This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft
File:                     a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft (raw, json)
Hash identifier:          +fFEi3Et/vra7Jm+43OArxVH2rnmfq+IaE+nC8d6Fl4=
Subject key identifier:   B1:78:79:98:8A:2E:9B:44:20:6B:4C:0B:E2:9F:B5:B2:1D:92:CB:9D
Authority key identifier: E4:AD:5E:A6:0D:F7:5B:9A:24:A4:7A:E5:5B:BA:19:4C:5E:D6:A1:F3
Certificate issuer:       /CN=a0c46ba8-9ebf-4560-95e2-b7355f9d111c
Certificate serial:       010D0C9F4328584C3EAB688FB11C13A4379CDB40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft
Manifest number:          010D0C9F432858455D24A683FF9FED12659D6446
Signing time:             Sat 20 Dec 2025 02:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 02:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:00 +0000
Files and hashes:         1: 7cfbebee-15d8-3b48-be0b-6522986ff043.roa (hash: 7SKPVUFZi6HI6/LHmN65dGQ7Mobqv9C873CYlemcoZI=)
                          2: a0c46ba8-9ebf-4560-95e2-b7355f9d111c.crl (hash: Hol0W5oa8Q1mO+LP+B99heYoxEpHc3PV6FIa9tRFrCg=)
                          3: faf4580c-c015-3e52-bdda-d1689d05ec9f.roa (hash: JMTxd4dISR2drt0K/v+95Q8oMAMGAKIA68+Qq8Yieb4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:ab:68:8f:b1:1c:13:a4:37:9c:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c46ba8-9ebf-4560-95e2-b7355f9d111c
        Validity
            Not Before: Dec 20 02:00:03 2025 GMT
            Not After : Dec 22 02:00:00 2025 GMT
        Subject: CN=45bf2d5b-252a-4874-8a0e-3ecf5752972e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:46:71:71:cf:b7:50:06:2b:c9:d6:55:1a:
                    33:3f:77:1a:60:f2:2f:2b:27:e2:a5:61:52:9e:20:
                    11:36:40:a1:69:7a:0c:81:a4:9e:e7:d2:ae:f2:5d:
                    01:5b:06:1f:bd:c3:b8:ec:0c:eb:6f:5d:69:de:dc:
                    84:75:87:6b:7e:69:13:f0:95:8a:0f:3d:61:ac:1a:
                    06:d8:2c:ac:05:ee:ac:80:5f:df:b3:7c:b1:c9:5a:
                    8c:30:d0:cc:06:00:6f:c9:48:57:b1:4c:70:db:01:
                    8b:bf:cb:5b:6d:a3:50:07:4c:e0:5e:79:1e:f5:d2:
                    1f:0f:f9:cf:27:3a:36:f8:9b:a7:b0:b1:90:df:ce:
                    bd:65:5e:b0:4f:15:00:1e:68:51:00:bf:af:91:f0:
                    8d:39:5a:dc:d4:dc:84:a3:80:a1:99:ec:1d:44:17:
                    f2:e3:a0:d0:2d:44:c8:99:88:6c:20:11:99:62:0d:
                    1e:53:53:62:1e:ba:ff:7a:45:b6:43:69:a8:14:33:
                    9f:78:6e:70:99:d7:97:9b:b9:1e:c9:36:53:2b:f6:
                    8f:71:93:39:70:86:e2:5d:54:69:f0:d9:f4:93:15:
                    54:08:f3:76:42:12:39:e9:57:04:07:b7:6b:82:67:
                    81:89:c7:d4:de:c3:28:5f:c0:d1:f6:7a:13:4a:a0:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:79:98:8A:2E:9B:44:20:6B:4C:0B:E2:9F:B5:B2:1D:92:CB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.crl

            X509v3 Authority Key Identifier:
                keyid:E4:AD:5E:A6:0D:F7:5B:9A:24:A4:7A:E5:5B:BA:19:4C:5E:D6:A1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0c46ba8-9ebf-4560-95e2-b7355f9d111c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:03:11:67:b6:a8:4f:af:f9:ce:fc:0e:72:2e:d8:26:e0:b0:
         09:ad:af:9d:8e:a6:3e:d1:cb:63:4d:ba:4d:14:8c:53:5e:9c:
         76:0a:87:30:f4:af:28:29:91:9d:16:06:e0:5a:d1:c2:c8:6c:
         ef:a4:00:82:d8:44:2c:67:27:72:30:5c:e9:f9:f9:ed:49:db:
         77:76:57:91:54:b8:89:3c:51:92:b5:47:6a:18:fd:c1:26:2b:
         65:3e:0d:ce:ae:33:e2:8f:1c:58:57:33:ae:2e:d5:4e:3b:e9:
         ba:bd:32:bd:54:f6:e5:c8:09:1a:f9:39:d1:87:7a:bc:dd:64:
         0e:5e:f5:11:2f:78:fe:b0:c1:77:61:10:43:b6:78:a7:d6:85:
         1e:77:3b:65:26:5d:55:36:90:e5:b6:63:7a:85:c4:58:6a:b7:
         14:d1:22:16:10:51:c3:81:a6:63:37:2a:76:77:f2:c3:3f:e7:
         97:99:c3:b2:34:48:7b:73:8d:22:9c:a7:c2:2b:72:ec:37:c6:
         d6:25:be:6e:88:fc:47:ee:00:b9:ad:16:3d:c6:f3:3b:da:7c:
         93:41:83:39:b2:e1:cb:85:4c:29:07:c5:dd:01:65:a9:90:fa:
         44:20:b1:aa:b7:6f:15:23:5b:35:0f:17:6c:0d:9f:a4:1a:b1:
         52:9d:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:37:59 2025 by rpki-client