This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
File:                     FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft (raw, json)
Hash identifier:          +pgi1Ghuu4rRt59FPIl0WGOTsXTdELbV5XK71jrDpMk=
Subject key identifier:   27:C3:03:44:43:06:90:84:8A:99:42:52:43:4A:21:82:43:0A:B5:9A
Authority key identifier: FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE
Certificate issuer:       /CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
Certificate serial:       4A04D5AF0074B05780DA2058FD32EE11CD8959A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
Manifest number:          04A5
Signing time:             Sun 21 Dec 2025 04:10:23 +0000
Manifest this update:     Sun 21 Dec 2025 04:05:23 +0000
Manifest next update:     Mon 22 Dec 2025 04:46:23 +0000
Files and hashes:         1: FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl (hash: AuaVIg5gPTJCcuPlVbW3mthQ0bKdfwgYEumSA/jkBL8=)
                          2: 3230362e3139372e3231312e302f32342d3234203d3e2036303739.roa (hash: JgOpGqDdVslVQcTJB2tnyJshVTeovT1TL1zS7lPNLQ4=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:04:d5:af:00:74:b0:57:80:da:20:58:fd:32:ee:11:cd:89:59:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
        Validity
            Not Before: Dec 21 04:05:23 2025 GMT
            Not After : Dec 22 04:46:23 2025 GMT
        Subject: CN=27C30344430690848A994252434A2182430AB59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:5d:cd:65:fd:d6:73:e7:49:57:d0:7f:bd:
                    e9:77:86:da:91:56:3f:0c:b8:76:4d:2f:61:2f:62:
                    9a:68:2e:5f:36:9e:62:25:81:af:b8:68:6d:3e:c8:
                    6c:35:9f:4b:ff:91:c2:69:a7:f6:ca:db:bc:9f:67:
                    3e:e1:51:ae:d9:fe:05:85:bb:b5:fc:2c:3d:77:82:
                    31:1b:8e:30:c1:be:b5:f6:ba:df:00:eb:a2:4c:2e:
                    0b:cd:2c:a5:50:dc:d1:d9:5e:04:b2:3e:20:5d:8f:
                    ff:52:ef:73:3a:22:ab:7f:7c:86:bb:8f:76:70:9c:
                    25:f7:25:91:79:93:6c:aa:f1:66:39:0e:72:3f:97:
                    92:b6:77:c0:b8:da:03:7b:ac:32:33:59:af:4a:8b:
                    b9:79:7d:80:3a:87:69:20:01:e8:8a:a7:ab:93:aa:
                    94:f4:8f:45:56:33:25:26:fc:2f:04:97:c9:6c:a1:
                    ef:03:3b:23:12:b4:9b:ea:81:e2:bd:9b:ec:ae:5e:
                    36:c7:d9:f8:c5:e1:16:85:75:2f:13:44:01:39:af:
                    f8:1c:7b:1c:8c:38:09:d5:2e:6e:9b:6e:4c:d2:ae:
                    7d:cd:e4:c1:c0:d9:c3:57:dd:35:60:99:c5:75:a7:
                    b2:ce:ef:5a:49:0b:b4:6b:41:e5:6a:fd:4c:30:47:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:03:44:43:06:90:84:8A:99:42:52:43:4A:21:82:43:0A:B5:9A
            X509v3 Authority Key Identifier:
