This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
File:                     BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft (raw, json)
Hash identifier:          zpA/XuJKTSH9ApYrw5DYrbTkM97zmXug+gDgN89AHwU=
Subject key identifier:   34:AD:C4:3B:63:8B:22:3A:1B:4A:85:0A:69:76:28:14:8E:76:EE:26
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       65830210EEE02CCD7CB2CBD6AFE9FBDC557A559C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
Manifest number:          038D
Signing time:             Fri 09 Jan 2026 08:05:49 +0000
Manifest this update:     Fri 09 Jan 2026 08:00:49 +0000
Manifest next update:     Sat 10 Jan 2026 11:10:49 +0000
Files and hashes:         1: 3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa (hash: Vgvajf2oKu06U3XmuVuH1zOP+prd+IppCV2Idp/Nic8=)
                          2: 3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa (hash: +2OaCBfp76mZLzOQYQ62Sx1l5dBU3HJgppE51v56yq4=)
                          3: 3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa (hash: 4A0DPxCld03aET/LAXqyZ9SJTBWOqa962oSzBYA881c=)
                          4: 3130342e3235342e3139332e302f32342d3234203d3e20323132363639.roa (hash: /l/SvC/WUjO3fc/WD0O1sjRG1S3Qzqd2cwPY4JAH8mQ=)
                          5: BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl (hash: LLjkK/R4wvSqN+LLkL3WD5g9YupNM0R0YhGBB0kCwDk=)
                          6: 3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa (hash: 1dEXyo/BDVUmSumDgkjiRdRAjK7wg1e16jwMUnZ1LfA=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 11:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:02:10:ee:e0:2c:cd:7c:b2:cb:d6:af:e9:fb:dc:55:7a:55:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Jan  9 08:00:49 2026 GMT
            Not After : Jan 10 11:10:49 2026 GMT
        Subject: CN=34ADC43B638B223A1B4A850A697628148E76EE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:9e:30:e2:70:00:98:06:81:87:df:40:ca:
                    8a:3a:c3:d3:f3:27:8b:a0:f0:02:de:b7:35:6a:09:
                    4c:06:c7:90:75:c4:ca:ea:73:a2:ac:e1:2b:6c:5e:
                    f9:ef:a1:72:53:32:27:70:2e:86:fe:22:9b:3c:ca:
                    9e:33:3a:dd:d5:95:83:dd:ce:e8:d3:ab:f1:d8:26:
                    7a:35:0b:f7:ea:9a:47:fa:4c:e5:db:db:19:55:da:
                    2f:93:0d:db:d3:1b:78:29:04:46:dd:fd:b4:21:1e:
                    3a:ba:47:7b:00:5b:88:92:f9:cf:a4:58:0c:26:f5:
                    eb:24:13:c1:3a:03:71:11:34:28:09:3c:e2:86:80:
                    50:8b:cd:f7:90:09:e2:8a:9f:12:3e:8c:ea:bd:81:
                    69:ca:b8:0d:1c:94:8f:5d:a1:93:0e:4a:43:f2:66:
                    d5:9d:e7:62:26:41:1a:cd:54:2a:34:e5:6c:c0:03:
                    0d:d5:92:91:31:df:50:42:e3:da:6a:3c:8b:57:2d:
                    0a:12:5f:cf:c7:78:0e:e3:a8:1c:67:45:bb:36:2b:
                    64:29:99:84:10:62:27:46:8e:d3:5d:a8:3f:85:aa:
                    37:60:a0:2e:c7:31:be:a2:08:02:33:1e:2c:8e:c1:
                    75:89:c1:4f:d6:4c:48:d7:63:de:dd:eb:d7:57:d8:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AD:C4:3B:63:8B:22:3A:1B:4A:85:0A:69:76:28:14:8E:76:EE:26
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:e1:0c:0b:84:bf:4f:02:78:a7:27:dc:d4:d9:eb:4a:7e:
         eb:0f:5d:54:dc:8e:96:19:42:e2:08:3b:57:75:38:5c:c3:9a:
         18:9c:82:d7:67:0d:59:ac:d9:ee:cd:73:fc:e8:a8:9c:0b:db:
         9a:a6:36:e7:7e:aa:3e:1b:5c:2d:36:d2:44:33:ae:8c:2d:33:
         f9:d2:6d:70:2a:ee:0f:9f:6a:22:f0:ac:db:97:17:d9:31:7d:
         e8:ae:a5:63:67:db:8d:fa:77:e0:85:73:5a:83:34:33:94:0c:
         64:9c:67:05:43:93:f9:a7:62:b1:4c:f8:19:46:38:79:35:45:
         f5:0e:e3:05:bf:55:bc:1c:7f:4b:4b:09:33:8e:43:62:60:5d:
         44:49:25:98:36:4d:ad:e7:8b:57:3b:68:36:48:61:6a:84:7b:
         9e:98:47:e9:ec:39:0c:9a:e8:fd:e6:75:3f:19:2f:e6:bd:1f:
         a5:ce:ee:84:38:d7:ae:d1:8d:1e:11:bc:e3:98:4b:d9:0d:c6:
         e4:2c:f5:11:94:00:35:8a:94:50:d4:fe:67:a9:71:a8:f8:d1:
         79:7e:2d:5e:50:31:14:2e:04:69:eb:9a:18:f3:2b:d1:07:39:
         db:4c:20:56:7f:56:33:4e:ee:b7:a0:02:17:f4:be:13:e1:f5:
         2b:60:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:57:32 2026 by rpki-client