This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
File:                     3ADFF43986E042383993F6EB931F2081432E18D4.mft (raw, json)
Hash identifier:          F/ip19pOncfzcBMr4fnuiYlIQVZrOq+M0Xg3Rr/ZhoM=
Subject key identifier:   F9:5B:E2:05:37:BC:96:AE:59:B0:68:E0:D8:84:3F:78:85:43:11:9A
Authority key identifier: 3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4
Certificate issuer:       /CN=3adff43986e042383993f6eb931f2081432e18d4
Certificate serial:       1CEB3265934DFC8F1E79749472B59F07EF41139C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
Manifest number:          0391
Signing time:             Fri 05 Dec 2025 05:24:49 +0000
Manifest this update:     Fri 05 Dec 2025 05:19:49 +0000
Manifest next update:     Sat 06 Dec 2025 07:10:49 +0000
Files and hashes:         1: 3ADFF43986E042383993F6EB931F2081432E18D4.crl (hash: QpC1UJUSNgJHsGNrjbQ3uyf1tQ9CLEGDX/oWuoQErIc=)
                          2: AS48606.asa (hash: 5NWb4N+D0OquyokzVrf8CTeFzp8KBWxtJJ16mYNyMNg=)
                          3: AS59678.asa (hash: MrrWJ9l8lgWoC35oKfd53MWxXqNmbveRovZsM7Giidk=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 07:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:32:65:93:4d:fc:8f:1e:79:74:94:72:b5:9f:07:ef:41:13:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adff43986e042383993f6eb931f2081432e18d4
        Validity
            Not Before: Dec  5 05:19:49 2025 GMT
            Not After : Dec  6 07:10:49 2025 GMT
        Subject: CN=F95BE20537BC96AE59B068E0D8843F788543119A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:ab:f7:93:be:98:e1:4a:13:68:56:d9:bd:
                    c0:80:10:0e:d5:a2:74:90:47:96:ae:a1:71:a0:f0:
                    0d:65:7e:4a:c1:eb:9e:05:53:16:1f:ac:22:0e:3f:
                    77:11:14:16:ce:5a:5f:1a:1f:27:80:01:a7:00:59:
                    73:65:16:14:e7:53:33:01:eb:84:81:4e:6a:14:0e:
                    cb:48:26:9e:1c:b5:45:21:5c:b1:dc:82:d9:78:79:
                    45:4f:c4:25:87:94:89:3c:ff:2e:69:87:6c:dc:1c:
                    ca:8e:24:d0:dd:57:c9:04:b3:af:f7:ca:da:9d:8d:
                    a1:57:e2:f2:e4:e8:02:01:42:ad:51:69:48:51:34:
                    9e:52:88:df:23:b3:97:05:4d:bc:8f:12:d4:76:20:
                    84:05:68:e9:6d:ef:30:a3:f9:86:94:94:31:8d:e8:
                    ea:0d:f4:78:8c:99:a9:5c:9b:ac:ce:25:25:8a:60:
                    1c:49:9c:f5:53:6b:96:9e:ef:d5:4c:01:35:28:b5:
                    90:ba:1d:8d:a3:34:19:fe:30:ea:2f:77:f1:47:1c:
                    d4:a6:36:c0:ed:67:63:88:eb:66:12:91:13:50:68:
                    56:f2:f7:a3:ad:3d:77:24:30:60:6b:bc:57:1f:fb:
                    0f:23:62:a5:b5:09:27:35:cd:cc:7c:0d:93:8d:e9:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:E2:05:37:BC:96:AE:59:B0:68:E0:D8:84:3F:78:85:43:11:9A
            X509v3 Authority Key Identifier:
