This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
File:                     4D63138C2E456961030128191238D71ABCAE4AA6.mft (raw, json)
Hash identifier:          AdYPy64njpnYKtP7DE8u5/xg2s2o3yzPcDH9oTZWP6o=
Subject key identifier:   17:AE:A9:63:B0:73:AE:00:9E:91:40:7F:7C:14:C0:B2:44:4B:B0:BE
Authority key identifier: 4D:63:13:8C:2E:45:69:61:03:01:28:19:12:38:D7:1A:BC:AE:4A:A6
Certificate issuer:       /CN=8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168
Certificate serial:       7FF767CFE3825133C0321B1149CD3068D0F53E56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
Manifest number:          BD
Signing time:             Wed 10 Dec 2025 19:30:11 +0000
Manifest this update:     Wed 10 Dec 2025 19:25:11 +0000
Manifest next update:     Thu 11 Dec 2025 20:52:11 +0000
Files and hashes:         1: 4D63138C2E456961030128191238D71ABCAE4AA6.crl (hash: 5nmCBoH3l9iwIRTpjQvUPZT+iIoQtwgO+nT3Acy/Cgg=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Dec 2025 20:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f7:67:cf:e3:82:51:33:c0:32:1b:11:49:cd:30:68:d0:f5:3e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168
        Validity
            Not Before: Dec 10 19:25:11 2025 GMT
            Not After : Dec 11 20:52:11 2025 GMT
        Subject: CN=17AEA963B073AE009E91407F7C14C0B2444BB0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:bd:a8:01:39:7a:c7:ce:05:9c:a4:09:56:
                    87:14:bf:9f:58:02:32:1a:7a:4b:ae:d8:5e:af:19:
                    6b:eb:7d:d9:5a:60:9e:7d:bd:77:a9:10:28:95:f3:
                    15:40:b6:47:06:e6:b8:e2:00:e1:3e:50:ca:07:5a:
                    d6:15:d3:14:e4:8c:bd:bc:37:51:ff:72:e4:70:84:
                    87:86:f5:60:19:dc:12:21:62:9f:63:d1:76:d3:8b:
                    94:6f:80:8b:b1:fe:a4:9d:af:2f:a6:c2:42:c3:74:
                    09:13:63:da:e3:74:44:6c:9b:0e:ef:b7:4e:8b:c9:
                    00:0d:eb:3d:37:13:8a:a4:b0:9c:77:57:66:af:df:
                    b0:95:15:77:77:fb:64:58:c2:14:aa:8a:b9:42:30:
                    8b:57:ce:a4:1f:b9:39:23:7e:37:17:1b:d7:91:3c:
                    4e:e1:63:d3:33:72:b4:bc:a3:f0:1a:ad:62:6c:2c:
                    e0:5d:4c:db:1c:61:7c:80:69:3a:75:3a:20:c7:e2:
                    48:4a:e3:0c:09:b9:1a:6f:d2:31:f5:89:5f:79:60:
                    f5:3c:0f:0a:a0:a5:c6:c1:e7:10:f3:bf:6c:99:2b:
                    b9:ea:9a:13:8e:7e:27:21:30:7c:99:32:12:1e:f3:
                    2b:a0:c1:86:68:b0:93:68:7c:8a:6c:58:a0:70:74:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:A9:63:B0:73:AE:00:9E:91:40:7F:7C:14:C0:B2:44:4B:B0:BE
            X509v3 Authority Key Identifier:
