This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
File:                     324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json)
Hash identifier:          Bg8kfpPEt6WXOEUE060TY8S55Z2YMAkhh3OjoZWVaAk=
Subject key identifier:   96:85:DF:58:02:3D:90:9B:0C:CC:C9:B9:F9:C3:CD:81:86:5A:52:E3
Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84
Certificate issuer:       /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
Certificate serial:       010D0C9F4328584C40E140CAD9553B8FCB256380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
Manifest number:          010D0C9F43285847EC999102C00F9169FD079A35
Signing time:             Sat 20 Dec 2025 21:00:08 +0000
Manifest this update:     Sat 20 Dec 2025 21:00:08 +0000
Manifest next update:     Mon 22 Dec 2025 21:00:00 +0000
Files and hashes:         1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: Es5kECgBfkSKBcRYKhjMX12m4fTatLnmC/NKeuCxf/k=)
                          2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: cQ9RsZSqLz+7oCsoX8xRPcA1ut8lrLrb6NNGKr+awlU=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:e1:40:ca:d9:55:3b:8f:cb:25:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
        Validity
            Not Before: Dec 20 21:00:08 2025 GMT
            Not After : Dec 22 21:00:00 2025 GMT
        Subject: CN=5350ee84-8c38-4703-9b05-107c0fe442f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:6c:46:27:78:5d:0c:f1:68:2b:b1:27:d6:
                    22:e6:fd:86:92:fc:6f:f2:f3:d5:dc:9f:1a:37:2c:
                    e1:08:cb:31:c2:6d:e1:39:c6:4c:65:d7:5e:c9:71:
                    d0:c8:be:40:5e:87:c5:49:55:fe:71:cb:99:f5:d0:
                    88:f5:6f:29:22:8d:f9:25:07:a4:a5:2e:5d:01:b1:
                    1b:b9:d2:cc:3f:0a:60:aa:d2:88:50:70:3b:85:b2:
                    ab:d3:99:a6:08:58:70:21:55:a8:00:f3:84:07:bf:
                    ce:a1:c4:96:cc:28:59:5c:8a:1a:88:2e:16:a7:48:
                    05:c5:ff:6b:ac:5b:2b:fa:4a:be:a5:bf:15:9f:2d:
                    3d:f3:9c:9e:1a:d7:ee:1c:07:5e:2d:00:ce:e9:f5:
                    53:f2:7b:c7:b0:8f:af:54:c2:e0:70:0d:00:97:fc:
                    5c:5a:83:6d:ad:40:ef:2f:03:97:9f:c3:05:4d:ff:
                    d3:c0:4f:fd:1f:1d:ec:e8:3d:4c:16:bd:1f:89:a6:
                    f1:38:9a:a1:4d:8e:f3:f6:e4:5c:c8:c3:0c:a9:85:
                    a5:e6:43:52:fc:dd:c5:aa:67:ad:de:8f:3f:38:30:
                    c7:45:dc:84:b1:ce:cb:61:e1:34:84:2f:09:29:e3:
                    42:03:1a:8c:77:6c:87:d3:42:7d:bc:d5:c3:9f:07:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:DF:58:02:3D:90:9B:0C:CC:C9:B9:F9:C3:CD:81:86:5A:52:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl

            X509v3 Authority Key Identifier:
                keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:39:7d:41:db:78:81:b6:9c:2b:7e:1d:20:01:9b:5e:28:2c:
         04:c9:d5:04:17:8e:1a:e7:e3:39:bd:3b:9f:83:44:ef:e1:62:
         82:2b:4f:6e:a9:e1:89:67:2e:82:68:34:d6:4b:fe:d3:66:d3:
         bb:b3:24:0a:12:7e:e4:a5:2e:b1:6f:92:1c:a8:65:ef:87:e5:
         a7:0f:aa:75:8e:7e:e8:38:27:9d:cd:80:f6:9d:f4:5c:30:de:
         91:83:ad:28:67:6a:ad:7c:c8:54:31:36:5b:45:0d:f1:61:dd:
         73:d9:a5:01:7f:ca:c4:a3:db:04:d5:4f:d8:7b:2c:bd:25:1b:
         6d:c3:49:a0:11:45:5f:bb:1f:86:6b:15:e2:cb:6b:e5:0c:e7:
         8f:6d:04:69:b7:8c:ca:02:94:6c:13:bf:9d:2d:e3:63:65:a7:
         76:24:0d:37:3a:56:bc:18:39:6c:6e:14:f3:10:ce:13:2a:bf:
         23:aa:f0:61:ce:53:3f:5d:5a:16:bf:40:3b:28:b2:c4:f3:a6:
         95:fe:d6:77:43:bb:e5:60:ec:7e:75:28:81:37:fc:4a:6b:cc:
         8a:44:95:65:15:3c:f7:e3:79:43:85:8f:74:b5:cc:a5:5d:6e:
         90:14:dc:97:21:7d:c7:8c:a7:7c:46:02:c1:88:28:b1:3a:29:
         bb:17:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----