This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.mft
File:                     7ADE545B76400BD7E06BC029F5B592567190A90C.mft (raw, json)
Hash identifier:          2+wKU6goyP5ZM+zE6fXrFQILT1Pt2uofE/Kd9cN5NVg=
Subject key identifier:   B4:63:65:D1:00:7D:27:6B:3A:31:02:EF:BE:EE:C0:6C:49:54:0F:7C
Authority key identifier: 7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C
Certificate issuer:       /CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
Certificate serial:       2495009F914DB688EDACC64105A07F01E6C850C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.mft
Manifest number:          0E
Signing time:             Sun 30 Nov 2025 04:22:15 +0000
Manifest this update:     Sun 30 Nov 2025 04:17:15 +0000
Manifest next update:     Mon 01 Dec 2025 05:10:15 +0000
Files and hashes:         1: 3230362e3235312e35362e302f32322d3234203d3e203236353631.roa (hash: YGpbryyW6Fby/Id+a/vL8G/WEgGLzxjE9zFh8HOQWF4=)
                          2: 32332e3136342e3135322e302f32332d3234203d3e203236353631.roa (hash: yj0Drhy5aKZEFi8nudbB5SMJknFhkspV7G8EtE6IeXE=)
                          3: 7ADE545B76400BD7E06BC029F5B592567190A90C.crl (hash: RVuSdcvZRZknpTCBUiMnanqRN1uJAl9RkVly3DPP8iM=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203534343937.roa (hash: 0FhIHOh+1RfapWogp4OK4RIQoNiCJWoOZQEZiusJ1QI=)
                          5: 323630323a663966613a3a2f33362d3438203d3e203236353631.roa (hash: GIcsVx3rzbUpvBT3vhhg1f6S1Fq0tZR8QYrOBH05uE8=)
                          6: AS26561.asa (hash: ooZh5bwew3Hj7rVYtI/8jX+r8sI6IsLjkGUZl/EjJ34=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:95:00:9f:91:4d:b6:88:ed:ac:c6:41:05:a0:7f:01:e6:c8:50:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a
        Validity
            Not Before: Nov 30 04:17:15 2025 GMT
            Not After : Dec  1 05:10:15 2025 GMT
        Subject: CN=B46365D1007D276B3A3102EFBEEEC06C49540F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:83:d3:66:05:b4:b3:b1:e2:4b:85:3c:95:
                    f0:b5:01:a3:c4:92:6c:48:b5:ea:85:e7:26:33:7c:
                    4d:cc:68:7c:24:a4:f1:a8:f7:c6:da:0a:2d:5f:e3:
                    c5:3c:60:b2:28:a0:e3:54:d0:80:00:85:b2:e2:b0:
                    a2:66:8e:b3:f6:82:c4:b7:64:2e:82:d5:68:84:aa:
                    f1:79:29:b1:bd:b9:82:ac:64:75:25:8f:48:75:34:
                    cb:68:0d:a6:4e:d5:fd:da:00:0f:4e:35:95:37:2a:
                    cf:14:26:30:e6:4c:8e:2b:51:b8:6b:04:07:2a:a9:
                    86:d1:34:b0:0a:08:39:71:d1:cf:e3:d3:3b:8c:ca:
                    39:e7:cd:f9:5d:f3:12:0c:da:ad:2f:b8:da:ba:15:
                    e7:1e:00:8e:f3:c0:5b:ec:fa:ae:dc:14:45:c7:ef:
                    27:31:ca:68:85:d0:99:71:fa:5e:8d:d1:27:db:ea:
                    99:c7:2d:23:82:4f:7c:68:a3:12:34:8b:10:07:02:
                    7a:65:5e:1e:b9:08:f4:21:4a:d5:a7:e3:fc:b7:af:
                    77:7c:66:be:b8:55:31:0a:a2:30:70:7b:cc:09:fa:
                    2d:77:20:8a:d8:58:d0:64:a5:de:51:15:b2:51:f8:
