This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
File:                     z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json)
Hash identifier:          hqYWf8lkAmKzRXUdKwmunSUhTCrfMc17cwE8nR8xbmk=
Subject key identifier:   83:13:CF:9F:EE:5A:48:92:1B:69:7D:1E:D4:9A:62:70:97:4F:22:FA
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       6D84D3B5833D65E2603BEF767B43DA7CF831E19F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
Manifest number:          0410
Signing time:             Sat 10 Jan 2026 01:23:03 +0000
Manifest this update:     Sat 10 Jan 2026 01:23:03 +0000
Manifest next update:     Wed 14 Jan 2026 01:23:03 +0000
Files and hashes:         1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: yIgLGZbKHo76x90cOjqu/W9B2qwzErx+fOFm07P66R0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:84:d3:b5:83:3d:65:e2:60:3b:ef:76:7b:43:da:7c:f8:31:e1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Jan 10 01:23:03 2026 GMT
            Not After : Jan 14 01:23:03 2026 GMT
        Subject: serialNumber=3d576db6a179abc1177949e77ed32da7d2e76b20bad2081e248712d4235b874c, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:65:1b:f8:3b:2b:9a:bb:ea:e3:0c:35:71:
                    c8:28:9f:53:25:db:76:59:69:21:a8:c1:db:05:3f:
                    cb:0d:f3:ec:d7:9c:99:20:b9:c5:19:94:a1:27:d0:
                    b0:c7:c2:9f:29:ec:df:33:d3:cc:a7:15:d5:32:a8:
                    67:4f:f4:6c:24:10:ff:05:8a:4c:45:6b:5a:f1:c5:
                    01:30:38:80:42:9e:bc:37:30:1a:df:5c:7c:09:b7:
                    f0:30:40:2e:9a:94:1e:25:0d:1b:46:93:40:3d:52:
                    7d:47:cd:8c:24:6d:12:c4:44:a4:1a:33:73:8e:cc:
                    ae:09:b2:78:e2:82:a6:0a:27:13:51:c9:fd:3e:7e:
                    b2:66:3c:7e:84:1a:12:35:22:35:62:e2:e6:91:be:
                    29:3c:47:52:45:9d:63:41:da:6a:6f:aa:94:5d:2e:
                    83:9b:8c:9a:46:96:c0:ab:af:6d:93:9e:79:ee:8b:
                    b6:d3:58:53:78:7a:a4:e1:0d:b4:6c:50:ad:6d:ef:
                    c3:f0:a2:22:a8:06:27:b8:92:11:56:43:35:05:43:
                    83:86:ba:6c:ac:4b:51:16:6e:96:cd:8e:54:79:ce:
                    45:92:c7:66:74:51:b7:42:0e:5c:ec:c4:87:b6:c3:
                    c3:bf:68:81:ca:05:17:6f:da:21:b2:bf:77:29:23:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:13:CF:9F:EE:5A:48:92:1B:69:7D:1E:D4:9A:62:70:97:4F:22:FA
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:30:e2:13:9c:e7:a0:d2:c3:b4:ae:23:e5:f7:b1:4a:07:
         12:aa:bb:9f:ae:19:2f:70:df:c7:65:75:3c:fe:23:07:79:37:
         17:b9:36:03:18:61:89:e2:76:46:a3:98:b1:0d:0f:b1:b7:66:
         a3:a4:dc:26:f1:cb:9f:b8:66:02:22:f6:5a:a7:9e:8f:cd:3d:
         e6:43:4d:8c:a9:4f:7a:c1:70:e3:29:f0:6d:d9:e1:30:85:03:
         c5:b2:3a:d7:20:0e:c9:b6:13:bd:2f:95:4b:b5:88:fc:95:c4:
         b2:12:0d:2b:6c:61:1a:a3:96:99:d2:a8:37:93:3e:0f:4c:1b:
         da:57:ef:ea:58:4e:f7:0c:e3:dd:e3:b5:6b:8d:a4:aa:0b:ae:
         c6:21:13:ce:25:28:2a:23:1f:fc:83:29:c7:c6:30:a0:1b:07:
         a9:80:d7:61:9a:39:e5:5f:a8:69:13:27:bf:b6:59:c6:d6:3b:
         fd:97:cf:60:20:aa:23:fb:12:1d:78:a4:b5:f6:6e:00:76:99:
         d4:a3:cd:09:17:05:52:8f:1c:96:be:92:c8:f0:27:a9:03:4d:
         80:ee:39:3d:c9:5f:39:74:be:67:e9:98:49:a4:7f:9b:a4:9d:
         83:62:a5:5f:22:72:15:38:fb:cd:14:4e:84:06:77:fe:bb:18:
         7e:dc:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:47:06 2026 by rpki-client