This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/2/81BD1BDD47BAFE2694F6377A938F28854822B033.mft
File:                     81BD1BDD47BAFE2694F6377A938F28854822B033.mft (raw, json)
Hash identifier:          P/EyU+HjCwH3x8UgJd+TGZWbzwNdK4o+KrdEdFr6UDo=
Subject key identifier:   87:1E:F6:C1:A5:E9:FE:8D:35:55:BF:40:13:D1:2E:A4:DC:D1:46:10
Authority key identifier: 81:BD:1B:DD:47:BA:FE:26:94:F6:37:7A:93:8F:28:85:48:22:B0:33
Certificate issuer:       /CN=22b1391a003ffd5776d3ea83351ab21cbf6b10fcb6cac3e709
Certificate serial:       48F649C26219A32672D54C3556EFDF6291FAF2CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a003ffd5776d3ea83351ab21cbf6b10fcb6cac3e709.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/2/81BD1BDD47BAFE2694F6377A938F28854822B033.mft
Manifest number:          13
Signing time:             Sun 28 Dec 2025 13:35:57 +0000
Manifest this update:     Sun 28 Dec 2025 13:30:57 +0000
Manifest next update:     Mon 29 Dec 2025 15:29:57 +0000
Files and hashes:         1: 81BD1BDD47BAFE2694F6377A938F28854822B033.crl (hash: 76bEHq1xTxmikLRlQT/9gNDh8PkHmBhoJX4cpLZID0M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/2/81BD1BDD47BAFE2694F6377A938F28854822B033.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/2/81BD1BDD47BAFE2694F6377A938F28854822B033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a003ffd5776d3ea83351ab21cbf6b10fcb6cac3e709.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Dec 2025 15:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f6:49:c2:62:19:a3:26:72:d5:4c:35:56:ef:df:62:91:fa:f2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a003ffd5776d3ea83351ab21cbf6b10fcb6cac3e709
        Validity
            Not Before: Dec 28 13:30:57 2025 GMT
            Not After : Dec 29 15:29:57 2025 GMT
        Subject: CN=871EF6C1A5E9FE8D3555BF4013D12EA4DCD14610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:e5:1b:16:54:cf:56:44:25:b0:18:6a:92:
                    04:e0:5b:56:c1:62:35:da:5a:3c:a1:ea:f6:85:e3:
                    aa:27:36:f6:7d:7d:30:b8:c2:c7:07:a1:03:28:53:
                    76:ec:57:19:14:3a:89:07:77:b9:7d:e1:84:74:1b:
                    65:05:b2:4f:c7:e0:ea:51:6a:f3:11:15:b6:a8:a3:
                    9d:c6:d6:74:77:62:8a:77:a6:7a:e1:bc:28:98:09:
                    31:96:4c:f0:ec:d7:31:1d:cf:8c:0b:d3:bd:87:15:
                    41:55:6f:68:d0:b9:62:d2:78:ca:37:cb:1e:4a:70:
                    e6:f3:d3:a6:f2:d2:e3:a5:24:91:e5:bf:72:69:49:
                    2c:8c:7e:a2:28:6a:b6:f2:b2:33:25:45:03:5e:a3:
                    14:0d:3e:74:e7:45:c9:97:90:71:50:bb:00:a5:3d:
                    bb:61:cb:4b:19:5a:54:d6:21:92:aa:dc:cb:a3:42:
                    43:b1:88:e0:6b:ff:6b:9e:c7:08:f5:fb:a2:51:b4:
                    ae:95:84:d5:98:79:2d:93:67:d2:fa:0f:52:76:cd:
                    ac:47:67:2f:4b:cd:66:39:14:4e:0b:9d:12:49:3d:
                    59:51:11:c2:cd:65:db:e7:f9:cd:e7:68:76:14:8f:
                    24:14:36:cc:07:22:d4:ee:11:7e:7d:00:73:eb:a4:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:F6:C1:A5:E9:FE:8D:35:55:BF:40:13:D1:2E:A4:DC:D1:46:10
            X509v3 Authority Key Identifier:
