This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
File:                     BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft (raw, json)
Hash identifier:          RH7V+EoZFcdeKJDphbL2LM3PtJWka2YxOT7m7LR2WUk=
Subject key identifier:   A2:5F:3B:65:FD:0F:F2:3B:AF:AB:7E:5D:BF:E0:A2:4D:97:4E:23:1D
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       2B116EFEE88DB6F46096688D44D5C12FA1E1E0D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
Manifest number:          0372
Signing time:             Fri 19 Dec 2025 17:35:21 +0000
Manifest this update:     Fri 19 Dec 2025 17:30:21 +0000
Manifest next update:     Sat 20 Dec 2025 20:57:21 +0000
Files and hashes:         1: BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl (hash: x9MdP/zLN/7M+lnJVOC4KpuJGPdg6OnAg9run1cGfxo=)
                          2: 3130342e3235342e3139332e302f32342d3234203d3e20323132363639.roa (hash: /l/SvC/WUjO3fc/WD0O1sjRG1S3Qzqd2cwPY4JAH8mQ=)
                          3: 3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa (hash: +2OaCBfp76mZLzOQYQ62Sx1l5dBU3HJgppE51v56yq4=)
                          4: 3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa (hash: 1dEXyo/BDVUmSumDgkjiRdRAjK7wg1e16jwMUnZ1LfA=)
                          5: 3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa (hash: 4A0DPxCld03aET/LAXqyZ9SJTBWOqa962oSzBYA881c=)
                          6: 3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa (hash: Vgvajf2oKu06U3XmuVuH1zOP+prd+IppCV2Idp/Nic8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 20:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:11:6e:fe:e8:8d:b6:f4:60:96:68:8d:44:d5:c1:2f:a1:e1:e0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Dec 19 17:30:21 2025 GMT
            Not After : Dec 20 20:57:21 2025 GMT
        Subject: CN=A25F3B65FD0FF23BAFAB7E5DBFE0A24D974E231D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:2b:d9:3b:4c:93:08:e8:7b:53:61:a9:c0:
                    a8:1b:3e:6c:e4:38:58:00:cd:1f:8c:c1:99:3f:9b:
                    83:09:e4:f7:87:e8:0d:c9:d3:b4:56:8c:0c:34:93:
                    41:31:d2:5e:93:d1:9f:96:c0:ca:e5:e2:2d:f1:2d:
                    f7:ac:5b:ea:b9:a4:0f:23:52:ba:a9:ea:49:66:33:
                    f5:92:27:e3:43:31:19:82:7c:b9:b9:db:1e:01:55:
                    ee:c5:af:23:32:e8:fd:85:46:2f:98:83:bf:4f:bd:
                    46:3e:ea:aa:bf:1f:d9:c1:72:9b:2f:da:99:c9:c4:
                    b7:80:8b:7c:d6:71:d7:39:c2:3e:3b:c6:64:d9:cc:
                    ff:db:4d:a4:7d:60:04:26:80:30:2c:6b:29:ee:e3:
                    03:e1:ef:89:41:ad:2d:c3:89:d2:25:58:bd:2e:6e:
                    a9:a2:d8:61:c4:ff:9a:30:0d:17:cf:17:be:41:46:
                    2d:e1:18:7e:e6:56:a3:e7:db:64:99:9b:f7:19:27:
                    ec:9d:de:b3:41:ad:d7:19:82:01:25:65:32:15:5e:
                    48:7d:f6:43:57:b6:3c:d3:f8:81:0c:1f:59:8a:59:
                    5f:69:e6:70:0f:bb:03:fa:e3:61:f2:74:22:aa:b4:
                    05:1c:e0:9e:4c:f8:a8:84:0d:ec:c7:e6:ec:80:c9:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5F:3B:65:FD:0F:F2:3B:AF:AB:7E:5D:BF:E0:A2:4D:97:4E:23:1D
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:d4:2c:38:f6:06:79:66:9c:c2:f2:60:53:5f:56:2f:7f:
         b8:13:af:1d:f1:11:b9:e2:5a:56:97:64:c5:ae:d7:2d:e2:64:
         14:7b:fb:f2:06:5e:62:35:72:14:3e:d1:ec:e6:a4:c8:ee:0f:
         a2:48:12:ca:8d:0c:e4:e0:a8:ae:21:8d:37:cd:38:5b:d5:6e:
         ef:02:3d:bd:ba:f0:79:f4:8e:fd:25:17:05:0e:3b:c0:a7:61:
         db:63:74:9c:f4:00:1c:2e:9a:e1:78:00:a2:68:26:82:68:9e:
         f7:9e:1b:06:1f:48:fc:4a:3a:f3:ca:8a:dc:a1:22:f4:cf:ed:
         0c:5b:0f:6f:1b:0d:2f:02:c2:fe:90:b2:c7:c4:31:25:7a:1e:
         98:76:68:75:4d:41:db:05:fb:50:0a:ad:44:15:51:33:2d:41:
         6d:0e:dc:2e:2f:c6:af:3b:29:d6:0d:37:46:3c:dc:95:ce:29:
         d1:24:8a:a2:b9:e2:38:2f:70:03:82:35:3f:69:a0:cf:ce:93:
         e1:48:7f:48:50:8a:f5:33:f4:14:fa:da:66:6d:86:56:07:69:
         84:f7:18:c5:f5:ec:67:b9:bd:6b:55:c2:f0:aa:e4:66:32:80:
         76:94:84:ec:df:eb:4f:2f:f4:eb:d2:7c:91:53:14:ce:a9:ac:
         1c:ea:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:28:46 2025 by rpki-client