This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft
File:                     596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft (raw, json)
Hash identifier:          v9bwpySHprx/yuZxCZ9VYS6lx2jP1fauQvofaSw5lgk=
Subject key identifier:   5E:F4:5E:E6:B2:2B:E5:5E:3A:C0:73:EC:A1:CB:16:D9:2E:0E:E5:05
Authority key identifier: 89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96
Certificate issuer:       /CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7
Certificate serial:       010D0C9F4328584C406A1FA235949121E22DA580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft
Manifest number:          010D0C9F432858451E98BF8E948176AED5878C2E
Signing time:             Sat 20 Dec 2025 17:00:09 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:09 +0000
Manifest next update:     Tue 23 Dec 2025 17:00:00 +0000
Files and hashes:         1: 596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl (hash: vEH5yWFROqWGmSy4/Qu8zYMULewowKB/z0Zi5aY4twc=)
                          2: 71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa (hash: /LGQg8suPOcgqVrnBZ4E1zUF0Y5sAV0VKKMoSzzu7xU=)
                          3: a970bdeb-489d-3d07-914a-87a431004c36.roa (hash: eg2hDqPJIn8+IqSDvL3xXsHmO0QfulTmouSfioBDP00=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:6a:1f:a2:35:94:91:21:e2:2d:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7
        Validity
            Not Before: Dec 20 17:00:09 2025 GMT
            Not After : Dec 23 17:00:00 2025 GMT
        Subject: CN=1ea7df0b-dce5-4547-b8ed-beb0764395bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:97:59:53:4e:cf:87:b5:f2:dc:85:73:73:
                    38:21:20:cb:c3:d8:c4:0c:95:39:6e:6a:00:18:60:
                    66:66:5c:76:9e:06:03:cd:a9:3e:e4:aa:2f:03:33:
                    c9:9a:f5:b4:9c:52:b1:4d:9f:28:f6:1e:17:17:0f:
                    6f:18:1d:1f:5d:db:fe:c2:76:9c:b8:0b:63:a9:2f:
                    7b:53:58:43:80:63:b5:fa:ce:dd:ff:29:ca:fe:e7:
                    bb:f5:3d:38:6e:af:49:9a:08:47:84:d1:de:59:36:
                    d7:6c:60:d6:3a:b1:27:60:a1:4e:cb:17:28:84:a2:
                    00:46:75:94:54:7d:9b:29:36:5a:b6:de:d6:94:53:
                    5d:05:00:dc:a8:85:c8:c9:04:94:d0:b3:84:74:ea:
                    6a:43:8c:1f:f7:0f:02:cf:38:df:80:e0:4f:96:8d:
                    12:3a:bd:96:2c:52:bb:3d:a8:cb:91:c0:90:cc:31:
                    0d:cb:e9:83:67:e1:35:82:b6:88:27:7e:d2:67:54:
                    37:71:54:ed:1e:61:88:e3:9b:25:2a:31:f1:2e:7e:
                    e7:04:40:1d:e0:dd:e0:de:d5:28:e7:5b:f8:bf:a8:
                    51:89:35:a8:21:65:80:b6:3e:32:82:37:f2:06:8a:
                    8a:df:ef:20:ab:6b:c3:ef:4b:77:b2:e1:55:58:d4:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F4:5E:E6:B2:2B:E5:5E:3A:C0:73:EC:A1:CB:16:D9:2E:0E:E5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl

            X509v3 Authority Key Identifier:
                keyid:89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:b7:e8:12:77:b5:2f:50:47:3d:ad:93:c2:8e:bb:72:d1:
         90:ee:fc:4f:71:b4:98:7e:dd:64:e3:50:86:da:a0:9d:29:37:
         93:2b:ea:14:0a:19:32:e4:4e:2f:ad:21:62:a4:76:e9:35:48:
         3c:26:81:db:3c:02:8c:f9:53:9c:82:a1:b1:31:0f:ce:67:ec:
         e6:ba:e4:a3:9f:f8:0f:7e:0c:5a:37:f9:c9:ce:ee:ea:db:69:
         56:b3:ee:3c:07:39:cd:75:9d:92:2b:b7:e1:04:28:48:a6:1a:
         21:31:73:e6:11:0d:63:37:3b:65:52:60:e5:5f:df:73:09:49:
         32:54:be:b8:78:f4:8d:1d:2c:ce:65:96:e0:94:5d:52:8c:91:
         18:39:cb:de:dd:8d:e9:fc:15:3a:84:a6:0d:33:aa:60:80:e4:
         d1:aa:72:08:f6:80:49:70:6e:5b:c9:a7:72:d8:a1:ae:6a:b1:
         08:3a:59:30:47:ab:14:3f:38:fe:7a:fb:06:49:f6:f2:a9:25:
         df:f3:c2:02:6d:d2:04:d8:5c:72:26:5a:5c:d3:6d:9e:59:e9:
         9c:a3:97:ff:33:7f:1d:d6:da:07:dc:0a:66:39:e4:76:c1:15:
         20:53:c6:22:e3:53:28:b8:45:29:2d:28:9e:2e:6d:d6:7a:3e:
         16:cc:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:35:02 2025 by rpki-client