a0:bf:00:a5:90:a9:94:83:2f:1c:fc:ec:44:
01:87:d5:63:44:14:c7:86:29:ee:3c:d3:fe:b4:2e:af:44:eb:
34:9c:bc:14:88:05:93:bb:5d:e6:38:69:2b:50:cc:d2:b1:c3:
a9:3d:71:2c:6b:70:c9:28:12:ea:76:10:53:e6:31:ed:2f:bb:
26:83:af:53:1e:08:b3:77:47:61:f4:bf:49:f2:48:1b:da:c2:
50:d5:8d:16:13:39:c8:81:86:da:06:b5:d5:23:2a:37:81:01:
9a:b0:39:81:b6:70:d4:46:93:6c:dc:ab:8d:13:1b:d8:fb:8d:
86:48:c5:c8:b6:a3:7e:0a:40:c6:02:11:2c:ea:73:fc:93:91:
ce:b7:3b:56:e1:c7:31:08:8c:b9:d0:8a:db:12:cf:bd:8a:72:
16:74:0d:bc:d5:1e:a6:03:88:d6:69:ae:3b:65:9c:b1:e0:38:
a6:b1:8b:74:37:02:0b:b4:37:01:58:ad:e4:b1:59:17:43:57:
91:1e:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:07:13 2025 by rpki-client