This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
File:                     5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft (raw, json)
Hash identifier:          prhXadvY7aKbUm+SDyVdNga7RF8k4LjAcVu+9Xdu97w=
Subject key identifier:   9D:D2:37:9C:27:63:AB:24:AC:66:F2:39:64:94:B1:6F:17:FB:D9:23
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F4328584C3E5213DD2649825487CC24E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
Manifest number:          010D0C9F432858451C89AB67BDE2EDE85F4E35A0
Signing time:             Fri 19 Dec 2025 23:00:03 +0000
Manifest this update:     Fri 19 Dec 2025 23:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 23:00:00 +0000
Files and hashes:         1: 067d8cdb-4a6a-32b2-b2b3-b4a25bd16945.roa (hash: lPkTPltIyXgFh3I87/YmIl7scaljhr5AI2IK9DhtA7Y=)
                          2: 35febe00-9c57-373a-948b-0f3b0e170f27.roa (hash: kLQDF7/dITUx3jG/OhgGr6ux103B4gggYwJOp4/5hRU=)
                          3: 43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa (hash: FumNvjYst41vktc9XQwXWNI188lNo1xJy8LC9oJf3PY=)
                          4: 5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl (hash: KtdB34DbvdzUVR6R7crv13zJ8EvKrZx9dfqryk1gbUg=)
                          5: 7b7debff-9c09-3442-9d1d-53ec5c8e5ac7.roa (hash: ckPm0FXhQUToVPbkBxj1y8srAVnqPkUfhtuyLBxN2vw=)
                          6: bf27e851-a778-308c-b44c-dc1bb3990a3a.roa (hash: h1qWROMdtZ4Snv1Xf7WSzSyufLUqLPEhsaj5qW9XpFk=)
                          7: f632f9bb-9097-3d7f-9484-4ed873293533.roa (hash: 4T1jK/7e2n1IT4u5qkkKnUedv0DFUoSFCMsO+dr1DD8=)
                          8: f6528c78-f01c-3b9e-baca-925db5229fe4.roa (hash: 2YNEVWOsm1Hn/FdAloyd8q+jq+eotqT2AYK3FW5i3Tk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:52:13:dd:26:49:82:54:87:cc:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Dec 19 23:00:03 2025 GMT
            Not After : Dec 22 23:00:00 2025 GMT
        Subject: CN=48ef33db-ec48-4c10-89b2-31d55685bac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:fe:71:11:8c:ba:c7:be:ec:97:7f:22:42:
                    c3:7c:1d:dd:cd:16:f6:3f:8a:84:a5:cf:30:15:e6:
                    7a:c8:c5:da:c0:7e:5d:f5:87:eb:7b:02:6c:68:b9:
                    eb:20:9e:cc:0f:36:1e:03:9f:99:c3:4b:dd:1a:33:
                    1f:f1:ea:e9:b6:78:b4:ae:3f:c3:ae:4c:b5:dc:c4:
                    e8:8d:ef:fe:a6:d0:16:0e:01:b5:70:91:c2:55:9c:
                    bd:38:1d:cc:41:91:e5:44:bf:37:2c:ee:2a:f7:48:
                    59:c3:c8:30:64:12:61:86:3c:fb:04:06:b7:6a:77:
                    e8:c2:47:36:60:48:2e:6a:42:41:7d:46:92:41:ad:
                    6e:f9:53:bb:7f:76:49:10:08:bd:62:d6:e2:19:2b:
                    24:87:62:48:25:ae:d9:72:d7:0e:7a:2f:57:8d:e6:
                    85:f2:bc:eb:2d:63:d7:a2:10:30:2c:82:dd:e7:92:
                    06:35:ab:97:b7:fb:f4:80:22:e7:92:e5:a2:e5:d6:
                    d2:95:f0:38:b3:9c:df:15:ce:9b:5c:58:ea:58:a3:
                    58:c2:2f:ed:e7:09:45:cb:78:ab:1a:2d:c9:e9:b6:
                    16:82:2e:97:82:9d:91:63:4c:7b:41:f1:61:e7:7d:
                    5e:31:30:3a:55:f0:8d:d6:95:21:9c:df:27:ff:58:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:37:9C:27:63:AB:24:AC:66:F2:39:64:94:B1:6F:17:FB:D9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4c:2e:1f:64:8e:57:7d:27:39:a8:5a:a2:04:f4:0d:79:6c:
         05:ba:23:4e:60:c0:ce:2f:88:ff:ae:cf:e3:d3:e7:9d:fa:6d:
         0c:b8:e0:4f:c7:ed:eb:b4:15:82:a4:e5:65:9c:83:74:8f:8a:
         57:cb:f1:94:a4:ed:78:ab:12:20:67:09:e0:4f:f5:bd:24:4b:
         97:30:df:39:c0:a5:65:23:11:c1:73:74:c4:85:9a:d6:00:f5:
         93:a2:bd:58:38:af:ae:94:8f:d4:0f:fc:70:83:15:5d:c3:35:
         18:da:12:ee:e8:cf:b1:fa:de:f5:3b:fe:c6:ed:30:ca:d9:39:
         e8:19:13:e8:d8:c9:cb:29:51:21:cb:bc:63:38:38:4c:3c:ca:
         49:7b:ee:1b:8e:57:47:30:87:94:db:94:a7:4c:d1:4f:6b:14:
         9f:55:5b:56:41:fe:a0:0e:04:ff:49:6f:3f:4c:40:8f:f5:79:
         78:f2:1c:ed:e6:81:32:b5:6f:95:f4:bb:ed:21:59:9f:55:2a:
         e1:57:7e:c3:30:f2:5b:67:0a:3f:3c:56:f0:e0:42:24:7e:67:
         d7:cf:59:17:52:f7:18:a3:7e:ca:d4:3a:12:e6:f5:86:58:5a:
         d2:6e:4c:b9:bb:c7:10:f5:88:e5:46:00:f3:b7:43:a9:12:e7:
         dd:85:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:06:21 2025 by rpki-client