This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
File:                     22d5f618-5b64-4804-88ef-e125dd90d7e2.mft (raw, json)
Hash identifier:          1dMWcbk5O45CbMbewJrpWBohaA0kKmZhiPwG1grLPfc=
Subject key identifier:   F1:FC:60:BE:C7:99:B6:AD:45:64:D8:73:F0:E7:18:69:04:8F:07:CD
Authority key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Certificate issuer:       /CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Certificate serial:       010D0C9F4328584C59E3A260A1252AC0B6454EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
Manifest number:          010D0C9F4328584073A825B4ECEA2933FF2E9ADE
Signing time:             Mon 29 Dec 2025 20:00:10 +0000
Manifest this update:     Mon 29 Dec 2025 20:00:10 +0000
Manifest next update:     Wed 31 Dec 2025 20:00:00 +0000
Files and hashes:         1: 22d5f618-5b64-4804-88ef-e125dd90d7e2.crl (hash: 2rCVODEMLQ5QEvIon/rQpXnawFjGae5N4grJNGzxK2U=)
                          2: 30f12f48-f8e6-3f07-81e9-14e29d06f85d.roa (hash: qAo/OMDvCP4SzkKXa20BNvK7tqrONUUK513Byf3GDwM=)
                          3: b8277726-63a8-3672-9533-c44e9d028822.roa (hash: Wo3aRBUBGdrFSTxLn7HZ3QK4ZryYidBg/myTwTAyApo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:59:e3:a2:60:a1:25:2a:c0:b6:45:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
        Validity
            Not Before: Dec 29 20:00:10 2025 GMT
            Not After : Dec 31 20:00:00 2025 GMT
        Subject: CN=60e0a6f9-3e65-4d9c-8f9c-d7d2629fbf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:c4:b2:11:d3:9c:c2:ec:98:7d:43:d8:bc:
                    a3:58:00:37:33:e6:92:b3:a3:a8:ac:65:38:21:f2:
                    83:5e:a0:ca:f0:2f:d5:b9:8d:f4:53:6f:d8:52:8c:
                    b7:c4:28:ed:81:9b:4c:24:b3:44:ea:43:06:41:c8:
                    c5:d7:5c:7d:45:d5:02:d3:7e:5c:b0:12:3c:d3:47:
                    a0:24:0d:d7:68:9f:c1:05:09:e2:66:6d:9a:dc:40:
                    cf:1f:9b:6c:70:77:85:3f:02:2b:82:f4:05:fb:36:
                    fc:48:ff:17:e7:ab:ae:75:5e:b2:be:4c:7c:bd:b8:
                    79:ec:37:47:19:2e:d3:7f:8f:19:de:8b:1d:1f:09:
                    29:ce:07:7e:6e:2a:5a:a0:c1:49:c6:5f:6d:44:9e:
                    68:34:23:16:bd:6e:9e:63:28:57:9b:95:b0:25:02:
                    e9:43:a7:91:cc:af:03:84:1a:db:de:c1:ab:14:0e:
                    04:9a:ac:ba:b5:62:30:84:94:d4:da:d0:c4:7c:97:
                    ea:36:88:7b:7c:bb:5c:b9:d1:30:2a:94:bb:5d:70:
                    b6:e8:cd:2c:75:3e:77:10:a1:8f:2e:15:c0:a0:3e:
                    00:f4:3c:3e:b2:07:b6:6d:2b:26:86:12:01:89:ac:
                    ec:b3:e9:ba:0b:4b:d3:87:74:d9:3a:f1:e4:cf:7d:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:60:BE:C7:99:B6:AD:45:64:D8:73:F0:E7:18:69:04:8F:07:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.crl

            X509v3 Authority Key Identifier:
                keyid:51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:68:01:3c:81:d3:16:27:c2:fc:2a:16:4b:45:27:e0:aa:
         3f:09:4b:66:23:b6:0d:31:08:50:85:2f:d4:59:85:c2:9d:8d:
         da:f3:23:e5:53:aa:ff:e6:7b:4d:eb:f4:f8:5d:4b:42:bd:7a:
         c4:42:c1:51:d0:ac:a1:37:44:4b:6d:36:b1:36:d8:d7:a0:71:
         00:33:4a:a5:a6:5f:3f:a5:ab:b3:78:d2:73:9b:11:f4:da:ba:
         6b:f5:6e:b6:ac:1a:09:4b:39:a1:46:e7:92:e1:24:95:f8:0f:
         71:48:d2:32:37:dd:da:96:3a:fb:7c:40:7c:cc:24:ea:63:f4:
         f3:1b:35:66:07:0f:d8:61:fc:56:34:22:25:71:cd:b3:0d:37:
         aa:87:a0:ff:b1:da:f9:49:21:db:34:a2:06:32:02:3f:b1:42:
         64:6b:2a:87:76:84:bb:3c:a2:75:01:67:20:1a:47:cf:13:39:
         a0:ba:bf:e4:56:32:7d:3a:41:60:e6:d2:81:42:07:0c:88:e6:
         97:be:30:06:38:44:f4:86:e8:1e:6b:9b:ab:de:40:bb:15:b9:
         fb:5a:b3:c6:0d:d2:67:82:3f:40:f0:2e:d1:37:25:47:b1:44:
         31:ab:74:fd:06:4b:91:05:34:d1:06:25:79:a6:66:d2:5f:53:
         77:da:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 16:32:49 2025 by rpki-client