This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.mft
File:                     67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.mft (raw, json)
Hash identifier:          IRRM4f+Vzh64TYXva1icfhKbvX/FlZ4YgNKAdfD1nq8=
Subject key identifier:   06:06:55:DF:D6:A0:A7:04:8F:F7:13:1D:56:DF:D3:E8:8A:AB:B7:D0
Authority key identifier: 67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9
Certificate issuer:       /CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
Certificate serial:       4C719560BF5966AB3226824504209A2FB6C6CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.mft
Manifest number:          04
Signing time:             Mon 03 Nov 2025 18:28:50 +0000
Manifest this update:     Mon 03 Nov 2025 18:23:50 +0000
Manifest next update:     Tue 04 Nov 2025 20:57:50 +0000
Files and hashes:         1: 323630323a663532383a313a3a2f34382d3438203d3e20343032303733.roa (hash: ANSeTh0v1Au1NSdUr/FjJo31LPvixEm7cPGU0YN5+UU=)
                          2: 3136322e3134322e37372e302f32342d3234203d3e203139383936.roa (hash: vwXecn490Y8U3XN0fG/sbS/kLKlkzfXqEFLAeNdew2U=)
                          3: 67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.crl (hash: KsDWgZWoRZeuGl5NROG/Trg9fXyg427rRPxre8X7RmM=)
                          4: 323630323a663532383a323a3a2f34382d3438203d3e203139383936.roa (hash: HLXZb99wA9wn3hCyATwxPCFev0YuT3JO+2NTHSbDSXM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:71:95:60:bf:59:66:ab:32:26:82:45:04:20:9a:2f:b6:c6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f
        Validity
            Not Before: Nov  3 18:23:50 2025 GMT
            Not After : Nov  4 20:57:50 2025 GMT
        Subject: CN=060655DFD6A0A7048FF7131D56DFD3E88AABB7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:ac:b0:f1:e1:06:25:d9:4c:6a:37:9b:0f:
                    12:8e:2f:a8:0a:b4:77:50:7e:d2:05:70:66:43:b7:
                    5e:14:2d:a0:91:1f:3d:f7:75:ba:91:33:ea:a5:47:
                    3d:92:ad:75:74:61:3b:2a:68:88:08:f9:32:98:64:
                    b2:d1:88:98:d3:30:37:e3:cc:bb:ff:31:3b:e3:3a:
                    47:0e:1c:75:1b:df:d2:e4:95:cc:b7:46:a5:04:1d:
                    e6:65:29:95:1d:16:61:7f:19:a7:d2:4c:ca:ef:16:
                    2b:d5:a2:95:be:6e:e5:97:4e:ac:ac:7f:e0:19:ef:
                    1a:3d:27:23:54:10:34:41:9d:82:51:de:45:c8:0d:
                    7e:21:06:29:f0:4f:8e:24:e0:93:be:d6:1e:07:f3:
                    8f:00:29:2c:df:28:8d:cb:5e:3f:ca:63:e8:b5:37:
                    16:0d:99:a5:5b:9b:33:ca:9e:2e:64:d4:aa:12:56:
                    c3:d4:58:78:aa:dd:e9:c0:7c:0f:14:d3:86:52:34:
                    f0:ee:2c:3b:a9:44:cb:db:3f:5d:65:5f:e3:82:ee:
                    04:ea:18:b0:3c:52:15:a8:5f:26:04:90:05:0e:23:
                    fa:d9:3d:af:a4:88:0b:74:ed:7b:39:d9:72:24:3b:
                    f1:0c:d4:ad:98:7e:25:96:5f:ca:37:b1:60:2b:1f:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:06:55:DF:D6:A0:A7:04:8F:F7:13:1D:56:DF:D3:E8:8A:AB:B7:D0
            X509v3 Authority Key Identifier:
