This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File:                     C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier:          ax7oyjDGbTPqMZYVAxVgP70yNjcgUTPiejGk+EtzXv8=
Subject key identifier:   6C:50:8C:39:DD:19:5F:CA:55:CF:CC:A6:52:E7:4C:02:CD:36:F5:87
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer:       /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial:       66BFD52A50507DB3AE599ECE43AA9150CC9FE7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number:          0114
Signing time:             Fri 05 Dec 2025 22:49:18 +0000
Manifest this update:     Fri 05 Dec 2025 22:44:18 +0000
Manifest next update:     Sun 07 Dec 2025 01:15:18 +0000
Files and hashes:         1: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
                          2: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: RfE3xEVThctRE2CKjf09GIOdkHBP/cxrqScuQT4rphc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bf:d5:2a:50:50:7d:b3:ae:59:9e:ce:43:aa:91:50:cc:9f:e7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
        Validity
            Not Before: Dec  5 22:44:18 2025 GMT
            Not After : Dec  7 01:15:18 2025 GMT
        Subject: CN=6C508C39DD195FCA55CFCCA652E74C02CD36F587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:cb:65:76:df:1e:f1:61:d7:64:d2:3a:eb:
                    66:22:2a:1b:1d:a0:ba:2c:e1:84:cd:b5:fe:5d:07:
                    a4:ef:36:cc:3a:66:e1:f2:9b:e5:85:19:0b:a7:1c:
                    14:94:ee:05:b6:e6:30:9b:9e:ae:68:bd:01:d0:a2:
                    2a:23:3d:02:27:08:cd:81:24:34:c1:06:67:2e:2b:
                    78:5a:3b:b2:1b:35:59:12:55:81:50:39:77:7f:46:
                    0b:00:de:73:95:e0:fc:fb:50:56:d7:7a:a2:fe:0a:
                    a6:e3:2b:ac:32:c4:36:ca:ff:5c:91:f7:08:d4:f7:
                    c5:4f:32:61:54:47:37:95:f1:35:7b:7b:26:d8:61:
                    6c:6f:00:d6:fe:8b:ed:6a:cd:f5:b9:b0:f3:8f:85:
                    ee:01:cd:c5:0f:ad:fa:63:69:6f:b9:ae:b0:a5:bf:
                    a1:1e:64:6a:80:8a:6a:a7:3f:15:64:72:08:8d:15:
                    d5:3a:73:92:77:05:58:31:b8:77:8b:4d:1c:27:15:
                    9a:9a:72:eb:e2:92:58:30:20:0e:f1:72:93:12:16:
                    19:83:20:06:7e:ba:ef:50:a1:7d:5d:d0:62:8a:d0:
                    85:9f:0d:df:94:3d:e4:7a:3c:b2:62:2d:03:6d:d1:
                    7f:5c:fe:88:64:c6:ea:1c:ca:04:4e:cb:9d:7b:ee:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:50:8C:39:DD:19:5F:CA:55:CF:CC:A6:52:E7:4C:02:CD:36:F5:87
            X509v3 Authority Key Identifier:
                keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:88:89:77:6e:92:92:68:d9:8d:0a:e1:02:e7:5a:dc:95:
         e4:1b:2f:05:42:17:7a:19:37:2a:ea:c9:2b:d7:f1:b5:8a:8b:
         eb:de:09:f1:c5:d9:2f:96:d1:ce:bf:7b:3b:a3:3c:fb:95:34:
         f2:ac:af:0a:f0:59:24:62:4e:15:00:3c:30:06:5f:70:45:91:
         3e:62:c4:ac:74:45:21:8b:b4:6c:13:c8:85:2f:1b:e7:86:77:
         5b:be:0c:ce:b6:f2:3e:37:9c:12:3d:68:0a:67:cd:a0:a8:5e:
         bb:b5:f0:a9:c0:6b:c4:e3:13:50:ab:fd:7b:b2:71:2f:68:cb:
         51:96:e7:44:52:c0:92:7c:6d:bc:29:d5:31:96:da:cc:40:00:
         16:11:04:03:2a:30:19:90:e4:24:53:fe:55:f5:3f:5b:59:4a:
         05:95:43:85:be:a9:13:6e:6b:28:0b:e4:29:ac:fc:7c:42:f4:
         a1:bb:55:7b:9b:bb:cd:da:94:aa:57:85:a0:33:9f:48:1f:b7:
         b2:71:45:a8:8c:6a:71:4b:40:33:9d:10:e9:ec:d6:85:8b:92:
         43:df:6c:78:fa:a8:b7:37:0f:5c:14:40:ec:e9:4c:33:a2:9d:
         42:90:71:bc:25:b3:cc:87:a5:f6:ea:dd:cc:a0:4c:ee:07:38:
         44:41:29:7f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUZr/VKlBQfbOuWZ7OQ6qRUMyf59QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzFkYzI1Yzc4MGU3YTI0ODE3MTM5ZDk4MGEyOGE5Nzgx
ZmE2YTQ5MzAeFw0yNTEyMDUyMjQ0MThaFw0yNTEyMDcwMTE1MThaMDMxMTAvBgNV
BAMTKDZDNTA4QzM5REQxOTVGQ0E1NUNGQ0NBNjUyRTc0QzAyQ0QzNkY1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpLMtldt8e8WHXZNI662YiKhsd
oLos4YTNtf5dB6TvNsw6ZuHym+WFGQunHBSU7gW25jCbnq5ovQHQoiojPQInCM2B
JDTBBmcuK3haO7IbNVkSVYFQOXd/RgsA3nOV4Pz7UFbXeqL+CqbjK6wyxDbK/1yR
9wjU98VPMmFURzeV8TV7eybYYWxvANb+i+1qzfW5sPOPhe4BzcUPrfpjaW+5rrCl
v6EeZGqAimqnPxVkcgiNFdU6c5J3BVgxuHeLTRwnFZqacuviklgwIA7xcpMSFhmD
IAZ+uu9QoX1d0GKK0IWfDd+UPeR6PLJiLQNt0X9c/ohkxuocygROy5177h2lAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUbFCMOd0ZX8pVz8ymUudMAs029YcwHwYDVR0j
BBgwFoAUwdwlx4DnokgXE52YCiipeB+mpJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMi9DMURDMjVDNzgw
RTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvd2R3bHg0RG5va2dYRTUyWUNpaXBlQi1tcEpNLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv
Mi9DMURDMjVDNzgwRTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAl1+IiXdukpJo2Y0K4QLnWtyV5BsvBUIXehk3KurJK9fxtYqL694J8cXZ
L5bRzr97O6M8+5U08qyvCvBZJGJOFQA8MAZfcEWRPmLErHRFIYu0bBPIhS8b54Z3
W74MzrbyPjecEj1oCmfNoKheu7XwqcBrxOMTUKv9e7JxL2jLUZbnRFLAknxtvCnV
MZbazEAAFhEEAyowGZDkJFP+VfU/W1lKBZVDhb6pE25rKAvkKaz8fEL0obtVe5u7
zdqUqleFoDOfSB+3snFFqIxqcUtAM50Q6ezWhYuSQ99sePqotzcPXBRA7OlMM6Kd
QpBxvCWzzIel9urdzKBM7gc4REEpfw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:01:29 2025 by rpki-client