                    d5:4f:6e:3d:0e:5e:91:55:f0:da:58:c4:6b:48:df:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:63:65:D1:00:7D:27:6B:3A:31:02:EF:BE:EE:C0:6C:49:54:0F:7C
            X509v3 Authority Key Identifier:
                keyid:7A:DE:54:5B:76:40:0B:D7:E0:6B:C0:29:F5:B5:92:56:71:90:A9:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/7ADE545B76400BD7E06BC029F5B592567190A90C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6f:e0:f0:5a:f9:fa:df:82:e2:ab:00:57:46:86:b9:57:77:
         e5:cb:ea:93:37:da:9b:7d:72:c6:c2:14:1b:5f:20:ac:29:a0:
         d7:63:94:24:3d:1c:e6:98:fb:a2:dc:12:9d:21:a3:18:09:8c:
         81:a7:a8:f7:be:10:3d:60:c5:26:2f:ce:f6:48:d9:b5:a0:87:
         cf:de:71:f7:db:48:5d:17:21:55:1d:4a:d2:46:e4:16:51:fe:
         3f:af:ad:9a:81:14:9b:12:aa:92:85:f4:da:c1:11:46:0e:4d:
         ff:11:2c:38:e3:22:22:ee:d7:1b:fd:3c:8d:e0:c9:57:38:98:
         17:35:e5:2b:0d:f5:b3:69:74:b2:b8:36:90:11:8b:4d:e2:63:
         a1:8e:32:12:2b:64:db:19:08:43:aa:1e:8c:29:ce:06:30:65:
         59:74:78:f2:81:bc:f6:66:b0:e1:ee:0c:cd:b5:e8:b8:0b:e3:
         89:aa:ea:84:f0:1d:78:ea:cc:5c:44:6d:6c:bd:98:6d:6c:88:
         41:3b:56:ad:12:94:22:af:5c:48:7e:02:d0:66:16:4d:05:f5:
         21:31:f8:f0:21:d1:61:1c:76:64:c4:e6:76:aa:c3:08:1b:93:
         84:bf:7d:37:b4:28:22:bb:2e:65:19:7d:44:b8:57:58:fd:dc:
         67:de:fe:b2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJJUAn5FNtojtrMZBBaB/AebIUMQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDkwZDhhYmEyYTc1ODI3YzRmMTNiYWY4NmY4YjMzYjk3
MmU0MWUzOTM0ZDk3YmM4OWEwHhcNMjUxMTMwMDQxNzE1WhcNMjUxMjAxMDUxMDE1
WjAzMTEwLwYDVQQDEyhCNDYzNjVEMTAwN0QyNzZCM0EzMTAyRUZCRUVFQzA2QzQ5
NTQwRjdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk06D02YFtLOx
4kuFPJXwtQGjxJJsSLXqhecmM3xNzGh8JKTxqPfG2gotX+PFPGCyKKDjVNCAAIWy
4rCiZo6z9oLEt2QugtVohKrxeSmxvbmCrGR1JY9IdTTLaA2mTtX92gAPTjWVNyrP
FCYw5kyOK1G4awQHKqmG0TSwCgg5cdHP49M7jMo55835XfMSDNqtL7jauhXnHgCO
88Bb7Pqu3BRFx+8nMcpohdCZcfpejdEn2+qZxy0jgk98aKMSNIsQBwJ6ZV4euQj0
IUrVp+P8t693fGa+uFUxCqIwcHvMCfotdyCK2FjQZKXeURWyUfjVT249Dl6RVfDa
WMRrSN+FMQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLRjZdEAfSdrOjEC777uwGxJ
VA98MB8GA1UdIwQYMBaAFHreVFt2QAvX4GvAKfW1klZxkKkMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzQ1NmY0YjI1ZDNkNjRhMjA4M2VhZjMzMmRjYWM0ZmFlLzAv
N0FERTU0NUI3NjQwMEJEN0UwNkJDMDI5RjVCNTkyNTY3MTkwQTkwQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0MzBlMi9kOTBk
OGFiYTJhNzU4MjdjNGYxM2JhZjg2ZjhiMzNiOTcyZTQxZTM5MzRkOTdiYzg5YS5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzQ1NmY0YjI1ZDNkNjRhMjA4M2VhZjMz
MmRjYWM0ZmFlLzAvN0FERTU0NUI3NjQwMEJEN0UwNkJDMDI5RjVCNTkyNTY3MTkw
QTkwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAG1v4PBa+frfguKrAFdGhrlXd+XL6pM32pt9csbCFBtf
IKwpoNdjlCQ9HOaY+6LcEp0hoxgJjIGnqPe+ED1gxSYvzvZI2bWgh8/ecffbSF0X
IVUdStJG5BZR/j+vrZqBFJsSqpKF9NrBEUYOTf8RLDjjIiLu1xv9PI3gyVc4mBc1
5SsN9bNpdLK4NpARi03iY6GOMhIrZNsZCEOqHowpzgYwZVl0ePKBvPZmsOHuDM21
6LgL44mq6oTwHXjqzFxEbWy9mG1siEE7Vq0SlCKvXEh+AtBmFk0F9SEx+PAh0WEc
dmTE5naqwwgbk4S/fTe0KCK7LmUZfUS4V1j93Gfe/rI=
-----END CERTIFICATE-----
Generated at Sun Dec 7 13:24:12 2025 by rpki-client