This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File:                     6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier:          r+PQfjddLZJpf0XHAg82SKczpK1W7laBm9NJfo9KpuQ=
Subject key identifier:   DF:CC:B6:DC:2E:92:3D:7B:6E:D3:D2:60:66:9E:05:38:13:BD:6A:E6
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       7474B52889F10D494AEB8552DE3049C5A3412CC3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number:          0480
Signing time:             Thu 29 Jan 2026 06:02:26 +0000
Manifest this update:     Thu 29 Jan 2026 05:57:26 +0000
Manifest next update:     Fri 30 Jan 2026 06:48:26 +0000
Files and hashes:         1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: G0OxTKdm808eWxWrzH1uByZAqFOiZ1B6qoDuMD3wYF4=)
                          2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
                          3: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
                          4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Jan 2026 06:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:b5:28:89:f1:0d:49:4a:eb:85:52:de:30:49:c5:a3:41:2c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Jan 29 05:57:26 2026 GMT
            Not After : Jan 30 06:48:26 2026 GMT
        Subject: CN=DFCCB6DC2E923D7B6ED3D260669E053813BD6AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:13:de:20:d5:26:67:45:84:71:68:6c:b6:
                    65:4c:20:b0:9f:21:98:f0:c0:84:fd:a5:58:97:90:
                    a9:a9:26:4f:48:b4:70:c6:ec:8a:6e:a5:6a:47:e0:
                    b6:a5:23:a6:2a:a8:96:24:ec:fb:93:4f:2b:ed:2a:
                    33:dc:26:bd:0c:6f:7b:59:6e:ca:72:fa:d9:1c:f2:
                    29:af:29:eb:39:2a:38:e7:cb:74:2c:59:4d:a3:ae:
                    ed:2c:88:80:78:a2:22:82:1e:9c:c8:91:d3:cc:b0:
                    5c:f1:21:11:19:8b:15:49:88:c9:85:b8:ac:b9:af:
                    6b:81:b6:e7:20:af:86:7f:f4:22:07:b0:fe:37:20:
                    54:12:4c:bb:02:77:73:af:f0:06:b6:0a:9c:4b:dc:
                    b3:35:15:7a:2e:c9:38:02:13:fb:0c:54:b5:5f:9f:
                    e9:bd:38:83:1a:a0:01:b1:ab:b9:c8:b9:58:12:14:
                    87:01:f5:48:fe:df:8e:77:31:d7:64:54:00:f7:18:
                    28:1b:4c:d0:3d:71:07:30:8a:62:eb:bd:90:2d:d8:
                    d2:1b:ed:d4:3d:b3:91:84:b9:c3:9c:d5:fd:1e:18:
                    20:73:4a:ab:55:7b:96:59:af:4c:31:00:60:b6:c3:
                    2c:20:17:cc:fd:5d:b0:61:4c:b5:55:33:af:48:7a:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CC:B6:DC:2E:92:3D:7B:6E:D3:D2:60:66:9E:05:38:13:BD:6A:E6
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:1a:65:1d:87:12:31:15:98:6d:f9:b9:d2:de:22:b7:0f:
         5a:bc:c6:43:d4:17:33:ec:a1:4f:0b:3e:94:46:0f:e5:0d:9f:
         a9:b1:82:62:9c:b7:4b:d3:3c:b8:ce:11:af:d7:0c:6a:64:ac:
         c0:af:96:9b:41:6a:37:75:58:90:60:51:c3:30:33:c6:cf:d6:
         4b:3b:26:c4:75:b4:ab:cf:4c:97:44:aa:47:1f:cf:fa:ba:6e:
         87:5e:77:59:35:20:1d:72:03:51:70:48:73:ea:f9:5e:0d:10:
         05:ef:59:df:5e:d4:3a:d2:a1:a2:53:89:32:90:5b:2f:79:31:
         b5:d7:37:8b:55:93:bf:41:b7:16:8f:1b:e7:b6:c1:90:6f:85:
         85:53:d5:e5:a4:19:7d:91:dd:46:4b:d6:7b:ce:3f:f5:52:e7:
         48:0c:98:ec:b4:f3:4f:6e:af:a0:3a:95:a9:fe:9c:12:86:f1:
         a2:ae:79:f9:54:26:f4:97:6b:96:70:4b:d9:ce:6b:e1:37:ad:
         3d:d1:58:4d:fb:48:05:6f:92:1b:58:f4:29:56:56:9f:92:be:
         8c:7e:3d:70:2f:d0:3e:17:62:d0:49:25:a5:05:a6:d3:36:c2:
         5e:d0:19:e5:1c:5a:1c:d8:4b:b3:e7:4a:f0:8a:4a:aa:00:ca:
         46:05:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 21:23:26 2026 by rpki-client