This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
File:                     CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft (raw, json)
Hash identifier:          DIkiXV5FXvfcn/KRgTbVHVi++XuLTr8ZQm+WCOBblac=
Subject key identifier:   83:91:62:4B:B8:19:C9:D5:4A:5C:95:CD:E6:04:91:D4:34:8A:BA:E4
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       77B5DB321A02CC0BAF0AA6FEBFDA19287CE9E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
Manifest number:          095B
Signing time:             Fri 19 Dec 2025 22:32:16 +0000
Manifest this update:     Fri 19 Dec 2025 22:27:16 +0000
Manifest next update:     Sat 20 Dec 2025 23:36:16 +0000
Files and hashes:         1: AS5650.roa (hash: ugrWu0waJProKQ4rONHUj+0qfJNcIgQOKGyain1cUFE=)
                          2: AS21696.roa (hash: N1fE2LW+G2pJnIOf60Wakt1Hgea/kp01wsfU0BHgB6A=)
                          3: CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl (hash: hON6tWX42j466BzqUZ9sAG0KOVOeDtCFEzGpYwY6Ras=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b5:db:32:1a:02:cc:0b:af:0a:a6:fe:bf:da:19:28:7c:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Dec 19 22:27:16 2025 GMT
            Not After : Dec 20 23:36:16 2025 GMT
        Subject: CN=8391624BB819C9D54A5C95CDE60491D4348ABAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:06:e9:8f:58:40:d5:b7:b6:bf:f3:b2:fc:
                    65:72:c6:e8:5a:43:a8:04:a7:8e:ff:65:1f:0e:d4:
                    47:bf:cb:4e:6d:f7:05:13:cd:c3:bd:72:f4:ba:e6:
                    78:a2:cd:6d:56:07:9e:cb:b0:25:99:cf:c1:06:8c:
                    f5:1d:a4:c3:fe:f6:c1:28:fc:f5:db:7c:f0:d6:2e:
                    3f:ac:89:c8:93:b2:92:de:91:27:3f:43:0e:46:1c:
                    9d:fc:11:89:30:2b:38:e1:d2:f1:5f:ce:54:c1:3e:
                    8f:8a:76:cd:1e:54:8f:49:f9:b1:02:d9:bb:b1:14:
                    53:7a:4f:e1:1b:61:07:91:77:74:48:4c:02:94:d6:
                    0e:8e:fc:c3:58:47:3c:7f:91:6d:6a:95:8a:cb:ed:
                    47:0c:61:7a:75:65:ff:08:12:7f:a5:bf:e9:18:00:
                    f4:ea:39:95:1d:98:09:51:68:09:64:b1:31:1e:66:
                    03:79:81:21:ed:f6:a0:60:eb:f2:c4:ef:78:94:71:
                    46:a9:88:58:b3:40:4f:ac:fb:66:a2:65:e7:45:5d:
                    6a:68:70:e5:2c:98:6e:4b:00:12:17:a9:ac:dc:61:
                    38:74:9e:94:58:b0:da:32:a6:0f:47:59:e4:59:0f:
                    3e:0a:e4:6e:8f:91:a4:92:4b:9e:4d:c1:e5:c6:fa:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:91:62:4B:B8:19:C9:D5:4A:5C:95:CD:E6:04:91:D4:34:8A:BA:E4
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6c:b1:89:42:6e:83:8a:00:00:bf:e6:f4:f8:4d:9f:78:ee:
         4b:0d:90:15:c1:2a:8e:5a:74:f5:71:d4:f9:b6:82:b7:5d:2e:
         9b:6c:77:15:4a:19:b7:b3:70:f4:8f:af:59:f3:36:82:c0:5e:
         8c:bd:00:60:82:3d:88:b3:25:83:70:50:c9:e8:bb:de:67:5f:
         21:f2:bf:cd:d5:1f:d5:29:18:26:1c:56:77:41:0f:4d:92:62:
         4e:04:70:b4:18:eb:de:22:ca:48:3a:21:a7:02:df:b1:8a:f3:
         08:bd:0f:db:f8:4c:69:70:09:16:ac:d1:09:c3:7c:0b:8a:7a:
         5b:3e:6d:20:db:c3:42:ac:b1:78:29:a7:03:e2:f1:51:c6:4c:
         20:88:55:f1:04:6e:a8:ab:14:3e:7e:75:b0:84:c5:0b:16:3c:
         97:08:d3:9f:42:6a:f2:4a:cd:17:d2:c9:90:97:25:37:a1:55:
         ca:ee:cd:1c:d9:47:a8:85:e2:cd:98:48:0a:5b:f4:e6:21:fe:
         c5:3f:35:cc:9b:2e:a8:5a:5a:02:4e:82:d6:c3:12:31:47:c7:
         db:4f:27:8f:af:5d:b8:30:44:44:40:20:a9:01:e9:23:13:9e:
         8a:25:76:b8:b1:42:81:c7:35:8b:f0:35:cb:b4:91:7c:d5:bb:
         42:2c:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:45:18 2025 by rpki-client