This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
File:                     88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft (raw, json)
Hash identifier:          LKYD7iDFGXbmaLjNHPe3MzZtMxrztldVQV5szgsFjDk=
Subject key identifier:   A9:1C:E3:0F:75:94:90:B3:05:F4:53:20:2B:67:DC:4B:7C:3F:BD:A6
Authority key identifier: 88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D
Certificate issuer:       /CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
Certificate serial:       65499C1E4320576753F13866628F816339E42AFD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
Manifest number:          EC
Signing time:             Mon 22 Dec 2025 02:25:20 +0000
Manifest this update:     Mon 22 Dec 2025 02:20:20 +0000
Manifest next update:     Tue 23 Dec 2025 06:11:20 +0000
Files and hashes:         1: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030393532.roa (hash: CqSxF4HN3onpF5hjjkw5jTsETH9oEB4YwWv083nq6Sc=)
                          2: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030343534.roa (hash: vnnKiyGc/X/xlNdPqJxeg52jZ3MPfXDJB+VwdL0zc5w=)
                          3: 326130373a353463303a666665653a3a2f34382d3438203d3e203530373535.roa (hash: wFJcUkB4UsfMt5v37dlK0v8hBWsxC/JswW1Y7HxXs34=)
                          4: 326130373a353463303a666665653a3a2f34382d3438203d3e203630393030.roa (hash: 0nm82AHKgeNaH8gZFNO7SKfmfQxII8a9vCZMZP0aHKI=)
                          5: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363930.roa (hash: 9o8anlLLx1TfMy5ToIEJD0ipBQLSyLVxihHhR87FWp0=)
                          6: 326130373a353463303a666665653a3a2f34382d3438203d3e20323033363139.roa (hash: 7ABUd2taHG8932lIWK0dScnix4cE5RbXgmShCF8u5E0=)
                          7: 326130373a353463303a666665653a3a2f34382d3438203d3e203534363831.roa (hash: eaAXtGLtpwBop1rD2gozzjbkY8axcU1C9xk6TsNT96Y=)
                          8: 326130373a353463303a666665653a3a2f34382d3438203d3e203539363738.roa (hash: oZtp7Wi4vD26iLFx8WKH0Rkd1Q0kdKKgkshMBz+2/p0=)
                          9: 326130373a353463303a666665653a3a2f34382d3438203d3e203537383730.roa (hash: RGY238ItPF6MbTAIz/6smYWJWxRauaXh4en1QUpHZts=)
                          10: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363637.roa (hash: v1fWOlJLe29JRqURNtpmNeBnbwQJ8w725Kjqqr9ME0E=)
                          11: 326130373a353463303a666665653a3a2f34382d3438203d3e20323130363435.roa (hash: VDC5+FDlDmQEjH+yjxRHZnsxZiJm/VYLUYrUxEhHNcA=)
                          12: 326130373a353463303a666665653a3a2f34382d3438203d3e20323133313633.roa (hash: ztAf6GNu+6H6fl2PaEsGhEllRZxmf+rjFhisHYTBFLA=)
                          13: 326130373a353463303a666665653a3a2f34382d3438203d3e20323030363736.roa (hash: zWZm6ICUXN9IW25D+/RoUHspepc9eOIu4V0UlMEPCEg=)
                          14: 88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl (hash: jdeSJQjHWZ6heNW2m5fV9I42NalzyASpv3XFHJNsc8I=)
                          15: 326130373a353463303a666665653a3a2f34382d3438203d3e20323131333830.roa (hash: EB3ApEr2o85R7aHVO5SjxQcIMDp14X4FBH6JjhHeQwI=)
                          16: 326130373a353463303a666665653a3a2f34382d3438203d3e203539393933.roa (hash: IqrBLwaB6Ud6y8cUbAdAosH8szEn0KkX5WONAY4aEDc=)
