This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
File:                     CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft (raw, json)
Hash identifier:          SnlaxhK5afLX2XYwJ0Y2bniYCXTlKau8eF28wCTyEzw=
Subject key identifier:   0A:95:26:C6:7B:1C:11:93:46:A3:EA:A3:C0:BF:90:2F:D0:93:48:89
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       1E9C44768D8F0D5C7AC0589CE5D3337C749875CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
Manifest number:          0959
Signing time:             Thu 18 Dec 2025 16:17:16 +0000
Manifest this update:     Thu 18 Dec 2025 16:12:16 +0000
Manifest next update:     Fri 19 Dec 2025 17:20:16 +0000
Files and hashes:         1: AS53929.roa (hash: YRUDMYfAM88y06HnoX6SDfsuHKIEBX0NnNdqFc6B1nU=)
                          2: AS13454.roa (hash: Djtpttkg2v4CU8ihzhY1NudUnlDkhSjpgkEAvDs2F34=)
                          3: AS54906.roa (hash: nqc/gRNIGxuwf73dvfiLDdnah5/nrkUSlzTHodmQwWY=)
                          4: AS31862.roa (hash: cqZfdrgLLHJDCAit/HWoZjGFQOM7blMTZaAxslnzd0w=)
                          5: AS26650.roa (hash: SLsB4ACPwwIiDx+K/i1N4eylSne+gdhaIFpkUsLiKOI=)
                          6: AS46947.roa (hash: rttV4OCa14ZFb1nDzC+2MW48SPAAISzaYSHxc3lqqK4=)
                          7: AS399047.roa (hash: giubXhPOG7gLm2YSzyyC+8QZ/c3E/kAxwDXfLvGAZTM=)
                          8: AS393542.roa (hash: 8PTYsdZJTYOT5hH80XWI5Y0zpB3oVwP7dMjt09eoSWA=)
                          9: AS400069.roa (hash: 41w8pR+m3Ma8HKY1kKvYqzph+cl4grrI/UCUljjpoac=)
                          10: AS12239.roa (hash: AVUQ9gZbufd1p0Hp3QuAxhYXBs8CZihz+r+HvNFtl40=)
                          11: AS13470.roa (hash: LJurunIxBcTc1KIr4YFU+dCw3noBnYirLCvQPZ++0BU=)
                          12: AS54603.roa (hash: 8YoogPLQqbeHKqDGYCWNDNvw3k1wC7y4djMFsrb+xxM=)
                          13: AS3593.roa (hash: SPTHDdJv/s9gSCY2cBZyGxgLbP4DP2GSVUehTUQQrNo=)
                          14: AS18436.roa (hash: TNw3e1/JLzPH6lUH5t4VJQNikL+RRGJRQqHx1+r5Ucc=)
                          15: AS12094.roa (hash: U3wqgr1sUFy02pHyJuCLGb7SgR4Kf2nECXqMUoFnLz4=)
                          16: AS394681.roa (hash: IbACuNdGBzOHZ3rKve2KWtiTPi+3Czi45lC9Bmf/uOM=)
                          17: AS13518.roa (hash: wxj1zaRRf5u8o0iR/wYoBURXwzh1kD51yv+b/JhjyVU=)
                          18: AS46590.roa (hash: 8b5CiBfhWoEiNMp7zgESHQ4JIjCbYmtSri2j5hTnRLw=)
                          19: AS46688.roa (hash: jCkLTF1AsHn2yajAhOYc7HNqYzwQXt23CIy25uT80pk=)
                          20: AS32587.roa (hash: sj7T+mT1IPM21A7p4rMvGNt6aI6cvFropFLw/iFpmXI=)
                          21: AS16627.roa (hash: 8Bqh7eugsWBIUuoPsreyiZ/6aTSXxIBg8BXmB2aPR30=)
                          22: AS401693.roa (hash: XTwuN9G+2MHhUUwL+rdKZhPuEj8Z9h4waa43MTehb5s=)
                          23: AS20359.roa (hash: 6bMpIRzx9LPKKujTTtNn6nP34QBaw95laARy638D4L8=)
                          24: AS393323.roa (hash: ky6CkvGKg5P5P2vy9mN4fsOF1oOGOpLay/mQde02pmI=)
                          25: AS10753.roa (hash: HPozYyX3NlZt5UXTmAyBUsyKGYcuc2utDcm5Cx8EPOM=)
                          26: AS399437.roa (hash: mEk/wqR5pCHZeO1R6EfPTfUDZn7/ozyKwfuoHtTQQXQ=)
                          27: AS40534.roa (hash: hpQj6xlLtQ6LJYWegxJpv5UUAriSQQZ0MMyXEIRcU9E=)
                          28: AS40777.roa (hash: QpNsVNK1OO70F+OVEsLYe4hl4HGmmb7xB84ySC2jpPE=)
                          29: AS26127.roa (hash: RoXatxApAuqvezmck3MIbGcNmo8v2ghfBRLysR9A+Q0=)
                          30: CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl (hash: mjn5uuc0I1Csf6n4aJ0VKyfBSgYnYxUs7iMvzOpOLQs=)
