This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft
File:                     4d2b08b7-5038-407d-8712-a13cbe5c7164.mft (raw, json)
Hash identifier:          KW3dneJ8AgPFEJ97Qya1irX5YPJgmY1oToWk1y0KCJw=
Subject key identifier:   93:9C:E1:01:E9:D3:D4:DD:61:21:D7:AE:31:17:DD:17:34:FF:8F:EA
Authority key identifier: EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD
Certificate issuer:       /CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
Certificate serial:       010D0C9F4328584C420AF88B2C3C9EC708E39F18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft
Manifest number:          010D0C9F432858451AAC381CDD0E5CD187C262A1
Signing time:             Sun 21 Dec 2025 07:00:03 +0000
Manifest this update:     Sun 21 Dec 2025 07:00:03 +0000
Manifest next update:     Wed 24 Dec 2025 07:00:00 +0000
Files and hashes:         1: 06427ad0-b026-3122-b95e-1ca7ffd5cd62.roa (hash: 69RTWr+ot/flPVX+YwrFO9avvhti5Pe0tWkB5YJHSwE=)
                          2: 4d2b08b7-5038-407d-8712-a13cbe5c7164.crl (hash: NDB5dNIjPGWiyEOiL5pGaF8Klwa7VJ0X3c01pU3QG2Q=)
                          3: d00cb053-7fdd-3738-987c-4166b9a7f33c.roa (hash: vYoxl237M/67n7pw3kBz/rOvakux09+aWpl14APs/q0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:0a:f8:8b:2c:3c:9e:c7:08:e3:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2b08b7-5038-407d-8712-a13cbe5c7164
        Validity
            Not Before: Dec 21 07:00:03 2025 GMT
            Not After : Dec 24 07:00:00 2025 GMT
        Subject: CN=1cd1cfab-358b-49bf-8184-b8f4a78ce285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:95:a5:05:36:eb:ca:ff:b8:d4:dd:05:d3:
                    bf:cd:99:f0:6e:4b:84:80:0c:07:4a:94:fe:01:86:
                    8e:af:00:f6:00:ce:3b:b7:a5:81:5b:34:48:5b:37:
                    4a:97:d3:c1:a6:61:da:f4:bd:21:6c:76:2b:d5:53:
                    63:e8:28:14:f8:1e:01:e9:3f:ae:b6:70:86:d5:be:
                    68:0d:d8:e0:ac:12:da:80:74:72:89:32:50:ba:bd:
                    7a:aa:ce:45:d7:a1:81:56:45:92:8e:bc:ec:66:e0:
                    0e:9f:cd:f6:6b:74:5a:a1:bd:1d:12:fb:02:41:75:
                    fa:6a:7d:2f:f1:ad:c7:d2:b1:f7:74:20:cd:87:3d:
                    18:e9:a8:d2:56:92:41:7b:d3:a4:a5:f1:3b:4a:f7:
                    1c:bf:56:cf:c7:d6:09:8f:25:89:92:31:92:40:6e:
                    4a:8d:f5:ba:9c:86:b1:a9:04:d4:2c:b2:3c:0b:aa:
                    22:e5:3f:21:bb:80:d2:36:b3:8b:88:9e:6d:68:eb:
                    ac:dc:ec:58:db:c0:a0:d4:bf:b8:d4:4e:e3:68:44:
                    22:7a:3a:8a:a2:be:40:2f:f3:c1:71:f6:af:7e:57:
                    8b:23:a6:5c:12:0a:32:cd:3c:29:73:8a:5d:0e:01:
                    32:40:32:15:c2:1e:cc:6a:85:93:4d:56:c9:7f:f5:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9C:E1:01:E9:D3:D4:DD:61:21:D7:AE:31:17:DD:17:34:FF:8F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164/4d2b08b7-5038-407d-8712-a13cbe5c7164.crl

