This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          UHnK+OzCeoIle+HrCizihytOKl7xAzysxs8x/7A3gaY=
Subject key identifier:   C2:54:5E:18:12:3C:63:E4:D9:71:17:53:BA:CB:C8:81:BD:79:8C:D6
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       198FF6B7CA1F2545AB766F6A81282A9AF736DAC5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          046C
Signing time:             Tue 09 Dec 2025 00:36:39 +0000
Manifest this update:     Tue 09 Dec 2025 00:36:39 +0000
Manifest next update:     Sat 13 Dec 2025 00:36:39 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: NUAxblQSneUGnl7JG0zV6WR93mYNJEsJEa6yo2LVjp0=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: klhXxLXwxCM2RZc8Vp8aWp8uNYrwCh2roKHQg9eGo9s=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: KFWfd6l0BShkQZfJ3md5ZQX3cf+majPH2lWSnjRRVjU=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: EBwIaYHr8B4gbGZn8jwOQ5Sa+Dyhx0h95ClHP4WNGxI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8f:f6:b7:ca:1f:25:45:ab:76:6f:6a:81:28:2a:9a:f7:36:da:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Dec  9 00:36:39 2025 GMT
            Not After : Dec 13 00:36:39 2025 GMT
        Subject: serialNumber=e0e63e9b6bdd6bccd301a36f160b66cf44032371a3642713b2dcd2baa8e637e7, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:fc:94:af:e7:1c:f0:b3:a8:a9:aa:a6:50:
                    02:29:68:92:85:1c:f4:61:aa:b0:db:b6:29:a1:4a:
                    d1:40:d1:8a:07:3a:83:34:43:60:6e:64:f2:0b:1c:
                    30:8d:5c:5a:40:d1:7f:cc:59:79:5b:74:cd:b3:5e:
                    9e:b8:7f:79:bb:6e:a2:b0:75:17:b2:81:82:79:c1:
                    39:ef:db:9e:13:e8:c3:18:3c:78:b7:e1:55:f9:cb:
                    ee:3d:60:1f:4e:2d:8a:39:57:ee:d3:7f:3d:26:92:
                    b6:90:03:c4:b7:7e:55:e9:b1:a1:25:e4:76:00:0e:
                    e7:ac:ce:d8:3d:33:86:27:76:8e:e0:0b:67:b3:fb:
                    71:ac:c1:00:f1:33:8c:18:8c:eb:30:1c:e2:43:76:
                    40:66:ab:5b:43:41:67:fc:5f:6a:3e:12:70:36:cd:
                    9a:4b:74:66:ea:b3:b2:ea:99:d1:7d:a6:43:b4:d2:
                    fd:a2:eb:ff:fc:d1:b3:af:a2:ed:2e:4e:fc:6a:4a:
                    44:4f:44:9d:1a:48:82:1e:ca:0d:06:1c:1c:11:e1:
                    6d:36:7b:39:b7:50:03:d1:38:2b:74:e7:b3:98:8d:
                    47:13:b1:6b:d6:6d:da:d9:12:4d:11:f3:d3:a6:db:
                    ee:be:79:c7:f5:48:9c:ae:ff:8d:8b:bd:a1:7f:29:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:5E:18:12:3C:63:E4:D9:71:17:53:BA:CB:C8:81:BD:79:8C:D6
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:16:8b:db:74:15:c7:af:3b:61:00:ba:75:67:74:f6:10:
         13:5f:0b:ce:12:44:d2:ef:35:f7:ee:6f:d0:2e:57:32:79:66:
         1d:4b:e2:aa:1c:10:41:ef:d5:66:c6:4e:a8:f8:0b:e9:3c:bd:
         cf:98:3f:a5:83:14:96:20:e2:a8:3b:a4:38:a7:9e:5f:34:4e:
         87:30:d2:40:ad:a7:8d:26:d5:df:01:e0:cb:64:b2:bf:99:35:
         de:32:90:0b:94:bb:46:37:35:d0:07:4d:cd:7b:b4:76:ba:6e:
         ac:ea:83:c3:d6:df:f6:f8:b2:13:9c:39:4c:90:64:36:78:0b:
         94:7c:8f:2e:4c:7c:69:21:7e:32:51:ae:ae:aa:45:53:a7:70:
         7c:45:44:fc:55:ca:1b:50:36:8f:36:71:b7:51:07:54:89:fb:
         6f:fd:8c:35:4b:35:75:fd:64:6d:43:8f:35:38:91:07:1a:1c:
         3b:e2:5d:6a:1d:55:16:27:5a:91:68:b9:4d:0c:13:21:33:7b:
         54:f9:ad:33:86:8c:57:34:90:a1:1c:81:a2:70:41:25:5c:80:
         36:9e:03:4f:a5:e2:aa:88:b6:85:13:1b:a7:5f:8d:d1:e6:ae:
         07:1a:38:82:17:e6:9f:d8:7a:30:bb:2c:a2:59:08:77:86:84:
         70:7d:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 03:32:20 2025 by rpki-client