This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
File:                     E9EB50E364277CEB063DCA8C371364FE1CC98844.mft (raw, json)
Hash identifier:          LHquf3QOEE1jMM9S3dVsv6cT+KDeEbXLqoTo9pGrOUs=
Subject key identifier:   C0:BE:5E:4C:4A:BA:AF:9F:3A:CD:AF:14:35:42:3C:D1:0F:7C:4A:47
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Certificate issuer:       /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial:       0556DAFB3403DE24683B62B6078B6364FB8C1809
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
Manifest number:          D3
Signing time:             Sat 06 Dec 2025 23:02:50 +0000
Manifest this update:     Sat 06 Dec 2025 22:57:50 +0000
Manifest next update:     Mon 08 Dec 2025 00:03:50 +0000
Files and hashes:         1: 326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (hash: YwN5VXKRuA2ytsXsaIhEWVD7EcVizXTIn2zeRxkXdwE=)
                          2: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (hash: G0zoH/bSXVa8bPsjD+KTz7+M5ISsfMbmvIPi6yzb9tA=)
                          3: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (hash: 1AS9kktYm6E1YYts/FKhRmEDrmEx5mjh3ZBgDRukxtY=)
                          4: 326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa (hash: aVrMh8neYSAJZJNMsJHXuG1FOsph/b6J1zm/1t3TlUc=)
                          5: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (hash: cKqMdpDpNZeTs1zZYtMh7ZzpU6gFPVvUC9QJ/l/EB4c=)
                          6: 326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa (hash: K5I4cRIERA7dRNGahq9lka9oTRhszkIRCdPhlO48i7g=)
                          7: E9EB50E364277CEB063DCA8C371364FE1CC98844.crl (hash: TmZrKDJ7ZoDLYD4kQbQYLLCF8BfUpeUg5IbuxwVmIxU=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 00:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:56:da:fb:34:03:de:24:68:3b:62:b6:07:8b:63:64:fb:8c:18:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
        Validity
            Not Before: Dec  6 22:57:50 2025 GMT
            Not After : Dec  8 00:03:50 2025 GMT
        Subject: CN=C0BE5E4C4ABAAF9F3ACDAF1435423CD10F7C4A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:95:11:09:02:59:1a:d0:5c:81:5d:76:d9:
                    a6:e1:37:28:c2:87:30:c4:06:59:6f:7d:25:78:62:
                    2e:e6:76:b6:a3:16:d7:e0:28:8d:b6:d8:42:94:40:
                    bd:bb:a9:d5:52:36:9c:af:56:44:3a:90:86:5b:e2:
                    7b:d4:d1:36:ba:11:57:25:c8:eb:96:c4:98:b2:f1:
                    aa:8e:8e:a1:af:94:5e:c2:c9:68:91:8e:74:57:9e:
                    d6:85:53:54:3d:36:f5:a3:98:6d:a4:64:94:27:bd:
                    97:75:9e:4c:8e:ce:50:43:3c:b9:4d:71:9e:61:aa:
                    70:5c:66:71:9d:83:db:7a:9b:08:68:e6:d2:74:15:
                    42:f6:13:d4:a5:88:5c:dc:5a:ed:c5:9c:65:55:c5:
                    9c:cd:3b:2b:9e:72:6e:b1:f6:6a:e2:15:7c:e6:20:
                    82:ab:0d:fc:7f:20:bc:a4:6d:fd:b5:46:a2:f2:cd:
                    5e:32:4b:31:4b:78:c2:a7:0d:72:22:24:b2:61:ea:
                    c1:10:d8:f5:af:43:c0:f2:9b:60:6e:bd:46:3f:25:
                    00:93:a3:5d:46:33:a4:d1:d3:eb:30:0e:16:9a:91:
                    a1:1a:a3:4f:4e:22:22:a6:97:5c:ea:f1:96:ea:37:
                    cc:4d:3d:a6:d8:58:0f:78:45:c2:ac:9a:03:6b:7d:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:5E:4C:4A:BA:AF:9F:3A:CD:AF:14:35:42:3C:D1:0F:7C:4A:47
            X509v3 Authority Key Identifier:
                keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8d:8f:64:fb:3b:b3:61:58:52:d6:c9:86:e0:6b:90:6f:33:
         e0:7a:59:70:31:3a:2a:0d:c8:4d:d1:56:89:9d:dc:2d:91:dc:
         f2:83:08:2c:2b:0b:c4:ef:1d:b2:af:43:18:4f:7d:00:25:0d:
         63:68:3c:73:56:97:40:9e:e2:1a:67:b4:8f:c0:d3:5d:c4:0b:
         dd:1c:57:9d:1c:7e:21:97:ab:04:d8:8e:a7:f7:3a:f2:a1:8c:
         cc:7d:d4:39:40:4a:3b:13:0d:78:17:33:b9:1b:e0:fb:c9:38:
         bb:7e:3d:25:8b:3a:12:87:d1:d9:e2:3b:3f:45:4c:f1:11:a9:
         52:48:b1:08:00:f4:8f:e5:c0:9b:77:a1:98:02:e3:d2:c5:ad:
         0f:15:27:d6:35:48:38:bc:aa:d0:e5:18:1a:4c:c2:90:a7:a0:
         7f:b5:a8:d7:3c:5a:25:02:2d:ba:7e:69:2b:e0:56:11:9a:1a:
         06:6d:2b:d1:63:56:1f:2c:95:21:e7:17:e2:58:7d:04:1b:36:
         f7:5e:a4:6e:af:0f:53:c8:ee:3a:a9:30:ab:de:55:31:4f:ab:
         4a:43:8c:24:c2:e6:19:ec:71:45:4f:5e:8e:2a:7d:c3:38:13:
         f6:ab:0c:1d:c9:5e:c1:d6:79:43:60:9d:c2:7a:fc:5e:94:e3:
         ba:6b:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:46:40 2025 by rpki-client