This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
File:                     4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft (raw, json)
Hash identifier:          qtmTN80zxDbQEDFxIHKuKd6YGGfTGCeN8eG4iXXMGYQ=
Subject key identifier:   7C:AA:F4:A2:14:D3:79:41:47:26:DD:99:51:CA:0C:78:51:AA:2C:9B
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F4328584C3B104EA1C828CD96C7BE5C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
Manifest number:          010D0C9F43285844B7A0D13397B2A13D06AB96F7
Signing time:             Thu 18 Dec 2025 19:00:08 +0000
Manifest this update:     Thu 18 Dec 2025 19:00:08 +0000
Manifest next update:     Sat 20 Dec 2025 19:00:00 +0000
Files and hashes:         1: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (hash: 4IItrw0MKVCiQZeKR4X2owJi8mQqjLe6S+Ck4EmpqNE=)
                          2: 2938d50c-8e48-36b6-993b-1b4431994e3b.roa (hash: QGNqNZQL3GLaqGJ6Whj2HuHh43RsP/fNUWMT7w+MnUU=)
                          3: 36746d5e-b777-3090-864b-cc36fff7cc3f.roa (hash: jKpd2praLSF8HXuL5bX+bEgGtRcOQcUEXUCkRxJSOXA=)
                          4: 4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl (hash: a3nvPS8VZlrjmIEO31jRLa5ysvqCqiulOHWGWxLvYns=)
                          5: ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (hash: KTRFDxJr1SXl3Xs0/49cGeTFu88kZnS3I7NZFQdzGmQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:10:4e:a1:c8:28:cd:96:c7:be:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Dec 18 19:00:08 2025 GMT
            Not After : Dec 20 19:00:00 2025 GMT
        Subject: CN=ec2a068b-22bd-4b44-b1d0-7c7a37be69f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:69:83:b4:db:33:74:a2:45:da:a3:2c:ab:
                    a7:ff:ca:56:60:cc:0c:fb:a1:f8:ea:9e:b2:05:d2:
                    b1:10:78:37:92:4e:b9:51:95:c7:88:2e:82:1e:dd:
                    86:2f:14:53:a4:93:8b:90:13:8c:30:82:c2:b0:79:
                    f4:e2:fa:4b:6b:08:26:f2:71:63:11:5e:1c:b2:be:
                    0c:56:11:f7:22:d5:f8:1b:7d:b3:69:7a:6e:6f:90:
                    96:0e:24:89:1a:2c:9e:df:42:da:5e:7b:d0:cd:b7:
                    6a:5c:5c:4a:1b:43:76:a1:46:c6:56:99:74:ea:2a:
                    ef:1c:db:13:3d:66:ad:7c:44:1e:a5:fb:72:f1:92:
                    32:ea:cf:8e:fc:34:ee:48:e0:44:9b:b3:ae:d9:a5:
                    05:77:cd:86:73:87:eb:cf:b9:fa:e1:90:5a:72:16:
                    fa:7b:7a:ae:53:65:f9:68:0d:0b:21:f7:01:75:be:
                    6c:71:bd:40:b7:9e:f2:5a:71:0a:1b:87:04:15:83:
                    da:29:db:70:96:ef:ed:c7:05:19:40:cb:5a:a2:a4:
                    d7:b3:54:54:1c:7d:24:84:c8:4b:8b:97:b0:f6:63:
                    49:92:85:82:af:aa:cf:b2:6d:db:cb:47:d2:20:c0:
                    05:d5:25:7b:79:ee:cc:4d:f7:8d:c7:6a:fb:95:ab:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AA:F4:A2:14:D3:79:41:47:26:DD:99:51:CA:0C:78:51:AA:2C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:10:05:15:b7:a0:6a:16:2e:4c:84:0e:f3:46:d6:53:23:b8:
         7e:99:d5:5c:fb:9d:d9:f6:0c:2d:5a:2e:82:b9:b4:40:31:a5:
         ea:3e:16:02:11:35:9b:65:3d:50:8c:25:cf:df:4f:b0:48:d3:
         49:e3:0f:14:ea:06:f8:04:9d:97:05:d9:d3:ab:43:8a:be:4c:
         fa:61:2b:66:5f:46:93:3e:40:af:89:ef:1b:06:fa:96:40:9b:
         b0:74:01:38:5f:ca:08:0c:bf:54:d7:50:09:58:1f:64:4a:a1:
         7d:6e:96:2b:36:84:41:df:62:1b:f9:99:d6:ca:ce:98:8d:f9:
         a7:14:29:56:a3:ce:32:ce:f9:9f:cf:72:ee:f5:32:16:44:09:
         44:dc:c7:4a:28:62:e2:d7:d8:bb:03:c5:85:ef:40:50:45:c2:
         a7:12:35:56:71:a1:a9:00:54:38:52:8c:f3:0d:b8:1c:c3:d0:
         ec:37:55:4e:87:8c:f6:39:68:74:79:92:71:e5:ba:96:ec:c3:
         18:07:1d:44:9e:99:fa:07:83:47:07:21:bf:f1:7f:be:87:0a:
         2f:96:98:07:fc:09:4f:e8:23:5d:a0:53:90:8a:06:d7:64:fd:
         49:36:37:92:db:e8:bd:e7:3d:1a:87:14:71:80:e4:bb:9c:22:
         94:68:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:23:37 2025 by rpki-client