                keyid:4D:63:13:8C:2E:45:69:61:03:01:28:19:12:38:D7:1A:BC:AE:4A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:4e:31:02:92:43:5a:d4:5d:8f:ed:6d:a1:d8:3a:91:57:
         2f:33:a7:2f:67:14:b8:ca:3b:f3:d2:44:3c:f6:2b:5e:22:2b:
         de:9d:f3:11:b9:81:41:fc:b3:be:8a:96:7e:b5:25:c5:07:df:
         b3:5e:b3:1d:64:b8:56:6c:91:3c:a1:9b:8b:4d:af:35:dd:32:
         5a:ea:5e:2a:f5:ad:85:a3:d0:87:10:c8:54:eb:78:42:3c:06:
         a5:f7:96:78:d3:58:93:c5:05:b2:55:a5:83:1a:4a:0e:93:a9:
         e1:a2:98:f0:ef:b2:7a:f3:ae:eb:19:6e:9d:9e:1e:a3:00:6c:
         f8:59:34:49:01:19:5a:d3:69:92:d1:7f:40:2f:d3:a7:78:fd:
         39:ce:4c:f7:fb:88:42:50:3d:e1:53:07:b3:6f:aa:e8:5c:30:
         24:c1:70:4c:46:0b:fd:6d:f6:1f:04:a2:3b:78:3a:c6:f0:08:
         5f:af:28:98:f2:cb:b7:ce:48:82:a5:71:c9:1d:aa:ef:ce:f7:
         1e:1a:a7:fc:3d:f8:43:14:1c:85:20:24:6f:f2:7c:57:2d:44:
         a6:7a:a6:a1:5a:4b:4c:54:c6:45:af:e7:3c:95:42:b4:30:9d:
         7d:41:89:ac:18:86:eb:ff:7e:3f:40:11:b5:c5:14:11:02:22:
         d6:87:06:0d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUf/dnz+OCUTPAMhsRSc0waND1PlYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzQyOWM0YWYyNWU3MjBlNTM5OWJlMTkw
NGYzMjkzYWFiODlhYmQxNjgwHhcNMjUxMjEwMTkyNTExWhcNMjUxMjExMjA1MjEx
WjAzMTEwLwYDVQQDEygxN0FFQTk2M0IwNzNBRTAwOUU5MTQwN0Y3QzE0QzBCMjQ0
NEJCMEJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/G9qAE5esfO
BZykCVaHFL+fWAIyGnpLrtherxlr633ZWmCefb13qRAolfMVQLZHBua44gDhPlDK
B1rWFdMU5Iy9vDdR/3LkcISHhvVgGdwSIWKfY9F204uUb4CLsf6kna8vpsJCw3QJ
E2Pa43REbJsO77dOi8kADes9NxOKpLCcd1dmr9+wlRV3d/tkWMIUqoq5QjCLV86k
H7k5I343FxvXkTxO4WPTM3K0vKPwGq1ibCzgXUzbHGF8gGk6dTogx+JISuMMCbka
b9Ix9YlfeWD1PA8KoKXGwecQ879smSu56poTjn4nITB8mTISHvMroMGGaLCTaHyK
bFigcHQW7wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFBeuqWOwc64AnpFAf3wUwLJE
S7C+MB8GA1UdIwQYMBaAFE1jE4wuRWlhAwEoGRI41xq8rkqmMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NEQ2MzEzOEMyRTQ1Njk2MTAzMDEyODE5MTIzOEQ3MUFCQ0FFNEFBNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3NDI5YzRhZjI1ZTcyMGU1Mzk5YmUxOTA0ZjMyOTNhYWI4OWFiZDE2OC5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRl
ZWE3YzliYTQ2LzEvNEQ2MzEzOEMyRTQ1Njk2MTAzMDEyODE5MTIzOEQ3MUFCQ0FF
NEFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAInKTjECkkNa1F2P7W2h2DqRVy8zpy9nFLjKO/PSRDz2
K14iK96d8xG5gUH8s76Kln61JcUH37Nesx1kuFZskTyhm4tNrzXdMlrqXir1rYWj
0IcQyFTreEI8BqX3lnjTWJPFBbJVpYMaSg6TqeGimPDvsnrzrusZbp2eHqMAbPhZ
NEkBGVrTaZLRf0Av06d4/TnOTPf7iEJQPeFTB7NvquhcMCTBcExGC/1t9h8Eojt4
OsbwCF+vKJjyy7fOSIKlcckdqu/O9x4ap/w9+EMUHIUgJG/yfFctRKZ6pqFaS0xU
xkWv5zyVQrQwnX1BiawYhuv/fj9AEbXFFBECItaHBg0=
-----END CERTIFICATE-----
Generated at Wed Dec 10 22:19:14 2025 by rpki-client