This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
File:                     E84B072599A643FE71F171B15ED724213D43CE5B.mft (raw, json)
Hash identifier:          Jtawib70R+ruw8RSFV2BiZ3iO9u6ZcQpEss4HNsiyH0=
Subject key identifier:   DA:B8:99:4C:FB:31:75:BE:47:97:24:A2:EA:09:49:30:49:0F:E0:96
Authority key identifier: E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B
Certificate issuer:       /CN=e84b072599a643fe71f171b15ed724213d43ce5b
Certificate serial:       42B9FF748BD21D680DD97C024FEECF73F3782169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
Manifest number:          D5
Signing time:             Sat 20 Dec 2025 11:36:00 +0000
Manifest this update:     Sat 20 Dec 2025 11:31:00 +0000
Manifest next update:     Sun 21 Dec 2025 15:18:00 +0000
Files and hashes:         1: E84B072599A643FE71F171B15ED724213D43CE5B.crl (hash: o0Z8P4llOQ8LwPbYa6Nz2Prp6nFL7mynVOA7Y5yzcm4=)
                          2: AS214768.asa (hash: jXPXFYdvxRTO4xZ1QtAhRs/urzNWFCHEnbmEMExacrU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b9:ff:74:8b:d2:1d:68:0d:d9:7c:02:4f:ee:cf:73:f3:78:21:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84b072599a643fe71f171b15ed724213d43ce5b
        Validity
            Not Before: Dec 20 11:31:00 2025 GMT
            Not After : Dec 21 15:18:00 2025 GMT
        Subject: CN=DAB8994CFB3175BE479724A2EA094930490FE096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:55:78:ee:d7:d5:1b:9c:39:dc:e1:1e:11:
                    53:42:67:d1:75:03:03:4c:46:d4:12:fc:9d:75:0e:
                    f3:33:77:76:7a:f7:22:5c:ca:9e:31:d7:4e:a2:49:
                    5f:bd:73:4d:af:d8:f6:49:74:0b:80:f0:92:53:d7:
                    c4:d4:dd:76:65:06:55:53:93:bd:e1:75:c1:a7:2e:
                    d9:c5:60:55:bf:d3:61:57:67:12:b9:89:3b:e4:ef:
                    08:bb:04:93:46:24:65:27:f5:81:49:11:6b:8d:7d:
                    2e:d6:b4:5d:67:d0:eb:dc:5f:8f:e7:1d:02:6a:15:
                    61:89:5a:b5:e5:16:36:bb:35:ea:3e:3c:16:45:0e:
                    0c:d1:f1:a4:05:d7:bc:0f:8d:24:1a:b7:dd:17:20:
                    48:f2:97:dc:6b:e8:69:bc:01:1b:3d:db:13:6b:00:
                    e9:18:39:b0:5e:7a:f9:b2:f8:e2:ff:fa:48:d9:26:
                    7a:14:cd:81:0b:91:a6:7a:3e:32:83:77:64:d3:c6:
                    ee:cf:f0:f7:6c:e4:48:c5:18:08:2f:f9:8f:6a:f3:
                    b5:ba:a9:34:69:04:a3:55:69:45:db:fa:11:86:7f:
                    a7:74:36:93:81:cd:39:d2:61:0e:90:bd:39:af:2e:
                    86:78:53:da:2e:c7:ad:81:3f:7b:a6:33:1c:a6:d1:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:99:4C:FB:31:75:BE:47:97:24:A2:EA:09:49:30:49:0F:E0:96
            X509v3 Authority Key Identifier:
                keyid:E8:4B:07:25:99:A6:43:FE:71:F1:71:B1:5E:D7:24:21:3D:43:CE:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EsHJZmmQ_5x8XGxXtckIT1Dzls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/1/E84B072599A643FE71F171B15ED724213D43CE5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:b2:47:ae:1f:a5:c1:b1:3d:fa:f3:66:9b:7f:0f:38:06:
         83:48:b7:dc:d0:f2:c3:d0:73:aa:d4:c9:28:91:c8:5e:0f:20:
         c7:bc:65:00:06:4c:12:92:c2:7f:c9:a4:a7:b4:4d:09:a4:d7:
         df:52:0c:ad:22:bb:88:78:3d:5c:a9:fc:09:95:49:cc:0a:4d:
         8f:90:d4:eb:95:ab:05:1b:d7:ac:10:38:39:97:99:32:d2:f3:
         42:9b:6c:10:56:f0:74:a7:90:3b:b8:ec:1d:7e:5e:3e:dd:9d:
         2e:62:64:ac:67:3c:47:14:ae:5f:e3:cc:22:23:a4:e9:6e:87:
         d9:ee:29:93:b5:c5:8f:fb:56:02:7e:cf:95:c6:50:d6:58:94:
         09:e3:28:88:e8:de:e0:49:08:78:3c:14:aa:d1:61:d6:cd:37:
         3b:e6:e6:12:03:1a:ae:b6:85:02:69:23:a0:68:db:e1:df:13:
         dd:0e:73:18:b8:be:fa:b5:39:26:28:ba:87:c2:0e:f9:1b:78:
         c7:84:ee:91:7c:ef:8f:e6:cb:79:14:6c:75:05:c1:22:aa:82:
         13:4e:6a:13:98:95:9d:f3:3c:e5:c8:b4:5b:75:d0:1c:59:87:
         52:91:44:19:d7:c6:26:9d:6a:c9:e5:48:4c:c0:2f:50:f9:37:
         eb:8e:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:06:26 2025 by rpki-client