                keyid:FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:64:77:e3:60:fc:51:7e:80:4f:49:65:ef:e7:d2:24:9d:b8:
         47:78:c2:a7:9e:5b:e6:80:c0:a8:d5:b2:b0:96:e0:e5:fa:ae:
         f3:a5:72:6d:4d:b7:d9:95:f1:40:6a:1d:5b:6e:7f:2f:ae:6c:
         c4:f0:16:d4:9f:37:45:86:1f:5c:46:40:ed:41:65:63:95:62:
         43:96:34:7d:b9:8f:1e:57:a2:f7:ad:60:fe:b9:68:8b:9f:71:
         11:47:08:ea:bc:b9:76:ce:d0:34:48:01:46:77:7a:0f:e1:19:
         e7:4a:32:b2:ec:d2:cc:b1:61:93:4c:78:20:2e:e6:57:99:c4:
         5a:ab:12:e0:dc:c0:f5:cf:25:32:d9:cf:7f:44:4c:db:98:28:
         89:89:82:f3:f3:70:60:4e:e8:2e:b9:b5:2e:7c:f5:19:ba:78:
         73:b7:2c:fd:d1:4b:dd:3a:3d:ee:c5:86:40:b1:dc:a2:26:25:
         78:7d:e3:e6:fe:92:bf:5a:c2:88:a7:58:5e:c3:0f:0f:db:7a:
         83:cf:aa:5e:8b:a6:4c:80:56:a3:eb:c7:2d:12:ae:fb:f3:d0:
         f9:da:7a:e2:dd:89:8f:69:fa:b3:e3:2d:2c:f0:49:60:c6:2d:
         e4:b0:04:61:01:de:c7:65:4c:50:21:98:11:0d:11:29:19:e6:
         66:d3:21:d5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSgTVrwB0sFeA2iBY/TLuEc2JWaQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWI5ZjJjNmZmZjhiNzk3OTAzOGU2ZjU1YjY4ODczOWIx
ZTI3ZDk3YzI0MmVjNzJmNDQwHhcNMjUxMjIxMDQwNTIzWhcNMjUxMjIyMDQ0NjIz
WjAzMTEwLwYDVQQDEygyN0MzMDM0NDQzMDY5MDg0OEE5OTQyNTI0MzRBMjE4MjQz
MEFCNTlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE5dzWX91nPn
SVfQf73pd4bakVY/DLh2TS9hL2KaaC5fNp5iJYGvuGhtPshsNZ9L/5HCaaf2ytu8
n2c+4VGu2f4Fhbu1/Cw9d4IxG44wwb619rrfAOuiTC4LzSylUNzR2V4Esj4gXY//
Uu9zOiKrf3yGu492cJwl9yWReZNsqvFmOQ5yP5eStnfAuNoDe6wyM1mvSou5eX2A
OodpIAHoiqerk6qU9I9FVjMlJvwvBJfJbKHvAzsjErSb6oHivZvsrl42x9n4xeEW
hXUvE0QBOa/4HHscjDgJ1S5um25M0q59zeTBwNnDV901YJnFdaeyzu9aSQu0a0Hl
av1MMEctkwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFCfDA0RDBpCEiplCUkNKIYJD
CrWaMB8GA1UdIwQYMBaAFP8P66sffZg3M7xexiXCPS+u97muMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODkyN2IxZDgwMTg5NTRmYjliMGMyNTg3LzAv
RkYwRkVCQUIxRjdEOTgzNzMzQkM1RUM2MjVDMjNEMkZBRUY3QjlBRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2RmMTVhN2E0LTdjYTEtNDk1Ny1hYWQwLTlkMGFmNGEzNDg0Yy9lYjlm
MmM2ZmZmOGI3OTc5MDM4ZTZmNTViNjg4NzM5YjFlMjdkOTdjMjQyZWM3MmY0NC5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODkyN2IxZDgwMTg5NTRm
YjliMGMyNTg3LzAvRkYwRkVCQUIxRjdEOTgzNzMzQkM1RUM2MjVDMjNEMkZBRUY3
QjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAN1kd+Ng/FF+gE9JZe/n0iSduEd4wqeeW+aAwKjVsrCW
4OX6rvOlcm1Nt9mV8UBqHVtufy+ubMTwFtSfN0WGH1xGQO1BZWOVYkOWNH25jx5X
ovetYP65aIufcRFHCOq8uXbO0DRIAUZ3eg/hGedKMrLs0syxYZNMeCAu5leZxFqr
EuDcwPXPJTLZz39ETNuYKImJgvPzcGBO6C65tS589Rm6eHO3LP3RS906Pe7FhkCx
3KImJXh94+b+kr9awoinWF7DDw/beoPPql6LpkyAVqPrxy0Srvvz0PnaeuLdiY9p
+rPjLSzwSWDGLeSwBGEB3sdlTFAhmBENESkZ5mbTIdU=
-----END CERTIFICATE-----
Generated at Sun Dec 21 19:05:14 2025 by rpki-client