This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: CRlikwL7qBow29qQOwIYoHZSDmblrZiercle5QNc2ww= Subject key identifier: 0E:CB:B0:32:EF:DD:EA:D7:C0:6C:B8:2A:FC:B9:C2:65:DF:33:54:E0 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 08D1177E7D66F97EDAD561AA122D7992063CFAC7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 0470 Signing time: Tue 16 Dec 2025 00:04:33 +0000 Manifest this update: Tue 16 Dec 2025 00:04:33 +0000 Manifest next update: Sat 20 Dec 2025 00:04:33 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: OVx48CPfuXaIEGVr9FMlL9dlYB7G9glGjjUFlZe91ww=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: 8x/FcEoBimh16tvLFf6FNMyPbzi6fDflkcTNDfNjPQc=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d1:17:7e:7d:66:f9:7e:da:d5:61:aa:12:2d:79:92:06:3c:fa:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Dec 16 00:04:33 2025 GMT Not After : Dec 20 00:04:33 2025 GMT Subject: serialNumber=0c8a0722c1d2f6120e0efdae73dc72dcb4bfd3acfe9320d297bce669cf6aa279, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:fd:28:3b:56:aa:f8:d4:65:61:c2:05:0a: 6f:4c:19:3f:c2:94:da:d6:ac:3f:89:c9:95:85:e4: d1:cc:26:34:5a:80:9e:88:11:54:32:ef:58:e0:b8: 07:0d:e8:41:aa:9a:d4:82:88:63:6e:59:ff:a0:6b: 0f:93:14:87:e6:83:d6:f5:49:d8:ed:08:69:e2:20: cc:f5:26:28:94:f0:44:78:22:bb:58:bc:c2:83:47: 9e:57:77:0a:e2:2e:68:ce:b4:d8:6d:9e:06:39:67: ac:a8:65:c3:06:fc:b5:96:6b:39:51:51:f4:e9:c7: 68:8f:94:e1:07:8c:07:89:dd:4d:0d:66:e7:08:fb: 4c:dc:1c:e8:7d:9a:9b:19:15:90:1b:34:67:41:4e: 79:fa:f9:94:f0:00:ff:23:f3:63:af:37:3d:b1:34: 52:1f:fc:24:27:2c:8d:3f:15:bf:ff:be:16:09:8e: a2:7e:16:e2:02:f8:0a:32:c5:85:1c:a3:06:d8:e2: 7d:dd:fb:92:f5:71:74:72:b9:13:de:33:8d:f3:68: bb:31:98:f0:bc:3d:a5:e3:e3:a3:5b:61:d2:54:02: 29:23:18:31:1b:05:8d:a2:99:98:cb:a5:93:c2:8e: ae:a0:b4:18:6c:80:28:3b:52:15:67:0a:f1:49:8d: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CB:B0:32:EF:DD:EA:D7:C0:6C:B8:2A:FC:B9:C2:65:DF:33:54:E0 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ed:e2:34:80:14:6f:af:91:3a:e4:41:d7:58:4f:18:8d:29: ba:bc:dc:5e:0c:09:3a:cd:9b:48:25:7b:cb:e7:46:65:0b:37: 08:35:a2:67:44:16:2f:4e:cf:09:28:f6:fa:4c:23:b7:18:56: d2:7e:f6:69:0b:42:02:c0:22:b0:e2:8d:77:ff:13:48:4c:05: 71:76:15:fc:a4:61:cf:8d:ea:29:c5:5e:55:62:bf:f2:0a:20: 1b:ef:51:fb:90:16:2c:5c:85:c4:e2:05:6b:84:f6:2b:63:17: 71:6d:a1:a0:57:79:4d:94:6e:b2:7c:9a:e8:fc:e0:14:d1:7c: 8a:b8:f0:f3:ea:e1:6f:ac:59:3e:a5:ad:48:ab:cf:ec:12:3d: 09:a2:a7:ef:4d:bf:a8:f5:e4:b8:71:a1:5b:07:50:96:53:86: 60:8b:57:6a:54:06:0a:18:1e:c4:25:3b:89:45:f8:c3:07:52: 72:16:a3:ac:00:59:d1:e8:6b:51:89:3b:d4:55:0f:a0:30:20: d3:e9:95:c8:cc:66:0a:b2:3f:7e:9f:1f:46:86:be:e6:bb:08: fa:28:d8:b8:14:35:a0:57:fe:a4:2e:9a:fb:fe:fd:d2:c1:a2: 5f:07:6d:14:c6:d9:67:ff:59:0e:c5:d0:2e:02:50:10:93:11: c4:ec:60:fe -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUCNEXfn1m+X7a1WGqEi15kgY8+scwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUxMjE2MDAwNDMzWhcNMjUxMjIwMDAwNDMz WjB6MUkwRwYDVQQFE0AwYzhhMDcyMmMxZDJmNjEyMGUwZWZkYWU3M2RjNzJkY2I0 YmZkM2FjZmU5MzIwZDI5N2JjZTY2OWNmNmFhMjc5MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLs/0oO1aq+NRlYcIFCm9MGT/ClNrWrD+JyZWF5NHMJjRa gJ6IEVQy71jguAcN6EGqmtSCiGNuWf+gaw+TFIfmg9b1SdjtCGniIMz1JiiU8ER4 IrtYvMKDR55XdwriLmjOtNhtngY5Z6yoZcMG/LWWazlRUfTpx2iPlOEHjAeJ3U0N ZucI+0zcHOh9mpsZFZAbNGdBTnn6+ZTwAP8j82OvNz2xNFIf/CQnLI0/Fb//vhYJ jqJ+FuIC+AoyxYUcowbY4n3d+5L1cXRyuRPeM43zaLsxmPC8PaXj46NbYdJUAikj GDEbBY2imZjLpZPCjq6gtBhsgCg7UhVnCvFJjYu3AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUDsuwMu/d6tfAbLgq/LnCZd8zVOAwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAI7eI0 gBRvr5E65EHXWE8YjSm6vNxeDAk6zZtIJXvL50ZlCzcINaJnRBYvTs8JKPb6TCO3 GFbSfvZpC0ICwCKw4o13/xNITAVxdhX8pGHPjeopxV5VYr/yCiAb71H7kBYsXIXE 4gVrhPYrYxdxbaGgV3lNlG6yfJro/OAU0XyKuPDz6uFvrFk+pa1Iq8/sEj0Joqfv Tb+o9eS4caFbB1CWU4Zgi1dqVAYKGB7EJTuJRfjDB1JyFqOsAFnR6GtRiTvUVQ+g MCDT6ZXIzGYKsj9+nx9Ghr7muwj6KNi4FDWgV/6kLpr7/v3SwaJfB20Uxtln/1kO xdAuAlAQkxHE7GD+ -----END CERTIFICATE-----Generated at Tue Dec 16 12:11:30 2025 by rpki-client