                          17: 326130373a353463303a666665653a3a2f34382d3438203d3e203630373433.roa (hash: TsWAIrg674GQJT0yOpi8B7ZqXIGLtoojNLgCNsv7hvI=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 04:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:9c:1e:43:20:57:67:53:f1:38:66:62:8f:81:63:39:e4:2a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88973C39A1ED43B10DFABD6EBCDB6B4810BED41D
        Validity
            Not Before: Dec 22 02:20:20 2025 GMT
            Not After : Dec 23 06:11:20 2025 GMT
        Subject: CN=A91CE30F759490B305F453202B67DC4B7C3FBDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:3c:0b:f9:1e:e9:95:75:b5:c1:81:57:19:
                    6b:d6:51:e5:70:4a:53:a3:9f:e5:34:73:d3:f7:fb:
                    46:f7:8b:a7:e1:b2:83:74:0e:f3:65:dd:95:23:cc:
                    83:f8:ba:09:92:6d:02:7c:df:8c:2d:72:9a:00:41:
                    08:61:bb:2a:9d:03:90:e8:9b:4b:d7:1e:98:f6:50:
                    1a:d1:0a:fe:46:c1:b7:1f:9a:4c:e2:7c:21:25:59:
                    1b:a8:d1:84:79:c2:4d:2f:6b:df:47:ba:9e:40:76:
                    43:5f:b5:a5:51:e1:63:d8:08:dd:ed:55:04:b5:d8:
                    6a:08:d6:5d:ca:0a:66:65:e5:53:e1:e8:f1:1a:f6:
                    bd:54:c9:56:f1:74:bc:71:e2:c9:7a:4a:1f:42:75:
                    0b:43:72:43:bc:08:90:e5:52:6b:05:c8:18:31:8b:
                    95:06:25:e8:15:fa:d2:af:c6:d6:f3:39:0c:52:1c:
                    95:aa:bc:60:7a:fa:a0:e4:d3:b2:a3:d5:ff:13:8c:
                    3a:e6:b5:83:9a:7c:be:58:a6:e4:03:52:c8:eb:3f:
                    a8:87:7e:f3:8f:6c:9b:26:a6:b1:51:44:f8:92:f7:
                    f4:77:8e:dd:ae:54:8d:67:36:de:72:1d:5d:bb:9a:
                    23:70:67:37:15:ab:98:17:f0:6a:18:20:97:96:9b:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1C:E3:0F:75:94:90:B3:05:F4:53:20:2B:67:DC:4B:7C:3F:BD:A6
            X509v3 Authority Key Identifier:
                keyid:88:97:3C:39:A1:ED:43:B1:0D:FA:BD:6E:BC:DB:6B:48:10:BE:D4:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/5/88973C39A1ED43B10DFABD6EBCDB6B4810BED41D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:91:5e:8f:87:3c:5f:ed:fb:7a:81:74:5d:89:1f:6c:06:d6:
         c0:2c:b5:ed:fb:a2:78:8c:52:03:57:29:aa:cf:a2:a8:e7:0a:
         10:a2:48:51:7d:65:f4:95:1b:cc:61:fb:93:00:8f:e9:40:1c:
         8f:33:55:d8:32:28:50:6d:bb:6b:74:57:0c:a0:1b:48:26:94:
         eb:68:36:30:8b:9a:0b:f4:27:b8:2d:e7:b7:b3:55:ff:66:1d:
         55:bf:46:5c:b9:25:68:e1:ea:33:69:92:ae:c8:f8:f0:21:22:
         0f:85:9b:0d:f9:03:7d:9c:ae:04:53:19:7f:d9:3e:6a:c4:2a:
         e0:fc:01:07:c6:e2:6c:3a:37:cd:35:81:95:97:a8:3d:f0:0f:
         41:da:b7:f7:c7:d5:e2:e7:8b:b4:78:64:46:0b:7d:80:7f:34:
         38:9d:e6:4e:e6:b3:fe:9b:ee:06:d3:62:d7:f4:a7:fd:a2:c6:
         6e:d7:84:50:0b:d6:39:e2:c3:96:49:69:33:24:ca:d0:6b:17:
         69:3d:01:99:8c:51:62:2e:1e:40:90:61:7f:bc:e3:b5:a4:11:
         c9:dc:42:fd:61:fe:60:44:86:45:97:5e:98:8e:63:a4:f7:a4:
         28:37:c2:52:66:05:67:0d:a1:16:9c:2c:17:a8:ab:7d:88:26:
         2c:48:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 15:38:43 2025 by rpki-client