This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
File:                     A28D273309C9FC76554249545D29D3880680EA7F.mft (raw, json)
Hash identifier:          PXVf+oL210LDzbCZpGZvUO7CCbVquRySiiRbSch932A=
Subject key identifier:   21:6A:66:5C:9B:C7:6E:58:BE:12:BE:7C:B9:9D:7D:EB:A1:28:A0:A0
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Certificate issuer:       /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial:       59E605F925CED340F82BD7BF5EBF92395D92D556
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
Manifest number:          0545
Signing time:             Thu 18 Dec 2025 19:10:19 +0000
Manifest this update:     Thu 18 Dec 2025 19:05:19 +0000
Manifest next update:     Fri 19 Dec 2025 20:20:19 +0000
Files and hashes:         1: 3230342e36392e3231372e302f32342d3234203d3e20323132323338.roa (hash: 55D46lrV+xGk8yhih5EHnttO3nD+J+OLj1lvQhx3UAI=)
                          2: A28D273309C9FC76554249545D29D3880680EA7F.crl (hash: ZO3h78Jk1MX4rD+31vvhE/mrMNyCW7oUFXs3MY5Mo98=)
                          3: 3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa (hash: iZHkY5jxw45iaqeZfLgcBYrAeF1BwgF4jZCglcnryLg=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e6:05:f9:25:ce:d3:40:f8:2b:d7:bf:5e:bf:92:39:5d:92:d5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
        Validity
            Not Before: Dec 18 19:05:19 2025 GMT
            Not After : Dec 19 20:20:19 2025 GMT
        Subject: CN=216A665C9BC76E58BE12BE7CB99D7DEBA128A0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:ae:2f:91:b1:73:e5:ea:29:02:8c:9d:4e:
                    d6:c5:29:e4:8c:a3:3e:19:20:66:64:a2:0b:c9:54:
                    7a:18:a2:d7:f8:e5:de:ed:09:52:0c:b5:54:55:9f:
                    e4:a2:d8:54:c5:16:6a:e1:69:36:27:45:73:98:5e:
                    0f:26:93:12:c9:8d:1b:2c:e1:0c:13:e2:f0:a7:fe:
                    b8:52:49:36:0f:e5:72:1e:bf:db:bc:1d:98:c7:cc:
                    93:3a:01:23:9d:ab:7a:65:1f:e0:22:04:4a:58:6e:
                    8a:4b:d7:6b:c2:7e:9b:7d:92:55:11:9a:a3:0f:93:
                    53:9e:c7:7c:a1:cb:b0:b5:b1:b0:1d:81:75:e3:6b:
                    90:ab:66:d4:b2:78:ed:07:c4:28:3f:8f:e0:b8:39:
                    12:68:a7:18:56:33:ac:9e:92:a3:16:a8:02:8c:90:
                    7b:1b:6e:8f:79:e0:64:f5:e0:33:8e:1f:3b:94:f4:
                    5a:5f:f0:18:be:3b:2f:70:11:12:8d:61:17:76:ac:
                    80:2f:76:7d:9b:3c:2e:a2:53:9c:73:d7:99:3f:50:
                    b2:0b:68:5d:80:a1:96:2d:75:44:ec:97:77:88:09:
                    2e:c8:de:71:be:95:52:9b:d8:b2:55:da:93:fc:d9:
                    31:83:4c:9b:c1:59:03:af:1a:e6:c1:6d:7e:16:63:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:66:5C:9B:C7:6E:58:BE:12:BE:7C:B9:9D:7D:EB:A1:28:A0:A0
            X509v3 Authority Key Identifier:
                keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:15:b6:9e:ec:24:3a:2d:b9:45:6c:da:2f:4a:4d:df:8d:
         6d:79:2c:3b:28:a6:e4:59:d2:e2:5e:1d:cd:5e:5d:24:72:65:
         62:07:0d:63:d1:23:8e:dd:57:34:24:4a:fb:5c:10:0a:9e:7f:
         92:be:35:5a:1b:0d:df:96:80:bf:66:b6:36:67:bd:21:61:06:
         8f:63:47:d6:56:0b:1d:fa:ee:e1:a9:31:a9:56:fe:14:39:3b:
         9f:8a:b5:d0:0c:8e:77:14:c2:df:44:85:82:b6:f9:6c:43:31:
         29:81:e9:db:aa:18:93:ee:db:e9:b0:c8:81:81:16:ea:8a:3d:
         70:80:eb:ac:f8:31:a4:2d:2a:11:6b:b3:f9:5b:c4:d7:43:5a:
         95:56:14:72:0b:9e:58:43:2a:71:ef:d6:e3:8f:fb:96:b8:ce:
         06:5a:e7:6c:20:f3:1a:c0:5b:de:17:2b:b3:9c:f9:17:42:3d:
         13:24:b1:44:2b:86:8d:e9:84:15:3a:f8:f3:81:06:5f:9e:81:
         f8:a6:32:33:dd:5b:f5:64:91:4a:aa:be:19:b2:e2:55:e8:65:
         b9:19:4f:e2:8b:ba:fe:c8:91:25:ed:a2:f8:72:e2:7f:67:17:
         92:b5:48:4d:f0:87:fe:12:f7:f8:4a:5d:1b:34:f4:35:a4:b7:
         20:c9:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:17:46 2025 by rpki-client