This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
File:                     DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft (raw, json)
Hash identifier:          8WnBYb85DbJMcmxeNW6rx0qgHnHDbo+Jg5s0kzoqvc4=
Subject key identifier:   72:DB:AB:CF:19:93:4D:1D:F0:FE:08:24:EA:90:D7:B1:AF:B7:1A:AA
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       65A819B9D67FC74518025D976F68384920FC9255
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
Manifest number:          7F
Signing time:             Wed 10 Dec 2025 01:26:57 +0000
Manifest this update:     Wed 10 Dec 2025 01:21:57 +0000
Manifest next update:     Thu 11 Dec 2025 03:59:57 +0000
Files and hashes:         1: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: avce3NViBRqstlcRVSZNR/D9S0G0l1args9FWdl6sHM=)
                          2: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: KM2hJz/lncCBvTk0N2kNTxTwRufECPfi71/kGX97DdU=)
                          3: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: 0MEIUBup3qv1i1SPiI38Hu99JxS/lmJ93WOTGaX/FWA=)
                          4: 32332e3137352e32342e302f32342d3234203d3e20313938313030.roa (hash: kr4SYs4DOlxedtPmP6j4qtMqp2fKBamyULuQdJpIcEI=)
                          5: DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl (hash: Vo9itxQ7z1KzCJbAGlKEGnTiz0/H1cELagtCWDl7eaA=)
                          6: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: tXwIuvLfkqRRbrGnj7O8lQ40iRP7EXPDLkgQZ+fgw6o=)
                          7: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: S2I7MFxagpC/hWfkw5xbkk1THpqc1oHMahoIddI+A44=)
                          8: AS53808.asa (hash: SmTc4NEg2T8LnOOVccx8iIO8oIgco0PyOTxUsDZRN8s=)
                          9: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: hSQPQNYtaloGuIBTmiDXNzK85H3WsPwGL3kSwWeFwys=)
                          10: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: vr8Z8zerFeHLwPG1Sj5JmKhD36wh/wZg2B1HvzcqjWk=)
                          11: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: HJhbeBIyN7j+cfMcORgmlgmT0q4RK+5k+fM+/J3jIAM=)
                          12: 323630323a663932613a663230303a3a2f34382d3438203d3e203430313135.roa (hash: xB/p4/3fCvd7hS1/dnqM7LuWcD8HfRwy/o0N54fkSrI=)
                          13: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: Rxe81doYcLhSmYGob0lUEF9nPndgWbRjKPZDlpeWJTQ=)
                          14: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: 9v2QjpDsJPZbBDDpUZr7ydvpM8Cp3G+4wDPcpeGfs24=)
                          15: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: E4T48Xa0z2oRpppt0kd+9gM6ocnhmZSsvwpBSiuPpCY=)
                          16: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: fH+eAUk8TEes+2Iai8KdY14xxwWZr2HwK76wJzo2G/g=)
                          17: 323630323a663932613a613030303a3a2f34302d3430203d3e20313938333034.roa (hash: oPCojI7Eue0yt942Ht5P7kSBGUXjdXUyDnyhf4wTdXA=)
                          18: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: koHJDDDFT0xYjdI8D+a7kBimNIpjMm1+OQcUfCWMQEc=)
                          19: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (hash: uJSO1uJt/eshe1aZrygG3JkvlAKC5qeHJIgXwEkM6Z4=)
                          20: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: ublW8rFIXq/VF+hK9JDmh7flVrTu2j344XC3SkY9ohg=)
                          21: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: Ll5vJFutahJkWr4VzOHWGGr69grKSEO2M/wfqdD5M1s=)
                          22: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 7Vc50SzPzT8ObUoABToUDthH08et+z87Gi27SG62dw8=)
                          23: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: WAEwY9n9szHi7Kkm4pyIXqQdzMe1DPfR5aylFbxqcm0=)
