This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
File:                     baff326b-1f24-468c-b9c6-fa089a461350.mft (raw, json)
Hash identifier:          RwJoRBxP0aIhVRZBdqcMLEA1O2cmgytXZXML+UJTg4s=
Subject key identifier:   59:C4:87:79:22:69:39:EF:79:48:A2:F1:40:07:8E:6C:10:CE:5A:09
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584C413A8720D479C93B38C2D2C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
Manifest number:          010D0C9F4328584073A830D864F9AE9DDE3D8ECE
Signing time:             Sun 21 Dec 2025 00:00:03 +0000
Manifest this update:     Sun 21 Dec 2025 00:00:03 +0000
Manifest next update:     Wed 24 Dec 2025 00:00:00 +0000
Files and hashes:         1: 296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa (hash: mGTYUYLslnbeIj0j1FGNnWPZQSSrNkZwtbVOPjb09p0=)
                          2: 47a950a5-c11b-3ac6-948d-a99bc891a802.roa (hash: vqa8XUmLqtk8EeSZqJ6M8nbXw5y1lA5h6AjM7k2jj44=)
                          3: 5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (hash: 5HCemg7DAr7kYQih2dkH0ts9Xt7DVRAj/nFE22aK23M=)
                          4: baff326b-1f24-468c-b9c6-fa089a461350.crl (hash: lVWwThuzgde9CNb+L8uF7Fb5gTmLKHAj6CptQ8fBYpI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:3a:87:20:d4:79:c9:3b:38:c2:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Dec 21 00:00:03 2025 GMT
            Not After : Dec 24 00:00:00 2025 GMT
        Subject: CN=c937f8f8-5bfc-4137-89d4-6fc0b27fe2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:d1:5f:07:ff:22:c8:06:03:36:10:88:37:
                    63:ca:70:c6:83:3b:9f:c0:db:49:eb:3c:c7:f8:20:
                    71:78:97:51:ef:e1:2a:95:e7:d6:92:2f:48:d9:e9:
                    7e:2c:ef:c3:6c:2d:69:23:fa:c3:f4:18:10:f8:d9:
                    b7:34:83:0c:c4:00:42:48:69:15:54:46:99:2e:cd:
                    fc:33:ea:c5:62:a8:9d:4a:cb:e3:3e:72:08:d1:99:
                    5c:79:4f:1a:44:9a:36:4d:a4:0e:81:fd:ce:fe:1f:
                    0e:68:b6:48:d5:ba:7a:79:19:73:92:d0:57:dd:e6:
                    38:bd:fe:68:17:9e:bb:d3:36:7e:f9:3f:91:38:08:
                    ab:31:6f:e3:35:ea:2a:43:5c:d5:af:bb:45:ec:07:
                    11:b6:a5:d3:ec:f3:bf:73:c2:aa:76:c6:f3:7d:a5:
                    8b:56:aa:49:c6:d3:52:ec:99:6f:a2:76:05:f5:9c:
                    da:3b:db:00:f4:46:a8:4a:df:10:a0:6c:e0:e3:b9:
                    12:be:c2:a4:3f:04:1a:ce:49:42:26:a7:4d:32:9c:
                    1e:3d:a1:37:41:96:da:1d:59:2a:0e:f6:05:fc:4f:
                    12:a7:d6:a8:c0:31:82:e1:62:8a:08:b8:fb:a9:0e:
                    48:f7:f0:2d:31:fb:2b:36:48:f3:04:6a:bc:54:db:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:87:79:22:69:39:EF:79:48:A2:F1:40:07:8E:6C:10:CE:5A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6d:e5:7e:ba:ac:2f:c6:67:5a:2a:f9:f6:94:a8:cf:31:be:
         3f:26:e1:cf:60:1d:b3:6d:af:63:16:9a:a6:0b:25:1b:24:d1:
         f1:e1:97:3a:fe:dc:c0:4c:4b:63:de:9c:13:f5:e7:e9:f8:7e:
         26:d4:cc:3d:f2:85:45:f0:b0:45:f1:9d:41:22:9b:3e:1b:c1:
         d1:5c:98:7c:a3:af:4b:9d:f7:be:93:96:38:64:af:6c:c6:96:
         36:84:c4:30:80:33:a1:c4:6a:e1:df:cf:fa:2c:56:99:14:ca:
         ff:3d:67:4c:5f:0f:04:9b:4c:0f:13:23:d2:3e:8f:ec:bf:93:
         22:71:27:28:09:ab:e1:2b:8b:89:37:b4:45:53:da:6c:7f:4c:
         09:83:df:df:41:b9:4e:f1:fa:c5:aa:e9:87:b9:a4:0c:d4:f2:
         3a:98:a1:a1:32:bb:10:37:68:05:8d:4e:ad:0d:f1:6d:13:88:
         17:f7:d2:05:91:4b:3d:27:bf:d8:5b:2c:fd:7c:20:83:31:76:
         44:09:8f:5f:a7:37:a5:ef:f5:6e:2b:75:fe:3c:36:b3:ae:62:
         5e:fc:99:a8:bf:d2:9e:5c:06:5a:a1:e4:d3:c9:4f:5d:c2:21:
         51:4c:df:61:3a:51:4f:26:5c:9b:cd:a9:5f:05:d2:63:2f:cd:
         cd:d7:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:08:16 2025 by rpki-client