                keyid:3A:DF:F4:39:86:E0:42:38:39:93:F6:EB:93:1F:20:81:43:2E:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_0OYbgQjg5k_brkx8ggUMuGNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/0/3ADFF43986E042383993F6EB931F2081432E18D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:6e:92:b4:bf:b9:3b:54:3e:26:99:c0:de:80:d6:84:3f:
         9c:72:b1:83:c3:07:fe:a7:09:7a:dd:70:91:a2:0d:53:a2:46:
         3f:57:08:ab:c1:b6:3b:5d:8c:e8:40:87:f2:5f:c9:3a:22:d8:
         fc:50:d9:fc:88:00:44:fb:90:db:2f:aa:d0:d9:ff:44:0f:3b:
         5c:d6:2f:ac:5e:a7:9d:a6:e6:2f:54:25:d3:57:3c:14:38:0a:
         e5:21:61:29:e7:5e:37:0d:68:c9:3b:d6:d4:b8:b3:ab:c4:cd:
         9e:2c:6f:05:65:7e:83:38:31:18:a9:9c:a5:c9:0b:b2:2f:e8:
         f5:9e:da:9b:20:a9:03:77:80:26:6c:ee:84:00:4e:6d:4e:49:
         8a:95:d8:74:d5:b8:57:b8:71:8b:de:7d:91:3b:ca:b1:04:e7:
         cd:97:21:e8:3b:a6:d7:b1:f8:55:93:36:39:70:be:6b:3c:0a:
         52:93:73:7a:fd:d0:38:06:04:08:e2:28:fa:e0:a0:c1:e9:ef:
         52:2f:24:60:4f:41:71:ce:ac:73:61:6e:00:bb:c6:71:46:b6:
         76:fb:6e:1f:57:44:27:44:d3:96:35:00:8a:b3:66:16:12:5d:
         52:77:06:ce:c1:2b:c3:03:15:5b:9c:3a:a6:7e:de:82:33:b0:
         ba:bc:aa:59
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUHOsyZZNN/I8eeXSUcrWfB+9BE5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2FkZmY0Mzk4NmUwNDIzODM5OTNmNmViOTMxZjIwODE0
MzJlMThkNDAeFw0yNTEyMDUwNTE5NDlaFw0yNTEyMDYwNzEwNDlaMDMxMTAvBgNV
BAMTKEY5NUJFMjA1MzdCQzk2QUU1OUIwNjhFMEQ4ODQzRjc4ODU0MzExOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJI6v3k76Y4UoTaFbZvcCAEA7V
onSQR5auoXGg8A1lfkrB654FUxYfrCIOP3cRFBbOWl8aHyeAAacAWXNlFhTnUzMB
64SBTmoUDstIJp4ctUUhXLHcgtl4eUVPxCWHlIk8/y5ph2zcHMqOJNDdV8kEs6/3
ytqdjaFX4vLk6AIBQq1RaUhRNJ5SiN8js5cFTbyPEtR2IIQFaOlt7zCj+YaUlDGN
6OoN9HiMmalcm6zOJSWKYBxJnPVTa5ae79VMATUotZC6HY2jNBn+MOovd/FHHNSm
NsDtZ2OI62YSkRNQaFby96OtPXckMGBrvFcf+w8jYqW1CSc1zcx8DZON6c5zAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU+VviBTe8lq5ZsGjg2IQ/eIVDEZowHwYDVR0j
BBgwFoAUOt/0OYbgQjg5k/brkx8ggUMuGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMC8zQURGRjQzOTg2
RTA0MjM4Mzk5M0Y2RUI5MzFGMjA4MTQzMkUxOEQ0LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvT3RfME9ZYmdRamc1a19icmt4OGdnVU11R05RLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUv
MC8zQURGRjQzOTg2RTA0MjM4Mzk5M0Y2RUI5MzFGMjA4MTQzMkUxOEQ0Lm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAJxxukrS/uTtUPiaZwN6A1oQ/nHKxg8MH/qcJet1wkaINU6JGP1cIq8G2
O12M6ECH8l/JOiLY/FDZ/IgARPuQ2y+q0Nn/RA87XNYvrF6nnabmL1Ql01c8FDgK
5SFhKedeNw1oyTvW1Lizq8TNnixvBWV+gzgxGKmcpckLsi/o9Z7amyCpA3eAJmzu
hABObU5JipXYdNW4V7hxi959kTvKsQTnzZch6Dum17H4VZM2OXC+azwKUpNzev3Q
OAYECOIo+uCgwenvUi8kYE9Bcc6sc2FuALvGcUa2dvtuH1dEJ0TTljUAirNmFhJd
UncGzsErwwMVW5w6pn7egjOwuryqWQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:06:46 2025 by rpki-client