This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          RImxII44dXpNixlqGEKIUtDszel53eq3E/jlOP/hvf8=
Subject key identifier:   C9:0C:86:9D:45:D3:D9:D5:6D:E7:D8:43:D0:2B:97:E2:8B:6B:26:11
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       77E96AB020D1BF61772D0CF51E524BDFFFAD229A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          0657
Signing time:             Thu 11 Dec 2025 13:57:24 +0000
Manifest this update:     Thu 11 Dec 2025 13:52:24 +0000
Manifest next update:     Fri 12 Dec 2025 15:32:24 +0000
Files and hashes:         1: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: sRvK25+z4/XzVzRz/NRjDVLoeu4AhidYEGZ8Z4be+vU=)
                          2: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: NUE/UX3oXJFnmyAE2FoTGPVQs404K4mf9BK/aBACO14=)
                          3: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: s0tjGNQz3a0IJwtqI+yV2w0ziifnk/CWeyQrn3w3/qg=)
                          4: 323630323a663939323a66633a3a2f34382d3438203d3e20343031383132.roa (hash: WWuZlGD19cauNNFGP8lkHygPrhsjx/40EDpoW/B2wUc=)
                          5: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: A4cF0ty5P/9GDFkJfDt0K7I3rK4y9lvpqW6f8na/ZII=)
                          6: 323630323a663939323a62303a3a2f34342d3438203d3e20323039383734.roa (hash: M7868WXtqAKmg/2GcYPXHlqzGv673y1NrEBWzHOAn8s=)
                          7: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: Fgcu73F4DxRvaLksBuPTG0jHcKxfTvgmmVGQl4chyzs=)
                          8: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
                          9: 323630323a663939323a66643a3a2f34382d3438203d3e20343031383132.roa (hash: 59uZAy7XXfBP2lTYymBUstkE3+Fixf8c03kHK/e8F/o=)
                          10: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: ofYyhY8QxgV7oA+K00vYAeRxc4dVjV27+J0ru1bGCjk=)
                          11: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: tl8M/rg4fzRj4HcLbXbMPjG2fJQE/fLu0oqk+/bvTJ4=)
                          12: 323630323a663939323a66313a3a2f34382d3438203d3e2030.roa (hash: YTwFmzgbdVgh5MV70gadVkuqTLHlIUY2ZnBOY6D4sbY=)
                          13: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: HWpzvbc2LzEmXxoT+kul7X4owcauEKJHusM+Ir+9R/w=)
                          14: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: izLerJCXQHRMj4EuHnpJKhCKBCsakjo+L9Seyo/D9Sg=)
                          15: 323630323a663939323a66363a3a2f34382d3438203d3e2030.roa (hash: 6GBWB4w7LpAqZZsFZ/5hqsbITBZPRg9rgrqjz2AA2Yo=)
                          16: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: TsDzPexWiyW7o35YhRgMnmXGuAARZmgF1yTYqL8wkn4=)
                          17: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: +regh0iXnX1+G7oho+N8MToCO88rnVaGwW232okUqZA=)
                          18: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: NC2ZhEPelpHdoSSljxfD6WpRWcBV8zPEY0f/OMUilVM=)
                          19: 323630323a663939323a66353a3a2f34382d3438203d3e2030.roa (hash: dO4GOf8X86hgNTC2If8vBzNuybBxmkNlYTyanbrkRnU=)
                          20: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: xsTimzkeTJXF4Nr71zJnv2bONR0iZSrLPJdDzaLfkdY=)
                          21: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: JcXzbGu5aoqW4eGRLqUocgWZf+gjmi1jki466ucPd4g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Dec 2025 15:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e9:6a:b0:20:d1:bf:61:77:2d:0c:f5:1e:52:4b:df:ff:ad:22:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Dec 11 13:52:24 2025 GMT
            Not After : Dec 12 15:32:24 2025 GMT
        Subject: CN=C90C869D45D3D9D56DE7D843D02B97E28B6B2611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:a0:2c:2e:10:a5:88:6a:aa:fa:58:16:74:
                    d5:50:30:11:76:d9:03:df:65:e6:ac:0b:68:15:16:
                    75:a2:99:40:ab:fc:3d:3f:48:55:34:17:ec:70:49:
                    35:6a:5a:07:08:68:50:f8:4d:be:50:17:de:6e:83:
                    a7:88:c8:6c:09:54:9a:fa:71:57:de:81:77:dc:c0:
                    dd:2b:df:8f:19:cc:85:2b:49:1c:0d:cf:ff:0b:7d:
                    7b:e3:13:af:0a:8a:e3:98:be:da:c0:e7:d3:d3:1f:
                    ad:4f:5e:91:79:fa:33:b4:ff:b6:89:32:8b:8b:a7:
                    12:9b:20:eb:6d:33:11:60:7f:df:7f:2b:ad:99:f3:
                    62:21:5b:78:87:45:b2:c1:b6:37:38:1c:87:f3:e8:
                    4e:56:d3:42:64:77:e2:6e:b8:2e:60:72:c3:b0:0b:
                    a5:b8:30:1c:4b:5b:0c:33:2b:86:ef:d6:7e:1e:4d:
                    0e:f0:52:61:3a:d6:ab:1c:da:5a:85:4e:f1:be:12:
                    9e:6f:85:5a:bd:a1:c7:ad:ac:30:32:6e:ab:bd:88:
                    67:b3:5f:4a:f7:65:e8:5c:e8:42:c7:49:c4:1e:8c:
                    08:86:b1:67:94:94:94:7a:8b:c5:1d:81:22:b0:c0:
                    85:26:ae:13:d8:6b:76:03:72:e5:c9:f8:67:b0:51:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:86:9D:45:D3:D9:D5:6D:E7:D8:43:D0:2B:97:E2:8B:6B:26:11
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4c:2d:c7:43:3a:5b:e5:59:87:a1:d0:6b:e6:a4:8f:87:6e:
         bb:15:4d:3f:29:25:4f:07:05:c4:ec:3e:01:01:ad:93:f5:e4:
         bf:d0:92:a2:51:ec:08:dc:a8:01:f1:79:92:e0:11:57:4d:9a:
         7d:32:ff:e0:bf:da:95:89:8a:a8:44:57:94:c6:7f:66:f0:a0:
         f3:60:54:6d:a0:32:83:dc:f3:49:16:6f:40:2d:d7:cf:e9:cd:
         a2:43:3e:78:45:54:d1:1d:fb:61:a8:ab:c8:fd:8e:28:f7:fe:
         6c:93:88:2e:50:2b:7c:d0:40:b0:fc:05:01:44:4c:fc:c3:aa:
         f5:d1:48:66:6b:e5:70:79:c4:4c:e3:0c:20:16:1b:46:c0:c1:
         80:b8:ac:be:06:58:d8:bc:ac:a9:ca:52:ab:81:75:52:3d:4f:
         6f:0b:d5:10:15:22:a2:3e:b3:d0:53:c1:e9:77:36:03:d9:df:
         20:f8:99:6b:c8:65:f1:0c:1d:81:bb:fe:79:8b:d7:1e:31:b0:
         f4:71:ce:0a:ef:ae:e6:d2:1a:9c:ba:e8:bf:42:ad:c0:f6:ba:
         54:5b:c1:be:97:7a:f1:e5:55:e9:30:73:e7:34:f5:34:86:13:
         80:4b:4c:3c:32:0c:b5:bb:96:97:68:a3:e0:39:64:48:25:af:
         27:8c:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 19:42:18 2025 by rpki-client