This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
File:                     70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft (raw, json)
Hash identifier:          YQ8DYcW58+34mxEbEJsg07AaDJ2P7apK98AcbnznyGU=
Subject key identifier:   9A:68:CF:7E:4E:F8:6D:A3:D6:49:F3:6C:45:94:66:F2:F9:39:F7:4F
Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0
Certificate issuer:       /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
Certificate serial:       010D0C9F4328584C4011BE990F365786DC4CE540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
Manifest number:          010D0C9F432858454085274C375F806199848E50
Signing time:             Sat 20 Dec 2025 14:02:04 +0000
Manifest this update:     Sat 20 Dec 2025 14:02:04 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:00 +0000
Files and hashes:         1: 51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (hash: r3Rq7UE9XrtwsRvmAjZWNy85xOBYIws8lsYEBLORVq4=)
                          2: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl (hash: RNDKbpJxNTEEgGrUXhbDKRRkp93k4d/IySFT9XgIkEk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:11:be:99:0f:36:57:86:dc:4c:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
        Validity
            Not Before: Dec 20 14:02:04 2025 GMT
            Not After : Dec 21 20:00:00 2025 GMT
        Subject: CN=f3a91f4c-97bd-4272-9982-cc6e1684235a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:c1:e1:a1:35:86:41:55:1c:07:00:97:bf:
                    4a:9b:a7:0b:0c:89:c9:64:a2:c4:a5:ae:25:3b:e6:
                    07:ab:c7:ba:56:d2:d8:07:6b:d2:cf:3e:67:d6:60:
                    68:1b:52:fc:3a:1a:3f:c2:d2:ec:ed:af:a0:00:82:
                    c3:20:6d:66:ee:6b:06:d9:a9:56:94:6b:a7:ce:a4:
                    95:96:31:b7:b6:f3:58:84:5f:d9:97:64:3e:68:6a:
                    db:8a:41:2d:4d:e7:7e:61:32:1d:37:02:96:cd:cb:
                    98:14:09:2a:f5:94:5f:57:08:9d:b4:f2:af:78:fe:
                    b3:4c:83:12:e4:3b:13:d6:35:b4:3c:25:51:1a:87:
                    b7:5d:04:ca:e3:ab:d1:cb:de:88:53:30:90:4b:57:
                    e6:60:42:3e:2d:2e:58:ff:4b:e9:04:13:32:93:7f:
                    82:e6:49:91:94:b4:dc:32:ce:51:cc:01:f4:2e:69:
                    83:22:a1:29:33:fe:bb:d2:82:31:0b:59:6f:e3:75:
                    00:47:da:65:ac:18:ce:7d:ef:72:8b:4a:e9:e6:fd:
                    ee:b4:b0:67:1c:ad:16:85:10:e5:16:e6:a3:ba:67:
                    fb:54:c5:cd:2b:72:c8:e3:fa:23:ce:80:44:6c:17:
                    5e:1c:45:8d:3f:d8:ca:3b:0a:92:2a:ac:55:ff:6b:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:68:CF:7E:4E:F8:6D:A3:D6:49:F3:6C:45:94:66:F2:F9:39:F7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl

            X509v3 Authority Key Identifier:
                keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:e3:72:24:bb:ea:d9:5a:18:36:44:97:06:37:e9:76:75:
         38:bb:05:99:de:4f:c6:d4:c8:39:85:6f:53:ae:07:b8:54:5e:
         a8:70:de:de:66:18:0f:9f:44:c7:6d:33:e6:b1:57:ac:ec:f3:
         52:17:17:84:32:5e:15:73:8e:76:6b:d2:3b:4c:1d:f7:21:d2:
         e1:15:3e:05:1a:f4:1a:6c:49:89:0b:3d:bf:d5:d7:96:ae:f1:
         b8:78:66:e9:4e:d8:83:8f:9a:7e:d0:6e:ae:cc:f3:ab:2c:2a:
         4c:4e:a6:18:f0:cc:a2:0f:36:58:a0:da:de:fc:55:03:86:dc:
         43:d9:1b:f2:61:da:ac:5a:90:11:02:64:5a:f3:9c:d5:fe:f7:
         a7:0b:11:ad:51:12:8f:4a:de:52:ca:e5:5b:7e:41:a4:ad:05:
         06:5c:07:4f:af:85:db:09:22:e0:07:bc:94:ba:fe:79:38:7b:
         cd:0a:a8:0c:59:c3:21:c8:1e:7f:db:fe:ba:6d:47:60:32:e7:
         c5:9b:7f:82:4c:79:26:d3:f3:16:76:71:08:d7:d4:a8:ff:1a:
         48:fd:e8:51:65:92:76:cb:b1:69:a4:02:92:c0:bd:26:1a:03:
         59:ab:c9:c6:cc:84:ea:59:4b:f3:fe:27:63:a3:6b:43:58:34:
         b4:7a:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----