This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
File:                     331420847DB5C548A9C55AF874BB78DFC740DCE3.mft (raw, json)
Hash identifier:          B+EKt+2xxTkt+qTCBSuXi3QMf3YyUSfAw3h4H1HwGuY=
Subject key identifier:   D5:EE:CA:68:3B:BC:50:3F:8F:39:CB:36:D7:86:D2:64:FB:FD:59:E7
Authority key identifier: 33:14:20:84:7D:B5:C5:48:A9:C5:5A:F8:74:BB:78:DF:C7:40:DC:E3
Certificate issuer:       /CN=652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0
Certificate serial:       2A46132B7B7BF8A610FF2489A0F99DFAC1F76EB9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
Manifest number:          88
Signing time:             Wed 21 Jan 2026 10:23:43 +0000
Manifest this update:     Wed 21 Jan 2026 10:18:42 +0000
Manifest next update:     Thu 22 Jan 2026 11:27:42 +0000
Files and hashes:         1: 331420847DB5C548A9C55AF874BB78DFC740DCE3.crl (hash: 0BGpbhEx5nJJyiZj5gtRXWd6+sWUzrFIg8PE0HF6AlU=)
                          2: 3133312e3134332e39342e302f32342d3234203d3e203436343735.roa (hash: sovTlBCEuXhvYEcr4uhnb/BJGNtDjFu0ozyvYCplOzg=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Jan 2026 11:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:46:13:2b:7b:7b:f8:a6:10:ff:24:89:a0:f9:9d:fa:c1:f7:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0
        Validity
            Not Before: Jan 21 10:18:42 2026 GMT
            Not After : Jan 22 11:27:42 2026 GMT
        Subject: CN=D5EECA683BBC503F8F39CB36D786D264FBFD59E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:70:73:61:55:e6:0d:30:3c:74:12:5d:13:d6:
                    d0:d1:bc:b7:d8:eb:a5:37:83:44:58:c1:df:d6:2d:
                    a0:60:75:81:fa:d2:9d:7e:72:a7:79:08:7e:b3:99:
                    84:ae:26:c7:1b:f8:78:33:7c:af:53:42:e6:70:b4:
                    fa:3e:93:c4:07:b0:1d:ad:cb:95:22:7f:57:80:4e:
                    32:c0:de:2e:36:3a:be:1b:17:56:c8:62:00:02:d3:
                    b0:de:e4:3f:75:b0:15:8c:bd:b6:d5:97:60:f4:69:
                    2f:7f:f0:32:1b:87:31:4b:18:38:86:d9:76:9b:de:
                    a3:e8:c1:bc:0d:73:aa:f0:76:a1:de:24:72:cc:a6:
                    22:51:19:7b:b5:fb:b2:12:d8:88:84:13:95:02:ef:
                    8f:af:f2:05:eb:18:67:cb:17:9c:45:e9:c2:a3:78:
                    91:db:89:54:35:d0:f1:51:cc:45:cd:50:8a:77:15:
                    d2:5c:ed:fe:fb:85:54:c5:ad:24:d7:9d:c2:31:21:
                    67:15:95:f6:76:b8:ef:90:b8:10:09:2d:60:44:c8:
                    0d:a3:26:6e:ac:53:91:d2:cc:82:c3:19:da:2a:ae:
                    d8:ab:18:75:bf:b7:e6:09:d4:34:63:77:ad:bd:78:
                    96:cc:97:d9:2a:19:a2:1f:39:52:93:ad:d6:cc:9c:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:CA:68:3B:BC:50:3F:8F:39:CB:36:D7:86:D2:64:FB:FD:59:E7
            X509v3 Authority Key Identifier:
