This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
File:                     DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft (raw, json)
Hash identifier:          zxmBcmfiGI3FldU7KJge19nEXm1IvhRPhl7pLEmBJgc=
Subject key identifier:   52:06:02:08:8A:3B:CF:2B:3B:57:D9:D4:4D:F4:A7:66:09:65:0A:AC
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       6EA3EEE9F719EF3853FCCBC3A4803CBEABE30555
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
Manifest number:          8D
Signing time:             Sat 06 Dec 2025 18:24:53 +0000
Manifest this update:     Sat 06 Dec 2025 18:19:53 +0000
Manifest next update:     Sun 07 Dec 2025 21:25:53 +0000
Files and hashes:         1: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl (hash: pOjZRf6Kl97pfJVuG/p7t7j73aORHhmYm0jYfCd89oU=)
                          2: 3136352e3134302e32362e302f32342d3234203d3e20383334.roa (hash: LJaPB7PWcUW6ceKAo4Q7RhsRvYq/m+agtiWRLVuQ8MI=)
                          3: 3136352e3134302e32352e302f32342d3234203d3e2039333034.roa (hash: oXxBG78HnQQPoVcVjfijLvrQF/Qc12X4uwNAXz0AYZw=)
                          4: 3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (hash: /uOm3NZhfzbO8K0EaDwD6+mnAwKqohKi5U32Ftdk/DE=)
                          5: 3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (hash: JOe5Bws2Czl2Xfjv8NkbPuCupbQkAHqMlv0J80ZQIuM=)
                          6: 3136352e3134302e32372e302f32342d3234203d3e20333937363330.roa (hash: VWmVLcZU2ImmYQc/ehPf9GibjoWjkOhTRarQQdROy/s=)
                          7: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (hash: i6SllSmn92lyxwCyF/7XFoj1Qnfc6F7BynX/boNBjW8=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a3:ee:e9:f7:19:ef:38:53:fc:cb:c3:a4:80:3c:be:ab:e3:05:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Dec  6 18:19:53 2025 GMT
            Not After : Dec  7 21:25:53 2025 GMT
        Subject: CN=520602088A3BCF2B3B57D9D44DF4A76609650AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:b1:9e:26:7b:4e:0a:cc:03:0b:15:53:14:
                    72:3a:05:76:da:65:fe:69:d0:b4:32:8a:fd:33:38:
                    c8:f0:d1:d5:50:73:a9:8f:8f:21:fa:5d:ac:d2:0f:
                    c6:88:cd:63:d5:6b:c3:9f:d9:cc:8d:23:57:e5:79:
                    07:84:73:af:5b:11:5a:89:44:36:a5:e7:20:75:ff:
                    06:20:e3:e9:ce:83:f2:e9:fb:6d:ab:46:94:52:e4:
                    88:37:5b:19:de:69:5b:31:91:30:5f:cb:f7:da:e8:
                    74:65:5e:69:2c:05:b1:73:1f:46:73:fe:04:b0:19:
                    74:c3:ea:19:86:a4:fe:73:b2:8a:19:3d:b3:74:f5:
                    87:70:6a:81:17:4d:78:ed:38:da:de:6d:1d:ac:c0:
                    a5:c1:73:c4:f4:5a:d8:52:b8:2c:53:b8:cf:41:7f:
                    e6:df:ff:b0:d7:bf:16:d8:fd:e6:85:94:02:a8:cb:
                    f5:ba:30:eb:58:76:81:66:41:ae:4d:08:e2:3d:7b:
