This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
File:                     n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json)
Hash identifier:          CI1oTxjw4BJlU119cI+OvKBB8QKD4NaryApzpKKXsWQ=
Subject key identifier:   65:06:9A:EB:81:85:DB:96:73:E0:87:56:F4:DC:06:59:D2:5C:6F:A9
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Certificate issuer:       /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial:       2F1682C65842E2D3728B5D89C53A94E0D8BD4B49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
Manifest number:          DD
Signing time:             Fri 19 Dec 2025 00:12:58 +0000
Manifest this update:     Fri 19 Dec 2025 00:12:58 +0000
Manifest next update:     Tue 23 Dec 2025 00:12:58 +0000
Files and hashes:         1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: y20aXrI+eNDOG6od7OxjOrLX+UG/nRzLA/TtDllCYs0=)
                          2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: L9oJqbmD1vFZW/a2la5u//Rx8WPzUda4GOYT0MAf0rE=)
                          3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: OPQnK+ExAZ65RXucwyUA7ACV57O/Vf0Ft5TgdyoRaBg=)
                          4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: irGiXFRUFAKWuWWKz40rRFEdj/riGkH1rKq0RC8R5/4=)
                          5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: +7odOGAixFZkzpnQ/em6sNvldWnEircDk5I3XCMkvjA=)
                          6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: lgtN2ykAtQoLOZeOAG1RRJIVFe610eXIuBktL4rzoxQ=)
                          7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: UVmOHEeOsEK5xfoXGjqEXEP9IATX36+fWroTdevPII8=)
                          8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: rrm9U4u3ThkdFftHCdHeXpPWUS7M6nU0k3ZwDAJ4Uz0=)
                          9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: CzL3tXlFl1NHZQYwsCmhXonhIOFJJ2Y3nwhw1+fjBag=)
                          10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: pAG73moofledSjquc8DWf09esuI72iQHtzftWS9IKWo=)
                          11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: u8AYgH+x5cLgMLVWOowaB2fv3RDvf06tnBTy4f+458I=)
                          12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: QZx14X+lxrX1wm7nOXl4GBewfeITfBtxdybSz1SZwwM=)
                          13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: jc7/IOHd5Kaf24z/iYKne1QcbMY146jH/vPKcafKmLc=)
                          14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: YgjE8pKxx3pgo4WvQqgb7IU7wqopZIVNnFA3We0/WVg=)
                          15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: jOirw4cWyeJOf4VdGHdGSjtW73gU6CW1pqo5iV8NBoA=)
                          16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: GX6D4EMLfoaMnpBeGAjAjszZFBVsp1t7Dy13B+dgmSg=)
                          17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: +QFUAFtbgypWwpZgec+z4qNlEokU421haR3DZrtrSQU=)
                          18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: ON4/5pKSjLYc9t60D3zXb10FtuJJxM3MJFY654OJK/4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:16:82:c6:58:42:e2:d3:72:8b:5d:89:c5:3a:94:e0:d8:bd:4b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
        Validity
            Not Before: Dec 19 00:12:58 2025 GMT
            Not After : Dec 23 00:12:58 2025 GMT
        Subject: serialNumber=def5ec2d21d2b2e2326302909afb89dbf4c39e1b56b851537c9e3c8abfd00ebf, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:99:9d:96:0d:10:0c:7e:2e:61:53:fa:60:
                    58:0e:25:3f:e3:d8:90:b4:7f:71:82:de:a4:5c:28:
                    c6:12:74:62:00:d4:58:dc:68:74:1e:b1:9b:ec:17:
                    3f:73:99:a7:7e:62:66:cb:46:9d:be:b0:fd:8e:a5:
                    b6:94:53:af:c0:1e:23:8f:88:a3:66:86:e1:45:ac:
                    fa:bd:cb:28:37:0b:e1:df:35:d3:3c:72:14:00:3f:
                    93:2d:7d:63:41:21:a7:03:94:29:4f:3a:9f:1a:f6:
                    38:22:dc:74:0f:49:33:59:5c:4f:1e:d7:c4:3f:5e:
                    de:9b:f3:5e:74:f5:ba:1c:c1:c3:8e:65:5c:7c:df:
                    a7:02:f5:7d:8d:d1:4a:a4:93:61:16:0a:ae:24:59:
                    d7:27:f7:e4:2c:75:f1:bc:f6:e1:24:f0:92:62:b3:
                    ac:94:b9:9d:25:29:33:02:e0:47:76:47:77:0d:79:
                    ca:c5:7d:0e:07:0f:1a:75:9d:0f:fe:ed:13:fd:f5:
                    d0:24:30:04:31:9c:69:c3:ff:92:22:71:7a:1c:a8:
                    79:4c:59:09:28:c2:db:ed:49:9f:be:15:73:43:7e:
                    a6:b0:e7:e0:1e:be:00:17:4f:35:20:33:aa:97:95:
                    de:65:6a:0b:84:f5:5d:c4:17:9e:e2:0a:8b:ee:37:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:06:9A:EB:81:85:DB:96:73:E0:87:56:F4:DC:06:59:D2:5C:6F:A9
            X509v3 Authority Key Identifier:
                keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:ab:1d:fd:bb:62:dc:5f:45:45:fd:e0:67:e0:ae:8d:0e:
         71:f8:57:f2:32:07:1f:28:99:62:c7:a2:05:35:f1:a7:5a:05:
         67:1e:30:1d:24:20:a4:d8:2e:79:5b:da:75:2a:d6:35:b7:a6:
         9d:9c:71:d9:7f:c0:1c:7b:04:ac:33:c6:73:d7:90:e3:50:43:
         00:dc:e6:4c:85:32:96:98:8d:a8:a3:a3:3b:92:33:ca:66:03:
         e1:0e:cf:15:ec:13:d1:b6:75:16:b7:9b:e0:03:9d:5b:ef:fb:
         2f:27:ab:2a:b8:62:99:05:de:b3:ff:89:d8:6b:e9:9d:2b:43:
         c6:d0:4f:70:b1:12:ab:dc:1b:fe:63:61:97:68:05:12:24:7f:
         09:e3:29:ed:11:a4:90:03:ed:77:af:ed:38:f0:96:1a:bd:a0:
         b1:d2:20:03:f1:f7:64:76:d9:53:d2:27:6a:77:f5:20:44:d1:
         19:cd:e6:a6:6d:59:52:56:de:d7:17:46:fa:50:5d:fd:f9:25:
         d2:ec:42:95:2b:dc:0c:95:ba:6f:70:8d:0a:92:80:1c:c3:a1:
         d1:08:c8:e5:0d:d1:42:a5:bc:e4:ac:d8:00:12:f3:e7:ba:0b:
         7c:cf:8c:66:36:bc:7b:40:dc:af:99:72:ac:74:4f:11:30:86:
         1d:76:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:43:15 2025 by rpki-client