This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.mft
File:                     9386DF134FB27CDFB77242D4139D5939924407FB.mft (raw, json)
Hash identifier:          Zj33ghV+4IrqoC6FIVnfRHMbQnDajFMJ7ON0JRfwoGA=
Subject key identifier:   DE:72:CA:79:DA:6A:A7:18:16:B9:F9:27:01:6F:2F:74:9C:BC:3D:95
Authority key identifier: 93:86:DF:13:4F:B2:7C:DF:B7:72:42:D4:13:9D:59:39:92:44:07:FB
Certificate issuer:       /CN=4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc
Certificate serial:       5BDBB5E1CA3A69D0BF6B53D3442107E35150B81E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.mft
Manifest number:          BC
Signing time:             Sat 22 Nov 2025 19:09:57 +0000
Manifest this update:     Sat 22 Nov 2025 19:04:57 +0000
Manifest next update:     Sun 23 Nov 2025 22:52:57 +0000
Files and hashes:         1: 9386DF134FB27CDFB77242D4139D5939924407FB.crl (hash: 86K4mWTzgqFg9FfxnE0VsH4k4h0ZYbXMnaWUapUi7RA=)
                          2: 3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa (hash: HB8W9HkRbYIBOxSrvYbFq33peeQD0ws7OkFs/QJen3M=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.crl
                          rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Nov 2025 22:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:b5:e1:ca:3a:69:d0:bf:6b:53:d3:44:21:07:e3:51:50:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc
        Validity
            Not Before: Nov 22 19:04:57 2025 GMT
            Not After : Nov 23 22:52:57 2025 GMT
        Subject: CN=DE72CA79DA6AA71816B9F927016F2F749CBC3D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:8c:8c:53:d2:fb:3c:bb:13:a5:ab:4b:2b:
                    5b:44:d0:ce:f8:e3:9e:54:5e:62:91:e9:6b:01:49:
                    eb:b2:45:b3:e4:12:96:7a:3d:ea:ed:b9:b3:d6:03:
                    86:34:00:44:44:68:45:eb:6c:22:5e:25:1f:38:af:
                    a9:ac:3d:1d:35:b2:2d:41:0d:3a:f6:73:7b:11:f1:
                    cd:24:f2:88:c0:0a:e0:96:f1:59:1c:60:80:fc:fc:
                    bb:17:5b:df:2b:8d:19:7e:2c:81:36:d4:7f:84:d1:
                    1d:1d:e5:7a:1d:a2:e3:15:12:ec:49:78:8a:30:b9:
                    87:d5:21:03:fe:92:68:67:74:9c:5e:bc:c7:e6:6f:
                    10:67:12:49:32:13:d7:39:d6:23:24:62:f4:a1:5d:
                    8c:9b:3e:27:63:8a:14:eb:c2:af:43:63:78:34:00:
                    81:61:c7:b7:3f:d0:80:8a:fe:df:1a:06:6d:5e:25:
                    11:19:c6:cf:48:be:4a:0f:6a:8d:b9:7a:9c:bf:75:
                    25:24:4b:77:a4:37:1c:40:3d:79:49:36:63:38:1f:
                    fa:ce:99:a5:27:dd:8a:54:7c:30:c7:62:27:2a:56:
                    ea:66:0d:c0:a2:07:1a:4e:10:28:80:b1:70:db:00:
                    cd:fc:a4:1a:ff:53:b2:dd:cc:97:34:5d:71:c6:3e:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:72:CA:79:DA:6A:A7:18:16:B9:F9:27:01:6F:2F:74:9C:BC:3D:95
            X509v3 Authority Key Identifier:
                keyid:93:86:DF:13:4F:B2:7C:DF:B7:72:42:D4:13:9D:59:39:92:44:07:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:47:38:7f:96:98:d9:db:0f:20:69:8e:f8:49:55:9f:41:e3:
         88:0d:82:11:74:0e:a5:4f:ce:7c:bf:25:a4:bc:3a:54:e9:86:
         dc:f4:5c:aa:84:2a:d8:a9:84:53:0b:2a:c6:83:5d:25:36:83:
         54:00:e7:63:8f:98:b5:c2:e7:c7:72:4f:bc:02:fd:67:c4:81:
         09:43:16:7d:88:6f:ca:10:45:aa:bd:e1:48:2a:fa:cc:ae:fb:
         93:55:36:5e:c7:3c:b8:37:96:6b:08:e6:84:48:9d:39:ff:61:
         01:a5:32:54:99:4d:ce:29:a4:ab:c1:00:dd:89:cc:a9:8f:b2:
         1f:e8:c8:00:3c:79:81:ad:2d:d3:5e:f2:e4:70:68:a4:9e:d0:
         db:88:47:77:ed:18:b0:a3:89:54:50:c1:4e:52:d5:3f:81:9d:
         68:8f:fb:ee:c1:89:81:84:8c:40:ef:c1:21:3f:db:81:da:27:
         e7:0c:f3:da:e5:9c:4e:ae:e4:3c:3a:70:3f:81:fe:a1:0b:c7:
         b1:e8:c2:26:28:c1:e7:d2:ab:e3:6f:4f:40:58:bd:1d:5f:b0:
         53:2b:3c:82:20:26:bf:12:1b:62:7b:53:94:79:3d:15:f3:7f:
         92:66:76:6d:91:d5:1f:18:eb:5f:ee:59:6f:9f:b6:d8:c4:bb:
         0c:87:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:52:14 2025 by rpki-client