                          31: AS5650.roa (hash: VmQJSt+K5jOAgdeMpifTvKHdv9ZK3hyB17dg5rkCInE=)
                          32: AS5733.roa (hash: FV1SBKPbMNZf/hExSGhVkVkcKlTOzJyaJP1IyAljwUs=)
                          33: AS7011.roa (hash: Vaq77PJKiKtMoXIOVx7+b80Qnng83Maj7urp3T67s00=)
                          34: AS63172.roa (hash: bftxLUoEg675HOrkqvnhYzVvUoURwxpHirDUtKkfjSA=)
                          35: AS36139.roa (hash: SBkSVHeaAfIOKcJCKdx7lOq0NF9126IcQ2BEitGGchI=)
                          36: AS394668.roa (hash: qhswXqRFCrU0IJYfqa226CJSFWqlXJFKfDq2wOQnuOU=)
                          37: AS14790.roa (hash: ZBvsKRaPnuN5xWEzDIzW29uv12fVs4mkQtiqEBv+EJI=)
                          38: AS395645.roa (hash: U5B31tFgmXrYAgxaD0FRk5903tzQiPvkWAFuBZ4LTUw=)
                          39: AS54794.roa (hash: XxZqAvxozRM7YpxTb8bcaVx1HCtWlAXhxVMGWM4aazU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 17:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9c:44:76:8d:8f:0d:5c:7a:c0:58:9c:e5:d3:33:7c:74:98:75:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 18 16:12:16 2025 GMT
            Not After : Dec 19 17:20:16 2025 GMT
        Subject: CN=0A9526C67B1C119346A3EAA3C0BF902FD0934889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:1d:c4:3b:38:11:67:14:f5:d8:52:91:42:
                    46:fc:68:cb:f3:8a:2b:75:b3:8c:78:17:f6:20:b0:
                    58:42:67:9c:a4:19:49:a2:93:29:89:0d:91:11:a8:
                    b0:f6:69:15:b0:51:a4:af:73:aa:16:00:12:85:fc:
                    ad:ec:4c:31:ae:77:95:4a:b5:75:15:7c:4e:5d:aa:
                    5f:0c:7d:35:a5:da:24:b3:dc:b8:40:ba:fe:e2:1a:
                    7a:cd:ca:6f:44:21:bf:ba:e0:2a:80:56:72:56:b4:
                    72:42:be:7e:0a:28:0c:36:e6:07:62:d2:e1:e5:52:
                    26:81:5d:b0:0e:82:4c:ec:d6:64:41:c9:e6:5e:fa:
                    02:75:f8:05:8a:9e:15:1c:38:bc:ce:8e:8c:da:4d:
                    cb:82:06:5f:b5:56:6c:a6:5d:2a:c2:60:e2:0d:a0:
                    18:46:a1:90:04:b3:58:cb:e4:3a:e5:60:32:13:dc:
                    d3:dd:78:2f:d4:d1:56:32:b7:d6:14:ef:79:06:e4:
                    2d:48:e6:88:6a:71:8b:41:1f:e7:ff:43:2f:3b:c2:
                    45:33:2b:5e:3b:4f:6a:7a:1f:0c:e0:7f:c6:c3:2f:
                    a2:1d:46:a7:e3:fd:43:db:ce:61:48:ca:1d:41:e0:
                    38:a4:f5:04:a0:16:3b:00:b6:25:a4:71:e6:53:c0:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:95:26:C6:7B:1C:11:93:46:A3:EA:A3:C0:BF:90:2F:D0:93:48:89
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:28:c2:61:c4:ab:fe:a8:0b:7a:72:9d:d7:8d:ad:b8:d7:ac:
         c8:d4:5d:c1:dd:d5:f8:f6:c1:ad:d0:f9:b9:d7:9e:99:c1:26:
         09:19:d5:e2:45:28:6b:f3:bb:6d:bf:2e:5e:eb:e3:02:57:f6:
         85:8b:a3:69:cd:b6:e4:70:ed:35:4e:b3:c2:e7:60:07:1f:35:
         75:ee:44:56:32:29:63:81:aa:d5:c9:e7:ed:20:ad:3e:c6:c8:
         49:c0:a2:f6:4e:1c:d9:d0:9a:11:0d:9c:33:ed:78:03:ea:a3:
         3c:1d:1a:98:3a:98:13:79:aa:61:a4:e7:37:ce:42:da:76:9a:
         02:96:d5:44:b6:1c:f5:73:b5:ad:ae:41:a7:b7:0a:e0:34:b2:
         83:ba:73:58:93:57:2a:30:ef:f3:ba:dc:93:b6:0a:e8:d2:16:
         e2:02:b0:0d:36:e4:38:04:6c:ca:31:06:93:1f:ef:f3:9b:f8:
         aa:c3:ab:ed:74:01:50:eb:89:76:46:2a:96:ad:6a:0f:46:b8:
         d5:58:c9:24:60:71:f9:72:ee:c9:f1:c1:65:cc:e6:e5:5b:df:
         b2:51:84:47:55:15:53:38:ad:d4:a3:c3:94:ad:36:c2:cd:7a:
         ae:ff:d3:e6:59:9a:7d:18:b2:c6:8a:de:9a:55:c0:a3:0e:91:
         ad:58:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:48:53 2025 by rpki-client