This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
File:                     FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft (raw, json)
Hash identifier:          5RzKRtrgJltP4AFXgAisRx9Fz1o3LWoH2hj4qvvwm/U=
Subject key identifier:   28:A8:45:81:C9:CD:FC:CA:A9:6F:0B:FF:05:33:CD:AD:B9:2D:B1:50
Authority key identifier: FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE
Certificate issuer:       /CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
Certificate serial:       796EC42F6FED061609FB9695D9056CE8186971DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
Manifest number:          04D4
Signing time:             Sun 25 Jan 2026 18:46:28 +0000
Manifest this update:     Sun 25 Jan 2026 18:41:28 +0000
Manifest next update:     Mon 26 Jan 2026 20:23:28 +0000
Files and hashes:         1: 3230362e3139372e3231312e302f32342d3234203d3e2036303739.roa (hash: JgOpGqDdVslVQcTJB2tnyJshVTeovT1TL1zS7lPNLQ4=)
                          2: FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl (hash: qaZ/546FJ4RtKN8LAoyNowgTmF9pHl2YTgbVReN8UDU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6e:c4:2f:6f:ed:06:16:09:fb:96:95:d9:05:6c:e8:18:69:71:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
        Validity
            Not Before: Jan 25 18:41:28 2026 GMT
            Not After : Jan 26 20:23:28 2026 GMT
        Subject: CN=28A84581C9CDFCCAA96F0BFF0533CDADB92DB150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:ee:6a:1d:2b:26:8d:1f:4f:74:ed:52:e5:
                    f2:12:d2:71:37:1c:e1:a2:f9:93:b3:0a:55:9b:f6:
                    a6:78:f8:26:31:6a:80:5d:35:7d:77:c3:01:23:74:
                    f7:ec:34:a7:13:1a:65:e3:87:36:8e:2d:d5:3f:56:
                    2e:93:3d:96:7c:ad:48:22:52:a2:33:94:01:6f:54:
                    06:d1:4c:89:8f:e5:8b:b8:e7:6c:e9:29:f4:a7:57:
                    95:c4:82:3c:ee:1e:81:4b:48:cc:5a:9e:0c:f4:d7:
                    ed:4b:89:f4:4f:d1:08:e8:a5:84:a1:9e:77:c3:76:
                    83:78:ad:e7:90:3e:ed:7d:a0:15:f5:5d:f7:b6:c2:
                    29:d9:9c:0f:38:50:64:28:42:fb:44:6a:fb:32:ca:
                    cb:50:90:93:73:ef:bd:ba:1d:f0:61:f5:2e:9a:37:
                    4d:ad:27:f2:4a:87:4d:c9:58:16:44:25:c5:e1:b0:
                    44:52:dd:b2:5f:9b:78:c0:61:63:f1:72:af:bf:cf:
                    87:99:55:ef:f6:fe:0e:91:53:83:92:65:36:61:97:
                    df:87:c5:7e:b6:cd:15:1e:8a:df:94:e4:53:ba:c4:
                    b1:ca:2f:7f:25:f2:0d:c7:0d:8a:88:1d:c4:29:96:
                    fe:5e:c0:b9:42:b2:2f:6f:47:8a:12:3f:ed:06:9b:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A8:45:81:C9:CD:FC:CA:A9:6F:0B:FF:05:33:CD:AD:B9:2D:B1:50
            X509v3 Authority Key Identifier:
                keyid:FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:80:2b:86:df:3b:05:78:58:5e:3a:49:2b:79:60:bd:31:4d:
         57:2b:ad:f2:d7:48:b1:c1:9f:e7:ec:c6:61:a1:b9:f2:e5:a1:
         2c:5f:1d:b4:73:04:ca:b1:44:94:bd:aa:16:e3:94:a8:93:be:
         82:91:8f:94:84:38:5d:22:21:6d:37:55:1b:76:42:c4:29:fa:
         ed:22:4c:7c:ab:f4:7f:59:8f:14:6b:96:5b:c6:66:c6:21:38:
         4b:cf:48:2e:d5:2b:ea:2d:8e:28:19:5f:ce:38:3e:56:53:8d:
         f1:84:9c:eb:90:46:39:fa:3b:43:90:43:6d:e1:59:7f:d6:c7:
         f8:03:9d:a9:4e:89:67:d4:7a:c6:fa:a7:a9:d9:8c:08:93:04:
         0d:74:31:77:3a:84:01:63:3c:a6:38:9f:c7:e5:8a:62:f9:51:
         9a:7b:bd:19:11:38:6c:7a:91:56:c8:52:fa:be:6c:40:9f:79:
         15:c2:3f:ba:8c:ae:c7:83:c7:e9:ea:34:7a:e2:c1:d2:ae:fb:
         7e:9a:f3:c2:33:54:49:b8:b0:90:89:14:ab:1c:b4:cd:16:c7:
         a8:12:8e:6c:92:47:a6:f8:23:44:7b:17:ba:aa:da:bd:75:b5:
         4b:23:e4:b3:de:9e:c4:cf:9a:27:02:22:e5:7c:3a:2c:e5:95:
         4c:bc:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:08:42 2026 by rpki-client