This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
File:                     ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft (raw, json)
Hash identifier:          XbwGNz56bu/pc5HI9GgJAoGUjkhSfSMX2Dlmt1P5+jQ=
Subject key identifier:   8D:A4:45:45:12:20:87:9A:02:EF:9E:F3:9B:9C:F4:CF:5D:20:59:3F
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584C470B759E7471710649355980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
Manifest number:          010D0C9F4328584073A83658BAB2F242DC44567F
Signing time:             Tue 23 Dec 2025 02:00:04 +0000
Manifest this update:     Tue 23 Dec 2025 02:00:04 +0000
Manifest next update:     Fri 26 Dec 2025 02:00:00 +0000
Files and hashes:         1: 17688313-b672-388e-bef1-cd24e224ed7e.roa (hash: rhNm9UU0rgvJEhD5PU7warG6dKsBvsJDRv/fE7AEGu0=)
                          2: 38849820-bd67-31ee-910f-a7325f635489.roa (hash: zomVwLuh3sdpOP7g7CD6phzf5HiF7C48FOx8Kk6hi0M=)
                          3: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (hash: tFUHnsI2+6dX3GOZiHy8g03l4wn5bjW83aWe5oYBNNg=)
                          4: 67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (hash: 8T8ZVcfqqRKizURLm/kQesUofGrBEEvk7TfcwFYFJC8=)
                          5: b0ec175b-098d-3374-a654-a890d9f9f81f.roa (hash: ULRttdVx3xgvPpY3i+hS+zpAO4trqcJl+J0yhhBqa1g=)
                          6: ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl (hash: yCxfF5CIHZiP+0w9g1r52n2ogRQylBsFoxOcMLRmWxc=)
                          7: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (hash: 87ypabGf45zUJ3m7eywd7TsREf9Zqz71vQRh0q0G1Do=)
                          8: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (hash: JjRYQdAECh9fRKJsBevBNmj0Rz6NBdHomQ6fk94K+yo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:47:0b:75:9e:74:71:71:06:49:35:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Dec 23 02:00:04 2025 GMT
            Not After : Dec 26 02:00:00 2025 GMT
        Subject: CN=c52c5bf7-9bc3-4ecf-acfc-c38f249375b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:31:16:a5:1e:e0:ac:54:94:84:35:3b:e5:
                    48:05:8f:1f:c5:dc:84:1d:e6:c6:5a:e0:f7:7a:8f:
                    cb:71:63:bd:54:c1:9f:ea:05:ed:ba:de:25:94:f9:
                    2a:52:15:db:b4:e2:2f:27:50:17:d9:4f:7e:2b:d0:
                    96:56:6b:de:af:c4:ef:94:f5:94:d0:d5:ee:65:16:
                    95:40:b7:5f:d2:f0:33:7b:cb:9d:c6:f6:61:d0:62:
                    ec:1c:04:cb:4a:71:98:1c:b6:63:03:b0:c1:7c:75:
                    80:35:fc:4c:9a:0b:c7:66:d1:35:3c:01:f5:b1:e5:
                    37:43:34:48:57:97:0d:28:b0:4a:f5:63:8a:fc:81:
                    9f:38:6e:d8:37:f2:ec:25:d4:26:33:0a:72:d9:6f:
                    f3:26:3c:63:0c:68:45:37:8d:53:52:82:e5:b6:95:
                    e8:7b:18:df:51:0e:a0:d8:21:f7:ae:70:d2:cb:0d:
                    09:b3:ef:be:3d:3c:0a:ee:9f:1f:14:38:66:09:9b:
                    83:e2:36:ce:5e:66:53:0b:15:68:7c:dc:7c:8f:b5:
                    04:ca:25:b6:85:54:ce:63:75:94:de:6c:52:c4:22:
                    f7:ef:c9:92:8c:f1:8c:8f:01:9c:2d:e1:5b:7f:76:
                    41:1c:e9:7d:4e:39:ab:37:e6:76:e1:a4:7d:75:f4:
                    89:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A4:45:45:12:20:87:9A:02:EF:9E:F3:9B:9C:F4:CF:5D:20:59:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:12:ce:cc:ba:73:42:2e:77:08:d4:8b:4c:ec:c3:ad:54:9c:
         86:14:e9:e3:de:16:e6:22:bb:95:84:b7:a8:cf:e7:0f:66:34:
         60:dd:08:d1:ad:d9:72:a5:68:7b:cc:df:e1:8e:87:8c:38:92:
         71:10:76:98:68:e2:3a:ac:63:4d:7f:95:17:1d:9b:6d:89:bb:
         15:12:16:4b:4d:5d:4f:78:07:db:79:d1:19:cc:47:7c:84:65:
         28:c4:dd:97:5a:5e:c4:fb:a0:ba:6b:72:f4:30:86:16:c3:02:
         e1:f1:63:80:11:d7:b9:7f:56:12:ca:1d:2e:4f:47:ab:b1:8a:
         e7:50:3f:41:e3:b4:a6:e5:02:72:90:59:ef:70:3c:4c:78:09:
         10:14:a8:c9:a9:a5:dd:fe:a5:a6:54:29:6f:c8:ce:25:c6:c4:
         80:26:05:18:eb:37:2c:b5:70:ed:b7:a7:9c:92:bf:14:98:7b:
         c4:9f:36:fb:fe:f7:dd:a6:0c:eb:c2:ef:bc:54:57:5b:57:e0:
         f2:a4:08:32:ed:53:d1:48:a0:7f:88:8f:8e:a8:54:eb:5f:9a:
         f4:5b:d6:89:aa:f0:2f:e1:f7:6d:75:a5:77:40:1f:d6:c0:b0:
         96:83:c6:14:be:b1:1d:22:35:f6:d9:46:a9:82:f3:6b:45:78:
         da:3d:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:05:27 2025 by rpki-client