This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
File:                     04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json)
Hash identifier:          fqLNb1cWAivR7CfChjd1OhX342dubXh5SBFjLqoWeE0=
Subject key identifier:   7F:45:A4:47:1E:D5:F9:93:74:A4:84:FE:B8:95:2B:DD:79:13:B2:1A
Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
Certificate issuer:       /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Certificate serial:       2D9817DD3964F2F40F8B48AB611865AA856BB1C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject info access:      rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
Manifest number:          03C8
Signing time:             Fri 28 Nov 2025 18:49:18 +0000
Manifest this update:     Fri 28 Nov 2025 18:44:18 +0000
Manifest next update:     Sat 29 Nov 2025 21:17:18 +0000
Files and hashes:         1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: 1Vy34/NglbsI8umeOrpNiG0X/HC0XFcTkHsiS4/MGW0=)
                          2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=)
                          3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
                          rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Nov 2025 21:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:98:17:dd:39:64:f2:f4:0f:8b:48:ab:61:18:65:aa:85:6b:b1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
        Validity
            Not Before: Nov 28 18:44:18 2025 GMT
            Not After : Nov 29 21:17:18 2025 GMT
        Subject: CN=7F45A4471ED5F99374A484FEB8952BDD7913B21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:75:cf:b3:43:b1:aa:f9:b5:ac:6f:fe:56:
                    84:af:c1:09:e3:f4:09:f5:2e:d9:f3:72:39:42:ef:
                    04:c7:68:0e:8b:31:a9:30:7b:1e:20:e5:d1:d8:27:
                    95:64:d3:b1:92:01:8b:66:55:f4:f7:f0:d8:15:70:
                    3c:ed:f0:ab:89:1f:f2:25:b6:02:a6:a4:ed:f6:58:
                    88:3b:31:0c:cf:9b:df:9a:8b:99:9e:88:90:fc:85:
                    6b:1b:75:0d:13:bb:63:be:53:74:dd:e8:cf:d0:1b:
                    f9:1d:40:c0:a8:b1:06:66:69:3d:7c:30:f2:02:71:
                    3a:6a:d0:39:1c:41:3a:aa:d4:d6:06:03:4a:b0:98:
                    9c:29:be:63:12:a8:15:2f:9a:65:d1:c5:53:f3:43:
                    3e:f4:54:8b:c1:58:8c:09:e6:46:75:f7:47:00:62:
                    6f:1d:51:21:25:b8:ac:45:54:b6:4b:c1:0c:fe:b9:
                    f9:99:9c:b9:41:09:90:d2:23:e3:78:db:21:04:ae:
                    8e:31:32:21:ea:8a:df:1c:70:6a:85:0e:e4:29:cf:
                    fd:84:1e:68:53:96:b8:77:18:bc:00:f8:ad:1a:47:
                    79:88:68:14:8a:84:3c:17:ff:e8:e9:f2:cc:b3:62:
                    5b:58:6c:7f:35:cb:2e:d9:7e:4e:3b:e7:f3:34:ba:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:A4:47:1E:D5:F9:93:74:A4:84:FE:B8:95:2B:DD:79:13:B2:1A
            X509v3 Authority Key Identifier:
                keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fe:3d:48:40:be:08:89:08:aa:5a:93:37:5b:45:ec:62:64:
         6a:fd:50:f2:83:4e:1c:da:68:45:22:52:28:c6:fa:d4:55:f6:
         33:2d:42:34:8e:a4:b0:c2:33:1f:0c:3c:fb:6c:43:41:fa:1a:
         66:52:9b:09:df:58:05:33:52:f4:4a:a9:6c:f2:fb:b0:c4:84:
         98:b9:f5:ba:6e:1a:4e:09:c1:c8:29:a6:91:3e:5b:81:8d:55:
         57:e5:0d:1e:1e:69:01:af:e8:dc:84:46:bf:27:6d:ca:3d:66:
         a8:73:d2:02:c7:eb:e2:46:68:9e:db:20:65:d1:8b:61:83:04:
         d5:92:b3:31:bf:56:8f:b9:b8:8c:65:c4:cf:0b:a0:75:6f:0d:
         12:61:53:c0:03:e9:61:b5:6d:88:c1:16:7b:54:da:64:41:96:
         ac:27:0c:2b:42:ad:8f:b0:b0:86:e7:0a:d1:26:e3:34:ff:0c:
         f1:9d:ff:aa:3e:b5:6a:93:be:25:99:b4:f9:01:32:0b:14:c3:
         66:7b:e2:95:6e:4c:31:3f:25:fd:4d:75:79:de:f6:4f:ca:69:
         cb:13:fa:80:5a:76:c5:01:25:70:69:79:c8:54:b3:a6:04:d3:
         83:06:16:86:d8:96:71:7c:3a:ac:a3:f7:a8:b6:f3:2a:f6:b6:
         14:8d:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 14:04:29 2025 by rpki-client