This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
File:                     28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json)
Hash identifier:          kyj/cNXzyrEESylaQdrCKOlZhrTjRoqQAACc+eh5XxA=
Subject key identifier:   70:CA:D8:59:F6:29:DE:65:D6:7B:AB:EA:4E:5F:BF:65:27:3C:C4:8C
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Certificate issuer:       /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial:       010D0C9F4328584C55B3998C88C84A9B84AF7D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
Manifest number:          010D0C9F4328584073A84793D8858966B5716401
Signing time:             Sun 28 Dec 2025 08:00:08 +0000
Manifest this update:     Sun 28 Dec 2025 08:00:08 +0000
Manifest next update:     Tue 30 Dec 2025 08:00:00 +0000
Files and hashes:         1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: 1A0i5GLscrbNEKx5soa9pnvM6RsKj0MYz6LNo418Iwo=)
                          2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: 1UnWSG4SlN1My63cIV9d6S/FoJpNdlQcW4pNDf8Z7dI=)
                          3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: /evjp1terIiBHjhzokg8oqL/5wlx5z+7/05TarDJt1I=)
                          4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: KMudAg+Iswnozw8Xif4Igi0sbAs4u7ite1OoOR9eZdY=)
                          5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: Q22lOGOXr//wE3GjEw72stgsHmNSiFW5BhvSthJZWog=)
                          6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: VPJAbUf3KOQk7HAlr9tk6Ixh0dN+DsolGqvpVSZj+KA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:55:b3:99:8c:88:c8:4a:9b:84:af:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
        Validity
            Not Before: Dec 28 08:00:08 2025 GMT
            Not After : Dec 30 08:00:00 2025 GMT
        Subject: CN=98ddafa7-6ea0-4a5a-a8c5-acf057dd55d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:2a:11:2d:ed:bf:a8:d0:6c:08:43:4b:52:
                    b0:5d:18:65:75:58:68:9f:f6:e7:4e:a8:c0:e4:30:
                    04:53:1e:37:ee:b7:1d:95:95:9b:bb:01:59:f2:73:
                    34:a3:19:48:53:c7:d0:3b:24:d8:42:7a:fe:9e:f8:
                    78:29:af:41:dd:28:c5:ca:72:6b:ab:fe:14:f1:7b:
                    4f:52:d8:71:70:1d:09:9f:a2:a4:68:af:3b:1d:46:
                    24:f6:9c:23:84:7d:a9:04:8d:eb:e2:bc:72:66:d0:
                    bb:84:db:9a:7c:34:da:c9:09:49:4a:7b:f9:35:48:
                    0e:fc:12:00:68:e0:b9:27:c4:49:58:5b:68:d7:93:
                    d9:04:29:20:f1:7a:45:fa:eb:62:81:8e:de:a4:2c:
                    60:c9:40:d8:69:95:0c:84:a1:df:8b:24:36:f5:b0:
                    ac:42:1f:ea:0f:4e:41:5f:bf:66:57:1d:7d:4a:63:
                    ef:90:45:02:26:1e:34:8b:f8:55:aa:8f:7f:c6:db:
                    98:be:0d:3a:50:c2:b4:a2:27:32:ca:35:b8:fe:a1:
                    ab:c8:99:5d:c4:4b:f7:6d:fb:f7:8d:7d:75:c1:41:
                    fb:18:29:4b:96:5a:48:bf:0b:a6:ee:3b:c4:a7:04:
                    47:d7:6e:ce:04:58:d9:d1:3d:9a:55:8d:fa:8f:79:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:D8:59:F6:29:DE:65:D6:7B:AB:EA:4E:5F:BF:65:27:3C:C4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl

            X509v3 Authority Key Identifier:
                keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b2:8d:8e:34:ee:d5:d8:80:2c:08:fb:53:9d:49:1b:e1:4b:
         74:e1:40:95:8e:a1:38:e8:95:68:aa:80:44:fd:fe:59:a9:f9:
         a4:d5:6f:38:26:a4:98:1c:b5:fb:2b:43:eb:8e:36:33:f5:7a:
         21:fc:6a:b6:84:01:37:b1:8b:b4:6e:fc:fc:11:a9:c5:fc:06:
         b9:16:43:22:84:47:b5:cb:3f:c0:6a:6b:1e:49:77:62:d2:39:
         81:4f:7f:3f:d7:8c:ee:3d:f0:93:a9:86:36:13:0c:c6:6a:7f:
         ca:a1:6b:84:d4:9d:70:40:86:69:97:28:af:93:21:a7:87:fd:
         43:56:37:b2:42:ea:eb:dd:ef:d2:99:f4:c6:04:1a:b0:b7:da:
         03:3c:9f:95:1d:24:21:cf:29:9c:1e:05:51:ba:93:a6:35:03:
         ea:fe:b0:25:71:1a:7b:4f:bb:7f:d5:ee:f8:5c:19:54:21:69:
         c1:55:93:6c:2c:8c:16:1d:ac:01:cb:a0:53:d9:6f:df:65:b5:
         ff:99:c9:b8:0b:55:b2:6d:c6:17:55:9a:22:fb:0a:72:4f:fd:
         bf:28:8a:cd:d5:09:51:2a:69:5f:2f:00:9a:6b:2e:e2:bc:83:
         2f:cb:06:3e:fa:4b:95:2a:21:03:34:16:a8:97:f8:7c:d2:25:
         ff:d6:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:25:40 2025 by rpki-client