This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
File:                     6ED84CFF4976B923E315096476DD6623E49C8B79.mft (raw, json)
Hash identifier:          4YrZEZpTYXKrc1zcAUWn/6pYSQSkL2GmvQY11ehHhNM=
Subject key identifier:   C3:92:38:A7:F4:4E:F7:54:2C:6E:32:F3:E5:EC:1E:79:05:64:43:64
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial:       4A5A88F450FEA48548FF61985064D3AC1E59CC10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
Manifest number:          0438
Signing time:             Mon 19 Jan 2026 10:36:08 +0000
Manifest this update:     Mon 19 Jan 2026 10:31:08 +0000
Manifest next update:     Tue 20 Jan 2026 13:29:08 +0000
Files and hashes:         1: 3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa (hash: sPyoKorLiK9ByXmoMSNg668zU3RSvi8DBiCLDQzzk34=)
                          2: AS151642.asa (hash: J9zBC4ZQBQ+VcoWk+4SKjXBib2AzPbqeLZhs6syiHfY=)
                          3: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: 5zyjZiHzfKFVIj8CROIKBwN4OHeQ+uy/14mqZgTNhgE=)
                          4: 3130332e3234342e3232362e302f32342d3234203d3e20323033333633.roa (hash: gKJ6KRXwSkLEScK/Pnq8ckZ0+aVLIbaF6Yt51de+geY=)
                          5: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: 2AjQ6oK0mFOk0c9CpaTvICyD2JdGT4R5dFs1mBr73rQ=)
                          6: 6ED84CFF4976B923E315096476DD6623E49C8B79.crl (hash: AAGA+4hHCx8n2LkT2EssR2QOxZNAqk7CCI2IWrkFoY0=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 13:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5a:88:f4:50:fe:a4:85:48:ff:61:98:50:64:d3:ac:1e:59:cc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
        Validity
            Not Before: Jan 19 10:31:08 2026 GMT
            Not After : Jan 20 13:29:08 2026 GMT
        Subject: CN=C39238A7F44EF7542C6E32F3E5EC1E7905644364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:b8:4d:ba:d8:a1:0f:87:28:23:d2:16:95:
                    6d:59:ff:ac:05:3e:44:e3:58:a1:be:1b:5e:1c:32:
                    74:88:59:13:7a:fa:45:fd:b5:80:b8:d9:e4:ce:d7:
                    f4:0f:f9:19:e5:51:1a:3e:79:a0:7a:1d:c9:8d:47:
                    27:fd:89:87:53:a2:63:50:da:35:b8:f5:3b:5c:e8:
                    be:0f:2f:b6:f2:58:24:eb:f0:7b:50:fb:84:ec:c9:
                    ca:ef:f0:31:1e:75:78:b0:67:cf:ef:9b:f9:24:4b:
                    98:6c:59:4a:ee:48:39:f6:d8:f9:e9:37:de:b4:5b:
                    8d:c0:b6:04:a3:76:78:87:2a:06:2f:1e:17:ff:63:
                    31:be:b7:96:26:6b:c1:e9:4d:09:12:a8:fc:95:ff:
                    8c:f7:2e:85:d4:97:8e:6b:9d:c6:53:6c:0d:d2:cd:
                    3e:24:ad:69:0c:ac:02:d3:46:97:64:41:a5:f2:a2:
                    79:1f:fd:12:85:8f:57:6a:82:bd:40:b6:8b:9f:b6:
                    84:7b:91:57:59:7b:33:16:2c:24:9e:0e:6b:98:98:
                    2a:d5:34:ec:2a:99:f0:99:f2:48:09:c7:78:72:8e:
                    95:06:2b:56:95:01:3c:a5:1d:48:35:99:44:5e:3d:
