This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File:                     1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier:          crfcUm85zgyb0fmopGEGvAzqMt7b/nseIZpsnaGntDg=
Subject key identifier:   48:09:8A:51:4A:04:C9:59:25:3F:4F:FF:DE:EF:9A:87:4A:0A:F6:DF
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       09A68F752E6820B27C3DDC59E421322B2755B377
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number:          01DB
Signing time:             Sun 01 Feb 2026 20:27:01 +0000
Manifest this update:     Sun 01 Feb 2026 20:22:01 +0000
Manifest next update:     Mon 02 Feb 2026 21:38:01 +0000
Files and hashes:         1: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: At4aeDOtLlrlcvLXw/kRAT63ytohy/SMkEp12DPiCQI=)
                          2: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: WDk8fhCZeFEuKhmy2R/ZRYllooWLJI27mELcMjoeqKI=)
                          3: 3135352e3130332e3235302e302f32342d3234203d3e20323135323438.roa (hash: /fpMGWXALGLYJxxNAOT7bpZTstibldkVZBBA9gVNjNw=)
                          4: 3135352e3130332e3235302e302f32342d3234203d3e20333936303634.roa (hash: aIduGsPA21c9S2j4LtglTA+wLE0aB3Y2f/hxV+bi8b0=)
                          5: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: EIvC4z2x/QLXwOGrYeC/F9aQ8OZAlzpbcTtxqtqMIxY=)
                          6: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: l3PqR+UTXc6mZ6DH8HSVMsKTEDZ5iX5wYCsyCFY80r0=)
                          7: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: qWICRkjmLt8+dNxxWBazesXDN3X2Ej4jtCp5CweB95Y=)
                          8: AS396064.asa (hash: NGcXKJGZnZvbjc4zjBeqLVMAnLKQkaFWXRULV5F4L9M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:8f:75:2e:68:20:b2:7c:3d:dc:59:e4:21:32:2b:27:55:b3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Feb  1 20:22:01 2026 GMT
            Not After : Feb  2 21:38:01 2026 GMT
        Subject: CN=48098A514A04C959253F4FFFDEEF9A874A0AF6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:f1:df:b9:03:ba:b9:36:04:23:f6:86:30:
                    6a:5c:c2:da:90:7a:f3:4e:a4:a6:c9:3c:2a:82:90:
                    2f:cc:23:d4:06:65:82:26:89:e4:9e:1f:66:c2:75:
                    31:7f:3e:c2:a6:12:19:17:eb:c9:57:7e:56:f1:ee:
                    43:11:37:25:80:b0:fd:f4:83:51:f5:61:d5:0f:9e:
                    a1:3e:3a:00:83:94:71:21:6e:d0:60:25:b9:e4:8c:
                    44:50:cc:9f:f1:33:53:a2:e8:04:bd:ac:fe:97:44:
                    21:4e:38:cf:0b:aa:0a:94:8e:1f:8d:d1:5c:b4:ad:
                    2f:99:bb:6b:16:c9:d5:6b:db:01:40:7d:49:a2:cf:
                    41:13:a1:06:da:27:4d:48:f5:c7:c6:a1:35:fc:d4:
                    47:65:69:6b:42:ff:bb:8a:73:66:da:d8:59:3d:1d:
                    0e:6d:0a:e1:9e:ae:77:d4:23:fe:95:1b:ea:d3:69:
                    f2:23:89:1b:85:29:33:ca:ab:37:84:e0:34:e3:e7:
                    56:18:b4:0b:63:e9:19:e9:81:72:a0:ea:d1:15:99:
                    06:b4:58:84:ee:0b:0c:5e:ea:59:2b:79:43:78:2a:
