This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json) Hash identifier: l41fNB57zKMX2ZIkLiibxti85hIRMTCr8qbjY9vLVfw= Subject key identifier: 4A:6B:ED:2F:0A:44:C2:CD:41:F9:0B:28:51:F1:3E:E4:3C:E4:14:F1 Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Certificate serial: 5454A5066D87BE051028B0884AAA388D2D77953E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft Manifest number: 016D Signing time: Tue 18 Nov 2025 11:19:20 +0000 Manifest this update: Tue 18 Nov 2025 11:14:20 +0000 Manifest next update: Wed 19 Nov 2025 11:56:20 +0000 Files and hashes: 1: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=) 2: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=) 3: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: N6/F65xwLBSCNUHdV2v18qOGF5jWme/kMnJBi7fyPAI=) 4: AS396064.asa (hash: fqRhtvWtcURp20FCViYFyofIrkmsG3+3CETZ3m5QbYs=) 5: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=) 6: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 11:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:54:a5:06:6d:87:be:05:10:28:b0:88:4a:aa:38:8d:2d:77:95:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Validity Not Before: Nov 18 11:14:20 2025 GMT Not After : Nov 19 11:56:20 2025 GMT Subject: CN=4A6BED2F0A44C2CD41F90B2851F13EE43CE414F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:5f:5f:3c:13:f3:49:53:e5:4f:20:98:77: 30:e6:82:dc:36:92:ca:41:f5:de:c8:98:0a:c3:43: fc:99:ee:91:c8:59:af:5f:98:56:32:ba:e8:2b:7e: a0:f6:7a:58:36:eb:c6:70:e8:47:de:4f:2a:2f:ea: d9:79:f2:60:7c:65:ae:59:49:a6:ee:f8:a0:60:3f: a3:2e:57:ee:04:3b:19:c8:52:46:90:15:de:8b:99: d3:7d:8b:70:0a:f9:6b:5d:76:16:47:72:c6:6d:3a: 2d:31:32:4d:1e:7e:24:f2:2c:f1:4d:39:16:9e:b6: 69:36:10:7b:67:99:94:a1:88:36:bc:a8:89:3f:85: 56:4e:d3:92:f3:de:32:3a:8c:79:4a:02:c7:98:9e: e3:b0:8f:e9:91:d5:4e:5f:7c:48:c5:9c:81:79:c3: c9:18:53:f8:c5:fb:48:0d:fd:dd:47:71:f5:c5:5f: c5:f4:4c:c2:2f:8e:37:03:b4:ed:02:65:f9:33:c3: 35:b9:2a:9a:6a:6f:4c:8a:51:7c:b7:d9:2f:fb:28: 97:61:ce:8a:60:54:fb:85:a8:63:83:fe:a2:90:54: c8:4b:e6:14:9f:e3:ce:39:5a:cd:b9:c9:97:7b:7d: 79:06:99:a6:38:03:f8:02:f3:e3:84:21:e0:58:64: 9f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6B:ED:2F:0A:44:C2:CD:41:F9:0B:28:51:F1:3E:E4:3C:E4:14:F1 X509v3 Authority Key Identifier: keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:52:bc:2f:26:f3:b4:3b:ce:3e:a2:92:6e:f1:dd:e1:c1:d8: aa:88:31:6f:ca:2a:9e:a3:d4:6e:b8:ed:3e:ac:bc:97:9c:9f: 9e:43:fa:f8:f7:3d:ee:f3:1f:d3:24:a1:2d:98:12:14:3e:6b: 27:ae:96:58:79:4c:25:9c:50:45:0c:6e:a1:e8:1a:b8:25:80: 96:8b:8e:c2:36:5d:6b:2c:80:65:de:3a:82:ae:c7:2d:5d:28: a4:24:12:74:42:89:90:d7:ad:f8:b3:7b:b4:a7:91:d0:3d:55: 5f:0b:1e:84:73:ba:b6:0c:61:b9:49:d9:c1:b6:23:cf:dd:36: ee:d5:92:0e:41:ec:92:64:27:3b:68:4a:91:e1:4c:36:30:c4: 52:4f:ca:ba:f2:c0:63:19:d6:80:11:c1:48:e1:a5:86:86:4f: 63:f6:56:7d:a0:60:6a:6b:9e:db:af:66:d8:97:1e:93:40:13: e3:d4:25:a7:7f:59:d9:01:aa:0b:8b:92:54:76:68:e9:a2:16: dd:49:1c:70:74:f1:4d:66:18:82:e0:87:bf:57:2e:c2:46:cd: 0a:5c:ee:88:d5:7f:65:b1:42:3b:6d:bf:9f:bf:5a:ae:6b:71: 06:ce:6d:b5:b3:b9:b3:9d:42:70:11:96:3e:ee:08:7f:24:a0: 18:e2:f5:4b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUVFSlBm2HvgUQKLCISqo4jS13lT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0 NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjUxMTE4MTExNDIwWhcNMjUxMTE5MTE1NjIw WjAzMTEwLwYDVQQDEyg0QTZCRUQyRjBBNDRDMkNENDFGOTBCMjg1MUYxM0VFNDND RTQxNEYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv91fXzwT80lT 5U8gmHcw5oLcNpLKQfXeyJgKw0P8me6RyFmvX5hWMrroK36g9npYNuvGcOhH3k8q L+rZefJgfGWuWUmm7vigYD+jLlfuBDsZyFJGkBXei5nTfYtwCvlrXXYWR3LGbTot MTJNHn4k8izxTTkWnrZpNhB7Z5mUoYg2vKiJP4VWTtOS894yOox5SgLHmJ7jsI/p kdVOX3xIxZyBecPJGFP4xftIDf3dR3H1xV/F9EzCL443A7TtAmX5M8M1uSqaam9M ilF8t9kv+yiXYc6KYFT7hahjg/6ikFTIS+YUn+POOVrNucmXe315BpmmOAP4AvPj hCHgWGSfZwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEpr7S8KRMLNQfkLKFHxPuQ8 5BTxMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0 LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5 ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHpSvC8m 87Q7zj6ikm7x3eHB2KqIMW/KKp6j1G647T6svJecn55D+vj3Pe7zH9MkoS2YEhQ+ ayeullh5TCWcUEUMbqHoGrglgJaLjsI2XWssgGXeOoKuxy1dKKQkEnRCiZDXrfiz e7SnkdA9VV8LHoRzurYMYblJ2cG2I8/dNu7Vkg5B7JJkJztoSpHhTDYwxFJPyrry wGMZ1oARwUjhpYaGT2P2Vn2gYGprntuvZtiXHpNAE+PUJad/WdkBqguLklR2aOmi Ft1JHHB08U1mGILgh79XLsJGzQpc7ojVf2WxQjttv5+/Wq5rcQbObbWzubOdQnAR lj7uCH8koBji9Us= -----END CERTIFICATE-----Generated at Tue Nov 18 17:48:58 2025 by rpki-client