                    72:c0:c9:8d:4b:d1:09:32:39:bf:17:e2:cb:32:9d:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:92:38:A7:F4:4E:F7:54:2C:6E:32:F3:E5:EC:1E:79:05:64:43:64
            X509v3 Authority Key Identifier:
                keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:07:58:81:06:9b:f6:69:f7:cc:97:5c:fb:7f:1e:55:12:
         a0:08:a4:50:f6:75:0d:97:15:37:78:44:c4:30:3e:04:86:a9:
         e3:3e:6c:0c:81:e5:28:54:8f:00:ab:53:28:2a:08:fa:9f:a4:
         6f:4e:9a:fc:9a:9b:3c:11:c8:ae:4b:de:ab:29:b4:dc:bd:14:
         be:8c:ce:f0:2f:37:0e:89:d1:a1:2c:3f:5f:44:d1:45:b6:59:
         f7:22:7d:8a:32:c6:f3:3d:5f:2a:c6:92:6b:5c:fb:22:d3:d6:
         7b:15:82:28:0f:94:0e:7d:dd:17:ed:da:bc:b0:f6:b3:94:c7:
         55:dc:23:7c:8f:5c:11:35:29:32:05:67:f8:55:75:ae:5b:9d:
         ad:96:9c:50:08:bb:2d:8b:aa:c6:e3:f7:5c:3e:05:08:ec:4f:
         39:f0:3a:fb:ac:78:0c:3f:bf:c2:42:83:90:a7:a6:31:27:c5:
         57:f0:ee:f1:12:69:53:9e:30:93:c9:67:62:7b:78:a7:47:60:
         51:06:50:22:5b:b6:a7:a9:0d:7b:a6:d2:9e:56:bc:23:3d:56:
         f8:e6:31:cb:a8:74:f3:a6:79:10:ba:56:34:b1:f5:0c:4d:1a:
         dc:54:72:3f:dd:b6:e4:4b:be:17:d3:de:a9:a0:81:66:ae:a7:
         4f:99:0b:da
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUSlqI9FD+pIVI/2GYUGTTrB5ZzBAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg2RUQ4NENGRjQ5
NzZCOTIzRTMxNTA5NjQ3NkRENjYyM0U0OUM4Qjc5MB4XDTI2MDExOTEwMzEwOFoX
DTI2MDEyMDEzMjkwOFowMzExMC8GA1UEAxMoQzM5MjM4QTdGNDRFRjc1NDJDNkUz
MkYzRTVFQzFFNzkwNTY0NDM2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANM4uE262KEPhygj0haVbVn/rAU+RONYob4bXhwydIhZE3r6Rf21gLjZ5M7X
9A/5GeVRGj55oHodyY1HJ/2Jh1OiY1DaNbj1O1zovg8vtvJYJOvwe1D7hOzJyu/w
MR51eLBnz++b+SRLmGxZSu5IOfbY+ek33rRbjcC2BKN2eIcqBi8eF/9jMb63liZr
welNCRKo/JX/jPcuhdSXjmudxlNsDdLNPiStaQysAtNGl2RBpfKieR/9EoWPV2qC
vUC2i5+2hHuRV1l7MxYsJJ4Oa5iYKtU07CqZ8JnySAnHeHKOlQYrVpUBPKUdSDWZ
RF49csDJjUvRCTI5vxfiyzKdvvMCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTDkjin
9E73VCxuMvPl7B55BWRDZDAfBgNVHSMEGDAWgBRu2Ez/SXa5I+MVCWR23WYj5JyL
eTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC85LzZFRDg0Q0ZGNDk3NkI5MjNFMzE1MDk2NDc2REQ2NjIzRTQ5
QzhCNzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2J0aE1fMGwydVNQakZRbGtkdDFtSS1TY2kzay5jZXIwgZMGCCsG
AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzkvNkVEODRDRkY0OTc2QjkyM0UzMTUwOTY0NzZERDY2MjNFNDlDOEI3OS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFWGB1iBBpv2affMl1z7fx5VEqAIpFD2dQ2XFTd4RMQwPgSGqeM+bAyB
5ShUjwCrUygqCPqfpG9OmvyamzwRyK5L3qsptNy9FL6MzvAvNw6J0aEsP19E0UW2
WfcifYoyxvM9XyrGkmtc+yLT1nsVgigPlA593Rft2ryw9rOUx1XcI3yPXBE1KTIF
Z/hVda5bna2WnFAIuy2Lqsbj91w+BQjsTznwOvuseAw/v8JCg5CnpjEnxVfw7vES
aVOeMJPJZ2J7eKdHYFEGUCJbtqepDXum0p5WvCM9VvjmMcuodPOmeRC6VjSx9QxN
GtxUcj/dtuRLvhfT3qmggWaup0+ZC9o=
-----END CERTIFICATE-----
Generated at Mon Jan 19 18:28:52 2026 by rpki-client