                keyid:33:14:20:84:7D:B5:C5:48:A9:C5:5A:F8:74:BB:78:DF:C7:40:DC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:ac:ec:d6:4a:ee:66:99:ef:51:84:d0:b5:a6:54:69:63:
         cb:1a:28:8b:ae:46:c5:48:f4:67:38:f5:08:b8:fe:be:66:f9:
         ba:c4:57:0c:d0:ca:26:2c:d4:6f:81:b4:53:67:28:51:4a:0f:
         e9:83:3f:da:a2:92:17:d8:31:a2:2f:88:eb:ce:29:2f:d4:3a:
         5e:b3:f6:fe:99:db:33:45:cf:ff:bb:62:f1:f0:8c:e1:10:32:
         81:a7:33:20:f5:33:7d:c3:d5:bc:8e:e4:37:bc:88:db:e9:60:
         ab:7c:8e:42:44:51:29:ae:31:0d:40:26:3b:69:b6:06:32:3c:
         0e:bb:aa:ae:d9:c6:c2:2a:13:7c:3c:5a:ae:63:bb:d3:d2:ef:
         ff:0f:85:84:2a:a4:9d:57:d6:ce:6b:51:90:70:82:d6:4a:59:
         82:36:e4:15:fe:8d:1a:38:6a:a9:f6:c0:10:74:68:ba:6b:77:
         f4:b4:e0:17:9e:e1:64:97:81:63:72:dd:86:23:c8:4c:19:f5:
         a8:92:a8:c3:fc:c0:fe:2d:6e:02:eb:6f:ae:56:09:99:f4:fa:
         97:4c:81:87:9a:33:a8:85:59:11:07:cc:c3:d2:fb:ca:eb:f7:
         f9:f6:c3:c4:d2:33:43:55:46:4d:0b:60:54:11:37:0f:95:0c:
         cf:3c:5a:ab
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKkYTK3t7+KYQ/ySJoPmd+sH3brkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUyODc5ZDI4M2ViNmVkNTk3NWI0NGNjOTNlMDFiZDYy
MGE1MGM5YTlhNThhOGUwYjAwHhcNMjYwMTIxMTAxODQyWhcNMjYwMTIyMTEyNzQy
WjAzMTEwLwYDVQQDEyhENUVFQ0E2ODNCQkM1MDNGOEYzOUNCMzZENzg2RDI2NEZC
RkQ1OUU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43BzYVXmDTA8
dBJdE9bQ0by32OulN4NEWMHf1i2gYHWB+tKdfnKneQh+s5mEribHG/h4M3yvU0Lm
cLT6PpPEB7AdrcuVIn9XgE4ywN4uNjq+GxdWyGIAAtOw3uQ/dbAVjL221Zdg9Gkv
f/AyG4cxSxg4htl2m96j6MG8DXOq8Hah3iRyzKYiURl7tfuyEtiIhBOVAu+Pr/IF
6xhnyxecRenCo3iR24lUNdDxUcxFzVCKdxXSXO3++4VUxa0k153CMSFnFZX2drjv
kLgQCS1gRMgNoyZurFOR0syCwxnaKq7Yqxh1v7fmCdQ0Y3etvXiWzJfZKhmiHzlS
k63WzJyPKQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNXuymg7vFA/jznLNteG0mT7
/VnnMB8GA1UdIwQYMBaAFDMUIIR9tcVIqcVa+HS7eN/HQNzjMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5Lzg1M2NiNDg0NmVlMzQzMTNiYWMwNjk1NGI1YWI4NmJiLzAv
MzMxNDIwODQ3REI1QzU0OEE5QzU1QUY4NzRCQjc4REZDNzQwRENFMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyLzVlMTRlNzM3LTc3YjktNGVmYi1hNWVhLWUzMTE5NTk0YTY2Ni82NTI4
NzlkMjgzZWI2ZWQ1OTc1YjQ0Y2M5M2UwMWJkNjIwYTUwYzlhOWE1OGE4ZTBiMC5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5Lzg1M2NiNDg0NmVlMzQzMTNiYWMwNjk1
NGI1YWI4NmJiLzAvMzMxNDIwODQ3REI1QzU0OEE5QzU1QUY4NzRCQjc4REZDNzQw
RENFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAAA7rOzWSu5mme9RhNC1plRpY8saKIuuRsVI9Gc49Qi4
/r5m+brEVwzQyiYs1G+BtFNnKFFKD+mDP9qikhfYMaIviOvOKS/UOl6z9v6Z2zNF
z/+7YvHwjOEQMoGnMyD1M33D1byO5De8iNvpYKt8jkJEUSmuMQ1AJjtptgYyPA67
qq7ZxsIqE3w8Wq5ju9PS7/8PhYQqpJ1X1s5rUZBwgtZKWYI25BX+jRo4aqn2wBB0
aLprd/S04Bee4WSXgWNy3YYjyEwZ9aiSqMP8wP4tbgLrb65WCZn0+pdMgYeaM6iF
WREHzMPS+8rr9/n2w8TSM0NVRk0LYFQRNw+VDM88Wqs=
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:05:32 2026 by rpki-client