This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          h2Ikjgj6CspDnA51lq0kLw95zrgdZ/PEl/EDHiMyb5c=
Subject key identifier:   FE:77:90:B5:56:AB:74:89:8A:7A:22:C6:01:C5:62:CC:8F:63:D8:1A
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       708C09154871F33A3EB5DA73A36DFA377F52A561
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          0465
Signing time:             Tue 02 Dec 2025 00:35:16 +0000
Manifest this update:     Tue 02 Dec 2025 00:35:16 +0000
Manifest next update:     Sat 06 Dec 2025 00:35:16 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: NUAxblQSneUGnl7JG0zV6WR93mYNJEsJEa6yo2LVjp0=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: +uEPgAG5Q4Egi9K3LwOI1q2ceFMwosQULGyc8eE+s70=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: KFWfd6l0BShkQZfJ3md5ZQX3cf+majPH2lWSnjRRVjU=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: EBwIaYHr8B4gbGZn8jwOQ5Sa+Dyhx0h95ClHP4WNGxI=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8c:09:15:48:71:f3:3a:3e:b5:da:73:a3:6d:fa:37:7f:52:a5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Dec  2 00:35:16 2025 GMT
            Not After : Dec  6 00:35:16 2025 GMT
        Subject: serialNumber=4e9204b72c5e2e25e744c0e25de3d0dbccba4d4d85bba2f09d8b088cf19db43c, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3a:e5:56:4b:35:aa:ba:05:38:79:65:77:b2:
                    38:6f:fa:89:83:01:c7:b0:e0:39:3a:2b:70:50:7f:
                    6d:12:8a:3a:67:6d:e7:13:89:55:4b:f2:93:16:9b:
                    13:e7:7c:c1:33:2f:6b:07:f9:ee:de:b1:1c:9b:ee:
                    bb:2c:6a:8a:ab:1f:41:23:95:1e:9c:35:02:0f:80:
                    28:e1:63:d1:92:a9:77:02:48:48:72:b8:0e:b1:f6:
                    11:b5:c0:bc:79:d9:75:d3:e4:0e:83:75:bf:c1:87:
                    8c:3c:37:13:5a:78:08:f9:92:ca:ff:40:a7:78:8d:
                    ad:6b:4a:c5:7c:0d:80:fa:88:9e:9a:3d:74:e5:19:
                    a2:05:e5:ae:ee:80:0c:fe:c9:56:b1:94:c1:53:df:
                    f7:ef:67:af:49:f1:74:4a:27:d3:30:2f:b4:bd:b3:
                    3a:95:81:63:13:e8:32:cb:29:31:c6:f6:61:0c:70:
                    3a:fa:f0:6d:da:73:e2:5d:f6:53:5b:17:d6:97:7b:
                    ab:1f:de:a8:dc:23:fc:0a:a4:18:b8:20:61:73:a6:
                    a0:4a:18:0c:36:2d:26:e8:58:dd:01:0b:ce:9b:04:
                    fb:c0:f2:26:7c:bd:46:d8:c1:b5:2b:73:ac:7a:e1:
                    e4:27:01:82:9e:34:ef:f0:1e:82:86:76:49:2e:10:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:90:B5:56:AB:74:89:8A:7A:22:C6:01:C5:62:CC:8F:63:D8:1A
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:55:bd:00:92:57:32:e3:1e:a1:66:d4:6b:93:c6:ac:58:
         21:30:c8:76:d3:8e:ef:b9:77:52:64:de:04:61:71:8d:b2:4b:
         79:7b:19:dc:f6:de:dd:f1:75:60:a8:fd:99:d7:ab:7f:b8:9a:
         8f:44:ef:5e:67:1a:d0:fd:f2:6a:a6:3b:f1:8a:40:5d:94:17:
         f8:ae:33:b4:47:98:50:66:54:9e:9d:04:38:7a:a8:e6:90:a6:
         9d:23:be:6a:32:c6:f4:49:69:ee:62:98:be:91:13:9f:cd:cc:
         d9:81:e9:16:c1:af:bd:7b:00:8e:91:f0:2b:95:bd:04:e4:5f:
         91:83:b6:fb:88:d0:26:aa:d3:b5:b4:10:9c:2b:36:68:2b:92:
         de:7c:c2:16:d5:5b:ed:8d:26:9f:5a:1a:26:28:23:8c:72:46:
         26:b2:c8:bb:6d:33:b6:a4:ea:5e:a8:19:19:d2:8e:99:00:60:
         c0:39:a0:d8:e8:56:a1:d2:37:c1:98:95:59:9b:e3:08:2f:b1:
         00:06:bd:46:2a:a1:a5:6a:13:57:ef:2f:77:83:90:bd:3b:58:
         6a:54:af:e8:07:22:d7:7d:76:5d:2f:c1:78:da:d6:ea:01:47:
         fa:90:b9:93:3b:c9:38:35:1e:33:5d:fa:99:2e:64:38:72:0a:
         28:af:16:7c
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUcIwJFUhx8zo+tdpzo236N39SpWEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5
MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjUxMjAyMDAzNTE2WhcNMjUxMjA2MDAzNTE2
WjB6MUkwRwYDVQQFE0A0ZTkyMDRiNzJjNWUyZTI1ZTc0NGMwZTI1ZGUzZDBkYmNj
YmE0ZDRkODViYmEyZjA5ZDhiMDg4Y2YxOWRiNDNjMS0wKwYDVQQDEyQxNWYxNjgz
YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkOuVWSzWqugU4eWV3sjhv+omDAcew4Dk6K3BQf20Sijpn
becTiVVL8pMWmxPnfMEzL2sH+e7esRyb7rssaoqrH0EjlR6cNQIPgCjhY9GSqXcC
SEhyuA6x9hG1wLx52XXT5A6Ddb/Bh4w8NxNaeAj5ksr/QKd4ja1rSsV8DYD6iJ6a
PXTlGaIF5a7ugAz+yVaxlMFT3/fvZ69J8XRKJ9MwL7S9szqVgWMT6DLLKTHG9mEM
cDr68G3ac+Jd9lNbF9aXe6sf3qjcI/wKpBi4IGFzpqBKGAw2LSboWN0BC86bBPvA
8iZ8vUbYwbUrc6x64eQnAYKeNO/wHoKGdkkuECbrAgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQU/neQtVardImKeiLGAcVizI9j2BowHwYDVR0jBBgwFoAUbcpl0HFNfvJW
kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01
NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0
ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm
NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4
NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6KlW9
AJJXMuMeoWbUa5PGrFghMMh2047vuXdSZN4EYXGNskt5exnc9t7d8XVgqP2Z16t/
uJqPRO9eZxrQ/fJqpjvxikBdlBf4rjO0R5hQZlSenQQ4eqjmkKadI75qMsb0SWnu
Ypi+kROfzczZgekWwa+9ewCOkfArlb0E5F+Rg7b7iNAmqtO1tBCcKzZoK5LefMIW
1VvtjSafWhomKCOMckYmssi7bTO2pOpeqBkZ0o6ZAGDAOaDY6Fah0jfBmJVZm+MI
L7EABr1GKqGlahNX7y93g5C9O1hqVK/oByLXfXZdL8F42tbqAUf6kLmTO8k4NR4z
XfqZLmQ4cgoorxZ8
-----END CERTIFICATE-----
Generated at Tue Dec 2 02:31:55 2025 by rpki-client