This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
File:                     28aae7db-2f51-4656-bba0-64f1d3ee3256.mft (raw, json)
Hash identifier:          gFnJQZqbbNAoy+4zLoPXgzcBfEuNUkwp8Sy65Wefqhc=
Subject key identifier:   BD:12:AC:9B:C1:8A:58:08:1D:7A:9D:A9:E2:9E:DD:7F:EC:68:C4:A3
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F4328584C3DF8C75AF903BDB017AB5200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
Manifest number:          010D0C9F43285844BA8B4395ABA4BC7BE3153A43
Signing time:             Fri 19 Dec 2025 20:00:08 +0000
Manifest this update:     Fri 19 Dec 2025 20:00:08 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:00 +0000
Files and hashes:         1: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (hash: Yn3b6dA2SNRvJIxu+Ae1+4VMJH/OxKHC0YQMdr1Dli8=)
                          2: 28aae7db-2f51-4656-bba0-64f1d3ee3256.crl (hash: sbz5glWa1Eig7XFVtFggB9RuxbTA9IVx2DQ8r9SRO8g=)
                          3: 8b8a85b0-e152-340d-9552-d571b618a288.roa (hash: 6M3NB2CDvPt853JYWk8lPIJ3YoMWy8ECOAfKE02YMfo=)
                          4: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (hash: OFgamgbeQwoPLit2uce65nB7X1dIYPgJ+lIUVirt9pk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:f8:c7:5a:f9:03:bd:b0:17:ab:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Dec 19 20:00:08 2025 GMT
            Not After : Dec 21 20:00:00 2025 GMT
        Subject: CN=cbbb3b13-44bf-4f7f-8cb7-fdf4b088cb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:52:00:17:95:e8:56:d4:1a:2b:0c:bd:40:
                    71:4a:cd:c3:4a:36:96:4c:f0:d6:cd:7b:33:86:f1:
                    54:46:0a:08:3a:f2:b1:3b:db:4e:55:b7:9d:ae:cb:
                    66:f8:db:79:e7:ef:eb:50:f4:8a:3f:cc:ae:8f:93:
                    8c:da:15:b1:96:fc:df:70:5f:a0:c4:13:c3:a0:01:
                    49:ab:15:2b:6c:3b:50:45:a9:81:68:89:b8:b4:f5:
                    0c:10:a2:a5:74:80:77:5c:49:cf:c8:6d:04:de:b7:
                    b1:2b:d6:ba:7d:13:ed:cf:8c:ab:cc:06:81:a0:4f:
                    77:d3:3f:86:8a:70:2b:b6:c0:fd:9a:a5:9d:65:c7:
                    6d:37:f2:3b:b8:fc:cc:c7:84:b1:9a:1c:94:fa:c0:
                    15:8f:fb:cc:84:48:60:df:dd:2a:56:a6:07:e8:3c:
                    a2:d3:f8:47:da:93:d1:2d:6a:a5:f0:0e:cd:a5:d1:
                    51:a4:bf:47:d0:54:e3:59:3e:91:de:5b:08:ed:b4:
                    e7:9b:94:62:9a:e8:46:f7:0b:9b:71:d1:71:c7:6d:
                    de:70:5e:e6:2d:eb:40:c6:6d:98:e0:60:cd:65:62:
                    11:e9:29:88:08:6b:81:f1:a5:f2:15:d3:72:cf:12:
                    b5:2c:ec:26:c0:27:ce:48:5d:9e:bd:ef:8f:91:a3:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:12:AC:9B:C1:8A:58:08:1D:7A:9D:A9:E2:9E:DD:7F:EC:68:C4:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8d:4d:fe:c2:70:74:77:17:11:14:ce:0c:e5:eb:86:f5:39:
         a0:c4:7b:40:3d:f2:98:59:79:9b:c3:51:54:f7:64:3e:6f:f8:
         b5:13:60:c0:82:ed:f7:84:26:31:ab:5a:46:f5:b2:9e:22:04:
         53:c1:7c:ab:95:17:00:b5:b1:0d:8d:96:21:e8:ca:7c:0d:25:
         49:8c:a2:53:71:f3:7b:67:cb:9f:9a:1f:f5:f7:9f:b7:f4:3b:
         b2:b1:a1:51:0b:27:bd:95:78:2e:31:6a:01:ae:4e:4c:1a:57:
         28:e5:a7:86:a6:29:70:a5:3a:d9:7d:25:da:dc:6b:47:26:06:
         1f:1f:dc:9b:fc:2c:50:36:7b:9b:bc:e3:08:64:9b:4d:a4:c4:
         f4:fd:6f:c6:a9:11:70:6e:8c:39:a9:f4:cb:fa:12:4b:07:73:
         13:6b:de:80:26:cb:fe:30:20:5b:e6:eb:82:41:11:22:61:aa:
         2c:0d:7b:45:b5:d4:cd:68:3b:d4:dc:e4:3b:c0:17:84:93:b4:
         ee:32:99:73:fc:48:61:ce:22:05:11:ee:a6:33:f7:48:fc:63:
         be:88:7e:07:81:af:e5:5e:7c:50:c2:45:8d:4c:94:4c:74:97:
         87:93:d4:61:40:c3:fe:4e:f4:6d:8f:24:d9:bb:08:9b:03:e9:
         a8:07:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:59:14 2025 by rpki-client