                    2f:37:5c:34:7b:64:6a:8c:d4:85:3c:fc:4e:fe:5c:
                    2d:24:e4:f1:7f:c0:71:31:ed:da:74:0c:3e:ff:3d:
                    09:2a:20:53:bb:bf:d5:3e:42:32:ff:df:dd:15:d0:
                    4f:e8:e1:5c:43:88:65:72:c0:66:3a:bb:c9:b7:0f:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:06:02:08:8A:3B:CF:2B:3B:57:D9:D4:4D:F4:A7:66:09:65:0A:AC
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:58:f8:7e:a2:65:1d:82:a8:4a:ff:b1:d4:4d:ff:1d:40:f7:
         d4:af:50:5c:d2:28:57:3b:70:91:08:dc:4e:be:76:6c:af:df:
         68:d3:5f:8f:c8:22:bc:e7:be:fe:42:7d:36:58:83:51:1d:74:
         5a:76:3f:ba:25:3d:9d:5f:5f:10:79:82:3a:8e:51:5c:c0:0e:
         c3:f2:c3:5b:ec:57:51:19:bd:ba:15:6c:1d:3b:ff:11:27:d7:
         73:09:78:2e:d2:98:02:48:45:3c:d3:90:c3:b5:d0:d0:3f:76:
         da:f7:72:a6:ac:ac:a2:10:4a:59:e5:82:07:5a:7e:35:f6:5c:
         2a:55:88:24:3f:ba:06:65:ae:17:67:60:97:e6:45:bf:53:83:
         e4:4b:b1:0a:c0:98:23:92:2b:33:f1:65:9a:c2:04:49:98:fc:
         c9:1e:b1:8b:73:35:dd:b1:52:d4:32:88:4a:1a:d9:74:b8:98:
         5a:4e:75:a4:4e:bf:24:d4:66:d9:bb:9f:c6:4f:df:fb:07:f8:
         9f:18:5e:47:5f:27:b0:6d:1a:53:b5:89:89:11:a7:4b:f4:6e:
         43:ed:ea:01:26:81:f4:52:6b:27:9d:84:18:51:c4:aa:03:1b:
         87:19:00:bb:04:db:46:8b:56:38:d3:63:2e:e4:f6:f8:3a:74:
         35:ba:e9:0a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbqPu6fcZ7zhT/MvDpIA8vqvjBVUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy
YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjUxMjA2MTgxOTUzWhcNMjUxMjA3MjEyNTUz
WjAzMTEwLwYDVQQDEyg1MjA2MDIwODhBM0JDRjJCM0I1N0Q5RDQ0REY0QTc2NjA5
NjUwQUFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhexniZ7TgrM
AwsVUxRyOgV22mX+adC0Mor9MzjI8NHVUHOpj48h+l2s0g/GiM1j1WvDn9nMjSNX
5XkHhHOvWxFaiUQ2pecgdf8GIOPpzoPy6fttq0aUUuSIN1sZ3mlbMZEwX8v32uh0
ZV5pLAWxcx9Gc/4EsBl0w+oZhqT+c7KKGT2zdPWHcGqBF0147Tja3m0drMClwXPE
9FrYUrgsU7jPQX/m3/+w178W2P3mhZQCqMv1ujDrWHaBZkGuTQjiPXsvN1w0e2Rq
jNSFPPxO/lwtJOTxf8BxMe3adAw+/z0JKiBTu7/VPkIy/9/dFdBP6OFcQ4hlcsBm
OrvJtw8ASwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFFIGAgiKO88rO1fZ1E30p2YJ
ZQqsMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv
REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz
MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1
YTU0NmU2ZWY0LzAvREQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVF
M0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAK1Y+H6iZR2CqEr/sdRN/x1A99SvUFzSKFc7cJEI3E6+
dmyv32jTX4/IIrznvv5CfTZYg1EddFp2P7olPZ1fXxB5gjqOUVzADsPyw1vsV1EZ
vboVbB07/xEn13MJeC7SmAJIRTzTkMO10NA/dtr3cqasrKIQSlnlggdafjX2XCpV
iCQ/ugZlrhdnYJfmRb9Tg+RLsQrAmCOSKzPxZZrCBEmY/MkesYtzNd2xUtQyiEoa
2XS4mFpOdaROvyTUZtm7n8ZP3/sH+J8YXkdfJ7BtGlO1iYkRp0v0bkPt6gEmgfRS
ayedhBhRxKoDG4cZALsE20aLVjjTYy7k9vg6dDW66Qo=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:21:25 2025 by rpki-client