                          24: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: GWFj06chKZGucleScz0C7o3A8NGUthJ495skpWCH2b8=)
                          25: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: YvpJK6nWV+rrvxxMyLyhWpdmUtaTAqqDGbtveQN/mgw=)
                          26: AS40929.asa (hash: 5lQ3bkE4ecANrM2nmj6HSQ8NEr4/oKc1FhmCxkkQ5D4=)
                          27: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: LyhvXLMvCzSxljEklDhIR7CEH4oj9WerwVkkCnG/SsQ=)
                          28: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: 00cEFDgpVA4UIkTJ20Sbm3J+Mc4bybyoiSZwdDvNsnk=)
                          29: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: IBkuk87LMV+FnqYEF6hfLVWmE1OPlroVpgH2GTCd25A=)
                          30: AS198304.asa (hash: q6KSxo7FHxjgdEPhAALk+XGdsVy+0l6tPN3S2nObclE=)
                          31: 32332e3137352e32342e302f32342d3234203d3e20343031343433.roa (hash: 77/SVUxdFmtfk76nEs5lTe/zhQD1RKdzwP9cjrwjB1Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Dec 2025 03:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a8:19:b9:d6:7f:c7:45:18:02:5d:97:6f:68:38:49:20:fc:92:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 10 01:21:57 2025 GMT
            Not After : Dec 11 03:59:57 2025 GMT
        Subject: CN=72DBABCF19934D1DF0FE0824EA90D7B1AFB71AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:30:59:75:87:90:a8:e7:f5:af:98:51:4b:
                    f5:ee:f9:78:8a:65:4c:7f:be:bd:1c:9e:b6:ac:ff:
                    85:ee:37:13:15:a8:d6:42:cd:0d:89:59:d5:f8:c7:
                    b0:9d:e0:bb:14:4a:cb:a4:f7:ee:ba:62:48:98:fe:
                    0b:cf:39:a8:12:e6:a9:92:f6:e3:a2:2f:83:67:77:
                    21:a5:9c:1c:7e:69:a1:d7:2c:b0:18:fa:d0:dc:64:
                    3d:a2:4b:be:a3:fd:2c:cc:1c:19:bf:7a:3b:ac:52:
                    94:02:54:00:b3:8b:89:2b:ac:61:76:2b:e5:77:33:
                    55:14:6f:88:03:98:4c:0d:f6:ab:4f:74:e9:e0:d5:
                    bb:3f:b3:4c:41:65:d8:43:ee:20:4d:9c:65:35:25:
                    bd:37:87:3a:f3:8d:fe:81:44:32:f4:b1:8b:7a:f3:
                    57:16:ef:61:19:00:9e:6b:d4:5b:ce:cf:19:a9:4b:
                    38:c7:64:57:3e:a5:40:29:6b:15:c6:d3:d5:0a:fd:
                    24:a7:d1:43:be:55:72:7c:1b:d4:98:42:68:9b:d1:
                    b0:5c:a0:da:b8:e3:6a:99:79:ea:2b:44:43:cc:73:
                    72:6a:72:59:5c:60:57:54:36:8e:07:ac:97:0b:68:
                    73:7b:d0:b4:fe:65:a0:61:cb:6c:ee:87:75:5a:da:
                    87:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DB:AB:CF:19:93:4D:1D:F0:FE:08:24:EA:90:D7:B1:AF:B7:1A:AA
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:8c:5f:8d:39:3f:b8:2d:b1:06:49:c8:74:81:8d:4b:15:
         f8:37:f9:81:fe:08:49:48:b2:ed:21:dc:a0:28:8a:8c:48:12:
         7d:5c:3b:de:72:6f:a5:cf:53:51:a7:b2:02:e1:a0:ab:49:19:
         95:3a:df:98:aa:45:21:01:ac:09:79:59:8a:60:4e:42:a5:17:
         a7:bf:0a:e9:89:1e:b2:7f:fa:94:bd:01:59:a2:82:65:19:b7:
         a4:92:b5:8b:fe:d3:a6:ef:79:88:d6:96:61:c2:77:62:a6:60:
         e1:5a:37:36:e2:da:80:5a:e3:51:a4:9c:9a:d2:56:e8:eb:53:
         89:71:31:17:ca:fa:9a:76:b7:af:b0:da:2b:cb:10:f5:00:35:
         89:ae:38:2d:d6:fa:b5:50:90:d0:9a:8c:5d:e4:5b:31:c5:79:
         ea:46:e9:c5:73:2c:17:a2:53:3b:7f:d2:62:1e:3b:15:f5:f7:
         d2:dd:f4:da:80:21:a6:a4:63:21:27:aa:9a:14:26:aa:58:14:
         20:44:d9:2f:67:15:97:4b:91:dd:dd:42:bc:72:ff:00:72:4f:
         29:61:eb:53:10:06:46:f4:1e:94:a9:5b:7a:9b:3b:41:e4:9f:
         74:8a:28:f9:41:63:36:99:c2:6c:5d:fc:d7:1d:eb:7a:8d:71:
         62:69:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 03:19:27 2025 by rpki-client