            X509v3 Authority Key Identifier:
                keyid:EE:54:CE:85:94:E2:A7:11:74:32:92:D3:A0:D8:74:9A:35:89:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4d2b08b7-5038-407d-8712-a13cbe5c7164.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:22:b6:a9:a8:e6:dc:92:80:84:a1:79:4d:53:c0:a0:61:25:
         1e:f7:bb:ea:de:a4:62:f1:3f:68:fc:58:7a:15:75:01:15:c9:
         20:22:81:c3:5f:73:35:23:d8:0d:f0:19:e7:b5:c5:61:fa:15:
         56:e2:24:27:14:e6:e0:35:9b:ba:d4:aa:4b:2d:91:bd:75:40:
         c1:d1:fc:8d:aa:aa:ac:9d:81:9e:90:76:2e:62:27:9a:bf:4c:
         5e:f2:11:14:08:57:50:26:2d:8f:fb:ec:27:09:52:48:84:83:
         86:87:d2:c1:47:6a:8a:63:e4:f1:93:04:00:a3:ac:76:46:2e:
         85:45:1f:2a:6e:68:52:48:6d:de:af:52:7c:f9:d3:be:3f:89:
         ad:6d:6c:ae:27:0d:c6:60:3a:f8:6c:fb:52:c0:f6:f1:b2:4b:
         7a:b0:4e:f5:03:a9:f6:42:69:d7:12:02:43:3b:58:54:78:73:
         95:55:49:14:ac:9b:72:81:ba:f2:1a:20:6a:a2:b7:50:10:73:
         48:0d:c5:99:6b:b8:d1:10:04:1e:c7:66:5e:6a:a7:97:bc:17:
         1c:7c:86:14:56:9b:44:1c:df:c7:84:d9:b0:37:59:4f:bb:7c:
         c4:0b:03:7f:9b:55:6f:af:01:5d:fd:4e:6a:7a:6a:c5:47:66:
         9e:9a:de:0b
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExCCviLLDyexwjjnxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQyYjA4YjctNTAzOC00MDdkLTg3MTItYTEzY2JlNWM3
MTY0MB4XDTI1MTIyMTA3MDAwM1oXDTI1MTIyNDA3MDAwMFowLzEtMCsGA1UEAxMk
MWNkMWNmYWItMzU4Yi00OWJmLTgxODQtYjhmNGE3OGNlMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdeVpQU268r/uNTdBdO/zZnwbkuEgAwHSpT+
AYaOrwD2AM47t6WBWzRIWzdKl9PBpmHa9L0hbHYr1VNj6CgU+B4B6T+utnCG1b5o
DdjgrBLagHRyiTJQur16qs5F16GBVkWSjrzsZuAOn832a3Raob0dEvsCQXX6an0v
8a3H0rH3dCDNhz0Y6ajSVpJBe9OkpfE7Svccv1bPx9YJjyWJkjGSQG5KjfW6nIax
qQTULLI8C6oi5T8hu4DSNrOLiJ5taOus3OxY28Cg1L+41E7jaEQiejqKor5AL/PB
cfavfleLI6ZcEgoyzTwpc4pdDgEyQDIVwh7MaoWTTVbJf/VApwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJOc4QHp09TdYSHXrjEX3Rc0/4/qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZDJi
MDhiNy01MDM4LTQwN2QtODcxMi1hMTNjYmU1YzcxNjQvNGQyYjA4YjctNTAzOC00
MDdkLTg3MTItYTEzY2JlNWM3MTY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGQyYjA4YjctNTAzOC00MDdkLTg3
MTItYTEzY2JlNWM3MTY0LzRkMmIwOGI3LTUwMzgtNDA3ZC04NzEyLWExM2NiZTVj
NzE2NC5jcmwwHwYDVR0jBBgwFoAU7lTOhZTipxF0MpLToNh0mjWJCt0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80ZDJiMDhiNy01MDM4LTQwN2QtODcxMi1hMTNj
YmU1YzcxNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlIrapqObckoCEoXlNU8Cg
YSUe97vq3qRi8T9o/Fh6FXUBFckgIoHDX3M1I9gN8BnntcVh+hVW4iQnFObgNZu6
1KpLLZG9dUDB0fyNqqqsnYGekHYuYieav0xe8hEUCFdQJi2P++wnCVJIhIOGh9LB
R2qKY+TxkwQAo6x2Ri6FRR8qbmhSSG3er1J8+dO+P4mtbWyuJw3GYDr4bPtSwPbx
skt6sE71A6n2QmnXEgJDO1hUeHOVVUkUrJtygbryGiBqordQEHNIDcWZa7jREAQe
x2ZeaqeXvBccfIYUVptEHN/HhNmwN1lPu3zECwN/m1VvrwFd/U5qemrFR2aemt4L
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:52:21 2025 by rpki-client