This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft
File:                     b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json)
Hash identifier:          7lRfgFlvcZB/1ZUI4KWxHWC4KFTWc59CUgx12is8BUM=
Subject key identifier:   75:15:03:6A:AB:FF:9A:D7:53:59:E5:B1:36:F1:DA:28:95:BF:11:4E
Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16
Certificate issuer:       /CN=b520faac-792a-4f70-8f4c-be06a5992ae1
Certificate serial:       010D0C9F4328584C37CE7BAE0FF05A1406A407C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft
Manifest number:          010D0C9F432858454B120EB453C95356C481C68A
Signing time:             Wed 17 Dec 2025 15:00:03 +0000
Manifest this update:     Wed 17 Dec 2025 15:00:03 +0000
Manifest next update:     Fri 19 Dec 2025 15:00:00 +0000
Files and hashes:         1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: 6jgWxKtb7g0H1u32dbxApm06UNma5XQo9xjQOEV3teU=)
                          2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: JLrDAa1vQQp+qjPPkZJZEwlegc079JrCw57IE532Mlw=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:37:ce:7b:ae:0f:f0:5a:14:06:a4:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1
        Validity
            Not Before: Dec 17 15:00:03 2025 GMT
            Not After : Dec 19 15:00:00 2025 GMT
        Subject: CN=81278730-2406-4a5a-a2ab-297dbf676148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:cf:54:2c:e3:7a:8a:5b:47:c4:b2:f1:6d:
                    65:6b:b2:93:60:2f:8b:b7:65:20:52:cc:f6:2a:32:
                    35:e7:b5:f5:80:97:01:a5:cb:b2:dc:ec:39:2b:b7:
                    46:04:7f:2a:e2:5a:c2:66:fe:ab:9b:1e:5f:77:0a:
                    09:fc:c9:c1:a0:ae:df:10:f1:1f:34:77:c7:59:17:
                    d9:77:2f:bb:33:35:58:ce:1d:1a:4b:08:fe:2d:a8:
                    24:9d:0a:93:40:93:de:20:1c:e1:14:7a:22:0f:95:
                    43:41:a8:52:20:10:c7:9e:d1:6a:90:96:90:af:0c:
                    6c:17:dc:b5:a6:76:9b:9e:62:17:97:b8:09:16:16:
                    94:9e:a7:3c:0c:8f:db:ae:21:0c:ce:f1:52:35:b6:
                    8e:f0:ae:13:48:5c:e0:bf:2c:3f:e6:dd:70:40:c4:
                    e5:c4:f1:cf:04:d7:e7:eb:c0:0e:ba:55:ff:ab:26:
                    31:53:b1:8d:6c:21:74:41:41:c5:6b:c6:be:91:c1:
                    83:7f:48:17:53:72:0e:2b:b8:3b:f3:74:1f:7e:b6:
                    24:a0:7b:f9:3f:0d:e4:e4:3a:cb:0a:1f:df:dd:64:
                    86:c0:b2:96:6e:3b:fc:e2:31:33:eb:ba:fc:a4:30:
                    b6:99:cf:14:84:f7:d7:b4:27:a6:df:aa:b1:1c:83:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:03:6A:AB:FF:9A:D7:53:59:E5:B1:36:F1:DA:28:95:BF:11:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl

            X509v3 Authority Key Identifier:
                keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:91:90:a0:de:d0:ca:f5:dc:87:dc:46:cd:cd:26:ae:b4:0b:
         f4:7e:90:9e:38:bb:01:c1:f4:06:50:b9:14:a9:b3:e4:ee:40:
         ae:12:bf:65:b6:7d:1e:b7:df:ec:7c:8a:b2:05:7c:ea:09:17:
         60:e8:83:a9:58:40:f6:ed:e2:26:b9:d6:f1:f3:06:01:96:99:
         e2:8c:cd:87:cd:09:cc:6f:8b:58:6a:6a:19:a6:0a:78:c4:fc:
         2a:d0:f6:e4:ca:68:b8:9f:18:e2:f7:36:55:34:6a:b6:f2:26:
         7e:95:1a:12:f3:e7:62:1a:8e:01:1f:f2:02:7a:95:04:c1:c2:
         54:94:ed:4c:e5:65:0a:ca:7a:27:1f:f7:d7:8d:eb:1a:97:03:
         52:0e:c1:b4:43:f1:7f:aa:65:a4:71:3b:d6:b1:46:67:2e:b9:
         be:e0:86:08:40:d8:4e:0a:3f:96:b1:84:07:0f:d6:8f:6c:6d:
         24:45:14:6a:ee:4c:a6:93:75:47:3c:88:14:72:75:3d:52:5a:
         e2:5e:4c:fb:27:b5:a5:d8:1b:ba:90:a5:6d:80:07:06:a9:13:
         38:5a:c1:be:84:44:9d:f8:cf:30:ac:e2:11:59:8a:a5:50:42:
         32:a8:79:c2:a7:88:b8:06:79:02:35:6d:43:cf:12:9b:92:bf:
         72:3e:9e:8b
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw3znuuD/BaFAakB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky
YWUxMB4XDTI1MTIxNzE1MDAwM1oXDTI1MTIxOTE1MDAwMFowLzEtMCsGA1UEAxMk
ODEyNzg3MzAtMjQwNi00YTVhLWEyYWItMjk3ZGJmNjc2MTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9fPVCzjeopbR8Sy8W1la7KTYC+Lt2UgUsz2
KjI157X1gJcBpcuy3Ow5K7dGBH8q4lrCZv6rmx5fdwoJ/MnBoK7fEPEfNHfHWRfZ
dy+7MzVYzh0aSwj+LagknQqTQJPeIBzhFHoiD5VDQahSIBDHntFqkJaQrwxsF9y1
pnabnmIXl7gJFhaUnqc8DI/briEMzvFSNbaO8K4TSFzgvyw/5t1wQMTlxPHPBNfn
68AOulX/qyYxU7GNbCF0QUHFa8a+kcGDf0gXU3IOK7g783QffrYkoHv5Pw3k5DrL
Ch/f3WSGwLKWbjv84jEz67r8pDC2mc8UhPfXtCem36qxHIP/ewIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFHUVA2qr/5rXU1nlsTbx2iiVvxFOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw
ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00
ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm
NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5
MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2
YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZkZCg3tDK9dyH3EbNzSau
tAv0fpCeOLsBwfQGULkUqbPk7kCuEr9ltn0et9/sfIqyBXzqCRdg6IOpWED27eIm
udbx8wYBlpnijM2HzQnMb4tYamoZpgp4xPwq0Pbkymi4nxji9zZVNGq28iZ+lRoS
8+diGo4BH/ICepUEwcJUlO1M5WUKynonH/fXjesalwNSDsG0Q/F/qmWkcTvWsUZn
Lrm+4IYIQNhOCj+WsYQHD9aPbG0kRRRq7kymk3VHPIgUcnU9UlriXkz7J7Wl2Bu6
kKVtgAcGqRM4WsG+hESd+M8wrOIRWYqlUEIyqHnCp4i4BnkCNW1DzxKbkr9yPp6L
-----END CERTIFICATE-----