This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
File:                     caf392a1-07e9-49f4-9a03-df5005333708.mft (raw, json)
Hash identifier:          9dbxwNssa/MAMyIUe5C4N8WQdjwOxUc8DpDW7CJxMrI=
Subject key identifier:   E7:B3:04:A2:B9:EE:D5:0F:B4:8A:86:E7:21:0E:9D:27:5E:C0:98:1E
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F4328584C4441D10F2FECA01496FA9D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
Manifest number:          010D0C9F4328584073A81D24A42B9B6EA14ECB7D
Signing time:             Mon 22 Dec 2025 02:02:09 +0000
Manifest this update:     Mon 22 Dec 2025 02:02:09 +0000
Manifest next update:     Tue 23 Dec 2025 17:00:00 +0000
Files and hashes:         1: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (hash: nDNFxtODY/qfqQRQgUaKGI0N3NvkBhyvxXMCJ5ufd8E=)
                          2: 2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (hash: XVsInhDKhv4Yoi+kK5Z4IJUiBQaWlUvOz8gUTZPNayA=)
                          3: caf392a1-07e9-49f4-9a03-df5005333708.crl (hash: qPJINp505i4j8lHGXFLl5wWF748wpfURI/oUWfLHI5M=)
                          4: fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa (hash: rr9u25i3SH/b5KIfMMkvZwrZYBlpGi0f5BdmKLVxFnM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:44:41:d1:0f:2f:ec:a0:14:96:fa:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Dec 22 02:02:09 2025 GMT
            Not After : Dec 23 17:00:00 2025 GMT
        Subject: CN=16aebc70-f062-48df-8b6e-5d9c2d67d541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:51:d0:c5:28:fe:bd:a1:4b:54:22:19:33:
                    f5:18:0b:77:62:bc:f6:b2:cf:ba:21:23:a8:94:6c:
                    5c:5a:9f:96:18:04:66:60:19:7b:c5:75:4b:bf:67:
                    65:dd:73:a8:27:9f:e9:37:34:ea:5f:48:46:2d:1e:
                    28:60:4a:7e:17:c8:d7:e0:71:fa:38:76:d7:ed:bd:
                    45:7b:9c:35:74:f4:2f:51:8b:79:a6:58:48:54:f2:
                    4f:0e:a7:6f:f0:88:33:90:d3:f1:ec:8d:be:52:54:
                    48:3f:61:ee:13:d8:5e:7a:88:fb:58:7e:f9:d5:fd:
                    88:d0:32:cf:1a:bd:2a:49:33:25:48:53:c3:7e:27:
                    0c:47:74:c8:78:59:59:05:72:60:43:08:c0:c7:f3:
                    80:a1:45:c1:08:1b:08:fb:a2:38:80:91:d5:9c:58:
                    0e:4a:15:21:81:6a:a1:1f:fb:ae:4d:47:63:6c:88:
                    b3:4b:9d:d6:b4:2a:05:da:68:54:df:a2:b7:26:08:
                    9a:d4:fe:c8:81:42:da:fe:7b:c2:8e:7b:86:25:97:
                    6d:89:bf:21:c5:c7:73:ef:b2:74:3f:2e:a3:ed:99:
                    7d:e7:24:14:a5:d4:65:d9:19:18:14:d5:45:21:91:
                    23:97:a5:2d:09:29:c0:8f:7d:7c:b3:1c:7d:11:0f:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B3:04:A2:B9:EE:D5:0F:B4:8A:86:E7:21:0E:9D:27:5E:C0:98:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:96:d3:f9:f6:20:07:2c:5f:90:81:84:60:57:e1:ac:04:
         4c:8c:e7:16:d2:a8:79:7d:6a:83:9f:91:8b:ed:11:b3:53:26:
         c4:73:72:e9:ab:86:7d:00:03:14:52:6b:fd:dc:09:1a:5b:15:
         58:f2:c1:69:56:f1:76:49:fc:5a:96:8e:4d:f3:6c:d9:a0:20:
         e0:1d:ec:6e:e8:8c:fc:82:8e:55:50:d1:19:dc:2f:eb:10:f1:
         d4:4b:b6:2b:6b:46:c1:9b:8c:c0:b6:4d:15:07:91:09:ed:22:
         ad:43:94:db:c8:d1:07:9f:89:84:2d:c4:c3:c6:8e:1d:01:05:
         17:67:a2:ea:3f:e6:d3:c6:29:d3:45:c6:76:30:e2:d4:72:ee:
         0d:7a:ee:a0:94:f2:9a:db:27:59:27:c6:89:02:c8:84:1c:9a:
         cd:1d:b6:58:13:e4:0e:cb:27:22:45:87:7e:66:dd:6e:96:3b:
         c3:07:9d:41:10:e9:6d:d1:15:02:52:70:2e:a5:b4:74:b3:f2:
         d9:44:25:bb:89:7c:65:79:85:93:1f:4f:79:06:87:d5:08:e1:
         51:3d:0c:1e:5a:61:a4:29:c7:b9:77:60:da:e2:8b:ce:35:7d:
         86:00:ae:4e:3c:96:76:51:8a:7d:61:e8:56:93:aa:da:b8:09:
         b7:78:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:58:10 2025 by rpki-client