                keyid:67:B3:7B:A6:0D:C4:FD:4A:99:B6:E6:45:F2:94:CB:9C:D8:3C:11:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/66491223-7150-4af9-89c3-d72b60f156fd/afaf915e629d0fa6be0b10062f97b05c5822e4e3cf536bb67f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/0/67B37BA60DC4FD4A99B6E645F294CB9CD83C11A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:0f:86:03:04:c3:67:18:b0:c8:c1:13:72:8b:ba:1a:40:
         02:e1:21:92:d2:1c:6c:ba:1e:af:62:42:02:c3:3e:62:9b:5e:
         ce:c4:51:3f:61:8e:43:30:69:2b:0f:f0:07:5a:94:60:be:23:
         04:07:82:e6:45:68:c2:8c:39:86:1a:cf:1e:bb:5a:49:04:6b:
         1a:94:ba:76:e8:70:8d:1e:0a:67:4b:f1:17:d5:57:05:a1:b3:
         7a:b1:b5:1c:88:00:13:9f:a0:3f:12:60:0c:db:41:81:69:ae:
         32:7c:22:17:dd:be:d7:cf:f1:d9:9f:f4:01:e3:1f:23:d9:e7:
         60:52:18:b6:07:67:06:4a:f1:59:c5:0a:f3:84:e9:ea:ac:50:
         a8:b8:df:6a:66:b0:e9:1f:9a:e6:b3:64:83:86:d7:fc:ef:31:
         8f:7f:01:00:7f:db:e0:d3:0a:79:e2:a6:44:6c:bf:3e:f2:63:
         e3:f3:96:a4:a1:31:32:85:dd:b1:93:f5:44:84:d3:68:c9:39:
         93:a0:bc:2d:72:ad:04:28:7e:15:1d:f3:38:44:ae:35:29:cb:
         0d:7b:cf:73:1e:81:db:11:94:f9:30:12:10:81:83:2b:98:1a:
         5c:6a:75:d6:60:c1:17:c4:9c:50:f8:07:36:ba:3f:1e:fa:02:
         e9:b1:35:17
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgITTHGVYL9ZZqsyJoJFBCCaL7bGzjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJhZmFmOTE1ZTYyOWQwZmE2YmUwYjEwMDYyZjk3YjA1YzU4
MjJlNGUzY2Y1MzZiYjY3ZjAeFw0yNTExMDMxODIzNTBaFw0yNTExMDQyMDU3NTBa
MDMxMTAvBgNVBAMTKDA2MDY1NURGRDZBMEE3MDQ4RkY3MTMxRDU2REZEM0U4OEFB
QkI3RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLx6yw8eEGJdlM
ajebDxKOL6gKtHdQftIFcGZDt14ULaCRHz33dbqRM+qlRz2SrXV0YTsqaIgI+TKY
ZLLRiJjTMDfjzLv/MTvjOkcOHHUb39Lklcy3RqUEHeZlKZUdFmF/GafSTMrvFivV
opW+buWXTqysf+AZ7xo9JyNUEDRBnYJR3kXIDX4hBinwT44k4JO+1h4H848AKSzf
KI3LXj/KY+i1NxYNmaVbmzPKni5k1KoSVsPUWHiq3enAfA8U04ZSNPDuLDupRMvb
P11lX+OC7gTqGLA8UhWoXyYEkAUOI/rZPa+kiAt07Xs52XIkO/EM1K2YfiWWX8o3
sWArH2TrAgMBAAGjggK8MIICuDAdBgNVHQ4EFgQUBgZV39agpwSP9xMdVt/T6Iqr
t9AwHwYDVR0jBBgwFoAUZ7N7pg3E/UqZtuZF8pTLnNg8EakwDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvY2VhNWIzNDg0YzJiNDUwZmIyNzczYjFiOTgxZjUwODcvMC82
N0IzN0JBNjBEQzRGRDRBOTlCNkU2NDVGMjk0Q0I5Q0Q4M0MxMUE5LmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3LTQ1ODgtYWJlYS1lNDkwOWVm
MWI0ZTIvNjY0OTEyMjMtNzE1MC00YWY5LTg5YzMtZDcyYjYwZjE1NmZkL2FmYWY5
MTVlNjI5ZDBmYTZiZTBiMTAwNjJmOTdiMDVjNTgyMmU0ZTNjZjUzNmJiNjdmLmNl
cjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvY2VhNWIzNDg0YzJiNDUwZmIyNzczYjFi
OTgxZjUwODcvMC82N0IzN0JBNjBEQzRGRDRBOTlCNkU2NDVGMjk0Q0I5Q0Q4M0Mx
MUE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkq
hkiG9w0BAQsFAAOCAQEArnoPhgMEw2cYsMjBE3KLuhpAAuEhktIcbLoer2JCAsM+
YptezsRRP2GOQzBpKw/wB1qUYL4jBAeC5kVowow5hhrPHrtaSQRrGpS6duhwjR4K
Z0vxF9VXBaGzerG1HIgAE5+gPxJgDNtBgWmuMnwiF92+18/x2Z/0AeMfI9nnYFIY
tgdnBkrxWcUK84Tp6qxQqLjfamaw6R+a5rNkg4bX/O8xj38BAH/b4NMKeeKmRGy/
PvJj4/OWpKExMoXdsZP1RITTaMk5k6C8LXKtBCh+FR3zOESuNSnLDXvPcx6B2xGU
+TASEIGDK5gaXGp11mDBF8ScUPgHNro/HvoC6bE1Fw==
-----END CERTIFICATE-----
Generated at Fri Nov 28 08:00:11 2025 by rpki-client