                    8f:f8:e8:8d:36:8e:97:c3:47:25:62:c0:36:88:b7:
                    1a:c3:13:9e:bd:9f:aa:e1:16:99:ff:6e:02:d5:55:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:8A:51:4A:04:C9:59:25:3F:4F:FF:DE:EF:9A:87:4A:0A:F6:DF
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:8f:7b:a9:23:ff:a3:00:19:17:f9:a1:cd:4d:a2:67:50:
         7b:8e:57:59:be:4d:04:80:47:2e:f5:21:97:5d:90:07:81:c7:
         66:93:1e:a1:a5:4f:e5:e6:98:48:be:47:99:d6:98:f1:ad:7c:
         b6:85:3f:cf:fa:69:3c:3e:04:6d:47:96:a6:b1:6d:c2:ec:f3:
         70:e0:c4:94:84:59:a3:ec:f8:fd:1f:71:a8:61:d5:09:93:7d:
         3f:89:4d:04:c5:72:1d:36:cb:f4:45:ae:11:39:88:ac:52:e6:
         17:45:6b:8a:30:7f:1e:9d:4b:b2:5e:5e:ac:3c:3b:51:9d:e1:
         cb:f0:fa:fe:58:30:70:54:8a:5d:a1:ed:77:30:a3:8e:f4:51:
         04:96:18:ec:6e:0e:08:eb:25:ee:32:d0:4c:f9:a5:f6:c4:91:
         82:b6:54:be:2f:fe:ae:bf:36:b5:12:15:3e:c3:76:f6:72:ea:
         85:14:bc:27:1c:91:e6:bc:e6:92:fd:5a:e3:fb:fd:14:f3:2d:
         ef:ac:0c:51:14:9e:47:35:43:7a:9b:b4:75:57:f9:6e:b7:42:
         73:63:ff:19:78:3d:10:7f:b2:07:8b:c9:3d:40:0c:df:2a:88:
         56:ce:e3:ec:74:ea:67:ff:9f:81:23:a1:c5:12:d5:a4:9b:4c:
         0e:f3:f9:17
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUCaaPdS5oILJ8PdxZ5CEyKydVs3cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0
NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjYwMjAxMjAyMjAxWhcNMjYwMjAyMjEzODAx
WjAzMTEwLwYDVQQDEyg0ODA5OEE1MTRBMDRDOTU5MjUzRjRGRkZERUVGOUE4NzRB
MEFGNkRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfjx37kDurk2
BCP2hjBqXMLakHrzTqSmyTwqgpAvzCPUBmWCJonknh9mwnUxfz7CphIZF+vJV35W
8e5DETclgLD99INR9WHVD56hPjoAg5RxIW7QYCW55IxEUMyf8TNTougEvaz+l0Qh
TjjPC6oKlI4fjdFctK0vmbtrFsnVa9sBQH1Jos9BE6EG2idNSPXHxqE1/NRHZWlr
Qv+7inNm2thZPR0ObQrhnq531CP+lRvq02nyI4kbhSkzyqs3hOA04+dWGLQLY+kZ
6YFyoOrRFZkGtFiE7gsMXupZK3lDeCqP+OiNNo6Xw0clYsA2iLcawxOevZ+q4RaZ
/24C1VW0JwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEgJilFKBMlZJT9P/97vmodK
CvbfMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0
LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx
NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt
NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z
NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5
ZjE2NmI2NTMwMWE5ZGQuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
Y2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlB
NjgxRjhDRDQxMjcwQjUwRDhEN0U3ODE1ODgxREEzNi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFpQj3up
I/+jABkX+aHNTaJnUHuOV1m+TQSARy71IZddkAeBx2aTHqGlT+XmmEi+R5nWmPGt
fLaFP8/6aTw+BG1HlqaxbcLs83DgxJSEWaPs+P0fcahh1QmTfT+JTQTFch02y/RF
rhE5iKxS5hdFa4owfx6dS7JeXqw8O1Gd4cvw+v5YMHBUil2h7Xcwo470UQSWGOxu
DgjrJe4y0Ez5pfbEkYK2VL4v/q6/NrUSFT7DdvZy6oUUvCcckea85pL9WuP7/RTz
Le+sDFEUnkc1Q3qbtHVX+W63QnNj/xl4PRB/sgeLyT1ADN8qiFbO4+x06mf/n4Ej
ocUS1aSbTA7z+Rc=
-----END CERTIFICATE-----
Generated at Mon Feb 2 06:23:32 2026 by rpki-client