                keyid:81:BD:1B:DD:47:BA:FE:26:94:F6:37:7A:93:8F:28:85:48:22:B0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/2/81BD1BDD47BAFE2694F6377A938F28854822B033.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a003ffd5776d3ea83351ab21cbf6b10fcb6cac3e709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/2/81BD1BDD47BAFE2694F6377A938F28854822B033.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b5:37:ad:95:2c:24:99:00:7e:46:4f:16:1d:c6:e5:ba:d7:
         db:9a:b5:c0:ab:63:9f:7e:36:a0:7f:64:1d:af:2b:fd:a8:55:
         55:41:95:53:ce:f7:18:68:c0:f7:c2:03:45:c2:24:37:16:18:
         8e:8d:e4:f1:b5:4c:c9:d4:c8:9a:f1:e9:fa:da:46:3e:01:61:
         52:df:b8:fb:1e:d4:21:cb:59:89:cb:72:7d:a6:1b:16:9c:1d:
         f8:6c:3a:8f:6b:c2:5e:a1:42:5e:1d:61:b7:34:0e:67:c9:25:
         90:37:ad:af:01:42:58:54:3f:e9:b9:0b:1e:06:ad:c9:f0:92:
         68:70:d6:7c:bc:36:4f:93:6d:cb:ed:f1:c5:3d:f3:ca:67:e3:
         a3:97:9c:4d:15:ee:63:18:02:b9:f7:a0:67:2f:e2:81:89:72:
         e8:67:6d:a9:2b:21:45:35:36:3a:ba:ce:9c:4e:4f:6a:d9:ff:
         78:97:79:c3:e0:2f:53:89:5f:5b:5e:10:61:1e:6d:1f:3c:10:
         2c:45:f0:2d:e2:cd:bb:18:eb:7a:0c:dd:3d:e2:f4:23:49:23:
         3a:5e:e9:93:83:55:5a:3b:ee:f1:69:b7:37:08:e8:88:68:c3:
         44:2a:51:b2:67:5e:96:3b:c1:c9:2e:99:05:fa:8a:3e:eb:d7:
         68:57:67:82
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUSPZJwmIZoyZy1Uw1Vu/fYpH68sswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjJiMTM5MWEwMDNmZmQ1Nzc2ZDNlYTgzMzUxYWIyMWNi
ZjZiMTBmY2I2Y2FjM2U3MDkwHhcNMjUxMjI4MTMzMDU3WhcNMjUxMjI5MTUyOTU3
WjAzMTEwLwYDVQQDEyg4NzFFRjZDMUE1RTlGRThEMzU1NUJGNDAxM0QxMkVBNERD
RDE0NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3lGxZUz1ZE
JbAYapIE4FtWwWI12lo8oer2heOqJzb2fX0wuMLHB6EDKFN27FcZFDqJB3e5feGE
dBtlBbJPx+DqUWrzERW2qKOdxtZ0d2KKd6Z64bwomAkxlkzw7NcxHc+MC9O9hxVB
VW9o0Lli0njKN8seSnDm89Om8tLjpSSR5b9yaUksjH6iKGq28rIzJUUDXqMUDT50
50XJl5BxULsApT27YctLGVpU1iGSqtzLo0JDsYjga/9rnscI9fuiUbSulYTVmHkt
k2fS+g9Sds2sR2cvS81mORROC50SST1ZURHCzWXb5/nN52h2FI8kFDbMByLU7hF+
fQBz66RfKQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFIce9sGl6f6NNVW/QBPRLqTc
0UYQMB8GA1UdIwQYMBaAFIG9G91Huv4mlPY3epOPKIVIIrAzMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4NDE4NWI3LTAzNDMtNGE2NC1hYTM0
LTgyZjYxZWMwZGZkYy8yLzgxQkQxQkRENDdCQUZFMjY5NEY2Mzc3QTkzOEYyODg1
NDgyMkIwMzMuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTct
NDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0w
ZGY4MTJmZjdkODcvMjJiMTM5MWEwMDNmZmQ1Nzc2ZDNlYTgzMzUxYWIyMWNiZjZi
MTBmY2I2Y2FjM2U3MDkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
OTg0MTg1YjctMDM0My00YTY0LWFhMzQtODJmNjFlYzBkZmRjLzIvODFCRDFCREQ0
N0JBRkUyNjk0RjYzNzdBOTM4RjI4ODU0ODIyQjAzMy5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM+1N62V
LCSZAH5GTxYdxuW619uatcCrY59+NqB/ZB2vK/2oVVVBlVPO9xhowPfCA0XCJDcW
GI6N5PG1TMnUyJrx6fraRj4BYVLfuPse1CHLWYnLcn2mGxacHfhsOo9rwl6hQl4d
Ybc0DmfJJZA3ra8BQlhUP+m5Cx4Grcnwkmhw1ny8Nk+Tbcvt8cU988pn46OXnE0V
7mMYArn3oGcv4oGJcuhnbakrIUU1Njq6zpxOT2rZ/3iXecPgL1OJX1teEGEebR88
ECxF8C3izbsY63oM3T3i9CNJIzpe6ZODVVo77vFptzcI6Ihow0QqUbJnXpY7wcku
mQX6ij7r12hXZ4I=
-----END CERTIFICATE-----
Generated at Sun Dec 28 16:20:48 2025 by rpki-client