This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
File:                     28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json)
Hash identifier:          qtJufUw7Q3ot+gGxMpDQ1vCaHSq6l0DgmU5zxwfeIpg=
Subject key identifier:   6F:27:01:15:24:92:B9:0F:84:68:EC:3E:67:9E:36:40:5D:CE:16:8B
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Certificate issuer:       /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial:       010D0C9F4328584C3C936DA39A14B00CD0FDBF70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
Manifest number:          010D0C9F4328584073A84793D8858966B57163F7
Signing time:             Fri 19 Dec 2025 08:00:08 +0000
Manifest this update:     Fri 19 Dec 2025 08:00:08 +0000
Manifest next update:     Mon 22 Dec 2025 08:00:00 +0000
Files and hashes:         1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: OGWQn8hrZ3fllB7ZuJ/stYAMgGTlxbzLlrpBpnv0gj0=)
                          2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: YXc4hirmGPFU0oYA49DSVQYUXe2TmsJ3b54QfwlxmZQ=)
                          3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: vC+sp42OyNgeJ4sGEvMQkyTQL/A5cTl9t2c/JCQ5j20=)
                          4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: KMudAg+Iswnozw8Xif4Igi0sbAs4u7ite1OoOR9eZdY=)
                          5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: Q22lOGOXr//wE3GjEw72stgsHmNSiFW5BhvSthJZWog=)
                          6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: VPJAbUf3KOQk7HAlr9tk6Ixh0dN+DsolGqvpVSZj+KA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3c:93:6d:a3:9a:14:b0:0c:d0:fd:bf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
        Validity
            Not Before: Dec 19 08:00:08 2025 GMT
            Not After : Dec 22 08:00:00 2025 GMT
        Subject: CN=c2a0427e-d75d-42be-a26f-39b4232929bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:17:3b:0e:2d:ed:6d:46:98:c4:5d:77:20:6f:
                    a0:8c:f0:2e:70:f1:01:ae:e6:e3:52:67:bd:b8:e9:
                    5b:1a:89:d8:51:f7:b3:46:af:32:b2:07:1e:46:e6:
                    3d:9b:8f:22:f7:a2:d8:45:97:10:c7:5c:28:e4:b7:
                    4b:be:97:4e:a7:e6:f4:c0:78:a8:22:ad:73:f1:05:
                    cf:4d:92:60:b6:49:9f:23:28:9b:55:5d:7e:b3:7f:
                    37:9f:b1:7f:85:f2:04:59:4b:a4:7c:cd:cc:08:cd:
                    a4:3a:5b:9e:2f:0c:80:fc:9f:2b:a5:d7:19:28:31:
                    d6:dd:73:0c:7d:95:fc:6b:92:61:01:cb:77:40:72:
                    f4:44:e3:51:22:ad:36:25:2d:f6:39:68:77:d2:0f:
                    5b:82:de:ef:51:1d:76:ce:2a:45:b2:bc:51:4c:4a:
                    ac:7a:77:fe:db:65:5c:5b:77:52:33:7d:f9:38:18:
                    7d:22:5e:9e:ee:ce:c6:0e:3d:dc:0c:27:be:d9:d6:
                    72:99:56:55:c7:7e:4b:b8:4d:1d:c1:b5:59:e9:a4:
                    ab:3a:b7:b2:fc:4b:b4:98:3a:72:1d:53:5a:91:52:
                    dd:c5:0e:67:f7:af:d9:a8:eb:1a:8f:0b:a8:3c:30:
                    e4:43:14:61:ca:4e:b2:b5:6a:89:0f:44:86:00:bf:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:27:01:15:24:92:B9:0F:84:68:EC:3E:67:9E:36:40:5D:CE:16:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl

            X509v3 Authority Key Identifier:
                keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:1d:0b:09:d7:e7:d9:dd:b4:57:7f:c5:2a:ee:17:29:ae:
         be:77:60:7f:6b:db:ac:ad:7e:b5:10:99:77:e6:1c:b7:88:b8:
         4f:f5:34:22:a4:39:e8:78:f4:95:f1:13:9d:7f:9c:83:1e:4a:
         7b:34:d1:1f:ff:37:18:22:0c:da:c4:de:d8:ab:7a:9e:c6:7a:
         a2:a4:2f:0b:2a:ac:72:3c:49:e3:7a:42:5d:2e:f4:2d:c1:02:
         e2:56:cf:56:97:77:a2:80:78:28:c0:62:2e:c9:2f:05:58:6a:
         0a:58:c1:97:00:48:bf:1d:90:d1:25:a2:6f:0e:f8:1c:16:93:
         93:6f:02:ef:e1:4d:81:ba:23:ed:78:e2:28:70:3a:47:21:51:
         26:da:e7:a1:e6:b6:a0:b9:01:43:b1:95:ce:97:73:5c:13:29:
         26:c8:3d:ea:02:63:f2:40:98:18:8b:6d:c4:93:5b:1a:ac:3c:
         2a:c4:9a:3b:48:f8:85:5f:20:7b:06:62:dd:fd:31:67:90:20:
         d9:0f:0f:7b:88:fe:d7:9a:d1:8f:40:50:f7:0b:f1:31:ce:e8:
         38:f4:25:7a:e6:e8:82:25:59:a9:9b:5c:38:1e:e7:0c:f8:0e:
         4e:e3:8c:90:fb:84:fc:b9:a5:5d:74:28:63:40:9f:17:e8:36:
         02:52:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:39:07 2025 by rpki-client