This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
File:                     C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft (raw, json)
Hash identifier:          YmcF5gkWt1u5Yi3/RUDDGYuyTGPOsxQ48yR7j7+QqVc=
Subject key identifier:   22:43:AB:3F:DE:79:17:C9:10:21:D2:0B:35:FA:F4:D6:7E:E9:DC:20
Authority key identifier: C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
Certificate issuer:       /CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
Certificate serial:       09C3904D7D9686BEE514EBA62CD2812F14107043
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
Manifest number:          2B
Signing time:             Fri 19 Dec 2025 10:44:28 +0000
Manifest this update:     Fri 19 Dec 2025 10:39:28 +0000
Manifest next update:     Sat 20 Dec 2025 11:40:28 +0000
Files and hashes:         1: C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl (hash: ZgRjc+SfHZ1tVPqeFxnbHK0ACW205oAkuSYm/BQLbcM=)
                          2: 32332e3134382e3135362e302f32342d3234203d3e203133333137.roa (hash: CBu21fpSB2POCoyJqAEbvso/BZD3oMVDt5utldBHWtw=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c3:90:4d:7d:96:86:be:e5:14:eb:a6:2c:d2:81:2f:14:10:70:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
        Validity
            Not Before: Dec 19 10:39:28 2025 GMT
            Not After : Dec 20 11:40:28 2025 GMT
        Subject: CN=2243AB3FDE7917C91021D20B35FAF4D67EE9DC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:85:08:ce:24:50:c6:bc:8f:ab:06:3a:70:
                    0b:5a:1b:6a:52:11:ac:42:31:3a:5c:17:f8:4f:37:
                    84:f1:9a:36:1f:c5:c6:0d:44:5e:d9:2a:9b:28:2c:
                    9c:97:87:67:e7:25:f9:e3:9c:af:3a:69:bc:c4:6d:
                    9b:a6:1b:d7:ed:b9:b0:a9:12:db:50:13:79:6e:de:
                    bc:da:0f:b7:7e:8c:40:d9:b2:5d:02:ca:46:34:68:
                    d9:ed:b2:3b:95:2e:ed:e6:b0:2d:10:99:38:37:e1:
                    f3:48:03:88:8a:6a:41:b4:fd:71:30:dd:bd:67:be:
                    00:bd:31:8c:fb:78:cb:07:75:8b:57:c9:d8:9c:81:
                    47:ef:57:86:84:2c:eb:5c:85:c2:ec:8a:8c:d5:48:
                    d2:34:08:59:d2:2a:6e:ae:d1:95:5e:bd:49:8c:13:
                    b1:5a:e1:68:a0:ba:82:4e:dd:68:43:75:c7:60:4d:
                    73:36:49:5b:ed:7a:1d:7b:49:cc:76:e2:fd:39:28:
                    5a:30:87:d0:c9:ca:b9:81:3d:69:7e:e6:6a:31:35:
                    5a:a4:48:2c:e6:6d:f9:9d:02:70:21:4f:a0:b0:5e:
                    97:b6:2e:f5:10:33:2a:e9:ca:74:c2:9a:f8:7c:35:
                    34:19:aa:d7:17:6f:36:1b:ae:7a:60:8d:ec:e0:6e:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:AB:3F:DE:79:17:C9:10:21:D2:0B:35:FA:F4:D6:7E:E9:DC:20
            X509v3 Authority Key Identifier:
                keyid:C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:32:6f:6b:0b:2a:f2:c4:ff:59:7d:72:66:67:f2:4d:af:8b:
         17:e5:9e:9d:c2:ed:ae:63:5d:15:77:56:e3:fd:aa:9e:89:47:
         70:7f:34:ac:8c:bb:13:ce:1e:bf:ff:4e:a3:89:bd:eb:87:c8:
         20:e8:dc:79:b3:a0:1a:7c:2a:a6:b8:9d:83:2f:01:55:61:44:
         a2:ae:4c:ee:b5:f9:90:d9:67:49:8a:d9:8c:af:f6:e8:b6:3a:
         04:49:80:af:d4:01:cc:d1:08:7c:f8:1f:b0:5e:a7:5f:80:8b:
         cc:be:a0:c7:72:be:c6:62:01:fc:67:b8:b5:50:9c:c9:79:48:
         de:4b:ab:c4:70:fa:dc:8b:eb:93:a7:66:69:b9:86:9b:72:09:
         ce:5a:10:e4:bc:cb:82:f7:27:0f:3a:9a:84:cf:83:e8:e2:56:
         cc:8f:04:f6:e7:07:80:dd:60:8e:6c:ea:36:db:18:5a:f8:97:
         0a:27:4a:f8:46:4a:eb:c1:05:8c:a9:b0:18:cc:10:d1:6c:ae:
         29:81:b8:a3:19:ea:bd:c6:96:ed:3e:a7:61:79:61:d9:88:b9:
         d2:f1:88:20:dd:83:21:d3:ff:d6:64:b1:f2:3a:b0:53:1f:85:
         88:1f:53:d4:89:b8:55:b8:04:1f:f5:37:52:74:69:3f:e0:0e:
         ca:aa:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:46:36 2025 by rpki-client